{
  "Event": {
    "analysis": "1",
    "date": "2026-07-14",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-07-15",
    "publish_timestamp": "1784134802",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1784131206",
    "uuid": "334351d3-2f2f-43cd-8db9-ce2d8b787364",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T07:00:03+00:00",
        "timestamp": "1784098803",
        "to_ids": false,
        "type": "url",
        "uuid": "10ecb1ab-f7f4-42c9-83cb-5aa57a77eee3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2dcc2b18c52113177e1868b7ad8545e6050e2eb3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T07:00:03+00:00",
        "timestamp": "1784098803",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5b8f86b-6ed7-465e-a8ce-7639fcc5946f",
        "value": "devz.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T07:00:03+00:00",
        "timestamp": "1784098803",
        "to_ids": false,
        "type": "url",
        "uuid": "b367cbf6-4b64-4984-a219-3fc6bcc95626",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4fec9890d4999abc43fa7353cf33c94ade86ad77",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T07:00:03+00:00",
        "timestamp": "1784098803",
        "to_ids": true,
        "type": "domain",
        "uuid": "10ee3b86-7227-4fd9-ada7-b91f9613f550",
        "value": "pumprate.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T07:00:03+00:00",
        "timestamp": "1784098803",
        "to_ids": true,
        "type": "domain",
        "uuid": "010273e0-1d2e-49a7-b938-268b1c03d38c",
        "value": "pumprewards.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T09:00:02+00:00",
        "timestamp": "1784106002",
        "to_ids": false,
        "type": "url",
        "uuid": "69196586-5302-4504-ab8b-9105bcf1db47",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fbf4e510046e3dc14d5a520c60ea1158a4a25d30",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T09:00:03+00:00",
        "timestamp": "1784106003",
        "to_ids": true,
        "type": "domain",
        "uuid": "5de54110-a300-482d-bace-417c4d02c461",
        "value": "neciga.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:03+00:00",
        "timestamp": "1784109604",
        "to_ids": false,
        "type": "url",
        "uuid": "81c476a0-facc-4267-af9c-25171bb5b0d5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ada8d81f412bed169b436f1f9634371934303023",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:04+00:00",
        "timestamp": "1784109605",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd4cbdee-deaf-47be-969a-f65625fa4336",
        "value": "ambercompanion.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:05+00:00",
        "timestamp": "1784109605",
        "to_ids": true,
        "type": "domain",
        "uuid": "576f67c3-a584-4056-84d3-ae2d5da50ccc",
        "value": "ambergallery.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:05+00:00",
        "timestamp": "1784109605",
        "to_ids": true,
        "type": "domain",
        "uuid": "f20d2d8e-41de-49fb-8f04-456e11c28827",
        "value": "bronzehorizon.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:06+00:00",
        "timestamp": "1784109606",
        "to_ids": true,
        "type": "domain",
        "uuid": "06f8459b-e8e2-4635-ac51-3a23158f116f",
        "value": "bronzewhisper.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:06+00:00",
        "timestamp": "1784109606",
        "to_ids": true,
        "type": "domain",
        "uuid": "4509c90d-f58f-4459-9199-843b60d5a0ca",
        "value": "cedarfrontier.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:06+00:00",
        "timestamp": "1784109606",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a971027-cf05-4c64-9aa2-290ca35b9f6f",
        "value": "cobaltmeadow.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:06+00:00",
        "timestamp": "1784109606",
        "to_ids": true,
        "type": "domain",
        "uuid": "94fbc1d7-4e7f-4ee9-ab50-26f2c755e6c5",
        "value": "cobaltorchard.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:07+00:00",
        "timestamp": "1784109607",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4004920-fb92-4e43-8f98-2904381b36dc",
        "value": "copperhorizon.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:07+00:00",
        "timestamp": "1784109607",
        "to_ids": true,
        "type": "domain",
        "uuid": "af75c424-dc1c-4aa0-aecf-c4132b9bb2a8",
        "value": "coralfrontier.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:07+00:00",
        "timestamp": "1784109607",
        "to_ids": true,
        "type": "domain",
        "uuid": "14bc7ca1-42dc-4e47-9bdd-fb0c4a020cd0",
        "value": "coralregistry.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:07+00:00",
        "timestamp": "1784109607",
        "to_ids": true,
        "type": "domain",
        "uuid": "34ba4076-7cb7-4a27-86fa-d897c12be0c7",
        "value": "coralwayfinder.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:07+00:00",
        "timestamp": "1784109607",
        "to_ids": true,
        "type": "domain",
        "uuid": "5881187b-f106-4aff-ae7f-c399afe42229",
        "value": "crystalmarket.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:07+00:00",
        "timestamp": "1784109607",
        "to_ids": true,
        "type": "domain",
        "uuid": "876dd79f-fecb-4d1d-a864-a55966f4d3f7",
        "value": "hazelcanvas.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:08+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5b7c38d-0672-441c-b87e-2952fcb95394",
        "value": "hazelcompass.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:08+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "c77a98e9-59c8-421e-9e7f-7e4fda06e4d3",
        "value": "ivoryharvest.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:08+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "49ae66a3-fa44-4860-9208-e1924b0fc6a8",
        "value": "ivorysummit.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:08+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6dce13a-4e87-4226-99ab-c5e0c824148a",
        "value": "jadecrossroads.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:08+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "49bc8553-5489-4424-8162-687254402d18",
        "value": "jadepassagehub.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:08+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "897540bc-9e1e-41db-a9e7-135608fd3bc2",
        "value": "jadeworkshop.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109608",
        "to_ids": true,
        "type": "domain",
        "uuid": "570c416d-6a1b-4209-adaf-2e0b65c8dff8",
        "value": "marblebeacon.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109609",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb78d6ac-fabc-498e-b1a8-cf3c8e4b26ee",
        "value": "marblecourier.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109609",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6e8aaff-f398-487d-ae74-8beea2c725a8",
        "value": "marblehaven.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109609",
        "to_ids": true,
        "type": "domain",
        "uuid": "89949970-73bd-459f-9700-4052142e0c04",
        "value": "moonlitprovince.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109609",
        "to_ids": true,
        "type": "domain",
        "uuid": "2892a9a1-c3d3-412c-b6d6-9c83c4848e79",
        "value": "openmeadowlab.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9abe05d-45c7-4e84-b437-1a9a25f53c09",
        "value": "pearljunction.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:09+00:00",
        "timestamp": "1784109609",
        "to_ids": true,
        "type": "domain",
        "uuid": "2141742f-2351-42e2-a8eb-3ead0b5d80a7",
        "value": "raneemjin.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:10+00:00",
        "timestamp": "1784109610",
        "to_ids": true,
        "type": "domain",
        "uuid": "45b33363-7208-49d8-86ac-f202ee9040db",
        "value": "saffronjunction.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:10+00:00",
        "timestamp": "1784109610",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ef6a566-2175-40ca-9b2a-35c732214a51",
        "value": "silvercourier.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:10+00:00",
        "timestamp": "1784109610",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fb66990-785d-4370-813b-4271bbe754ea",
        "value": "silvertrailhub.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:10+00:00",
        "timestamp": "1784109610",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dc94a80-3f9a-4eec-a002-d4bd4c9f9e62",
        "value": "stoneharvest.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:10+00:00",
        "timestamp": "1784109610",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5713587-852d-4e33-be22-511f075f731b",
        "value": "topazharbor.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:10+00:00",
        "timestamp": "1784109610",
        "to_ids": true,
        "type": "domain",
        "uuid": "618e0477-b0a2-42d8-bab5-18794f89e664",
        "value": "velvetcrossing.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:11+00:00",
        "timestamp": "1784109611",
        "to_ids": true,
        "type": "domain",
        "uuid": "f77a8c83-7dff-42b2-b2e5-e1fc5c0c5718",
        "value": "willowregistry.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_zphp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:11+00:00",
        "timestamp": "1784109611",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bbf36c6-7d28-4086-b773-b61adee91389",
        "value": "willowsummit.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:11+00:00",
        "timestamp": "1784109611",
        "to_ids": false,
        "type": "url",
        "uuid": "bab59093-effd-4f28-92f7-3ebcc10281b5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9c1a05913d71e7d646e5b846dabaaac11307e93c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:11+00:00",
        "timestamp": "1784109611",
        "to_ids": true,
        "type": "domain",
        "uuid": "883aa275-17d0-43a5-a686-4348eac49e0a",
        "value": "gugonaftikzin.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:11+00:00",
        "timestamp": "1784109611",
        "to_ids": true,
        "type": "domain",
        "uuid": "43c03fda-ea89-41da-a639-be6f4741ba9f",
        "value": "iseeyouballs.beer",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:11+00:00",
        "timestamp": "1784109611",
        "to_ids": false,
        "type": "url",
        "uuid": "c2290e6a-1051-4551-8588-599435116395",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b97e025da0e7855ac75cd1e6d4f57357cb342418",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:12+00:00",
        "timestamp": "1784109611",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbd98c59-cb50-4b39-968b-549d9b980bda",
        "value": "amwinmsnt.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:12+00:00",
        "timestamp": "1784109612",
        "to_ids": true,
        "type": "domain",
        "uuid": "b78ec55b-958d-47dc-87db-8f8e4e521353",
        "value": "manages.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:12+00:00",
        "timestamp": "1784109612",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae8fcb03-ac60-431a-b277-25756538f7be",
        "value": "memmois.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:12+00:00",
        "timestamp": "1784109612",
        "to_ids": true,
        "type": "domain",
        "uuid": "38555191-e86b-4744-8efb-c346def446a2",
        "value": "mexop.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:12+00:00",
        "timestamp": "1784109612",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e9b92e6-605f-42c3-a3d4-829cb3dc6c2f",
        "value": "mprse.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:12+00:00",
        "timestamp": "1784109612",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcfa38e2-6e6c-4adb-af8e-e84f4c33369f",
        "value": "mprse.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109612",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b0d5e0d-2856-46b3-bf46-42f5ef2cf267",
        "value": "mrcpol.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109613",
        "to_ids": true,
        "type": "domain",
        "uuid": "431e64fa-9720-4ffa-832e-b017d385c58e",
        "value": "mrcpol.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109613",
        "to_ids": true,
        "type": "domain",
        "uuid": "a71f15a7-634b-476f-b7c3-8e5cd1cda3db",
        "value": "msnhor.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109613",
        "to_ids": true,
        "type": "domain",
        "uuid": "362d75ba-e9b0-4070-9576-0f47a043e265",
        "value": "msnomsnts.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109613",
        "to_ids": true,
        "type": "domain",
        "uuid": "70b92d88-e20a-4862-803f-cc35aef0c584",
        "value": "ncodgocheck.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109613",
        "to_ids": true,
        "type": "domain",
        "uuid": "66e1c14a-4b28-44d7-9765-d552aba5a225",
        "value": "ncodgopass.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T10:00:13+00:00",
        "timestamp": "1784109613",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d0dc730-a657-4a94-a3ee-0f31e1929df5",
        "value": "ncodgoverify.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:03+00:00",
        "timestamp": "1784124003",
        "to_ids": false,
        "type": "url",
        "uuid": "46c3048e-9336-4362-bd8e-58ad310110df",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9f7bbbd8e0628e56ad5925b458ad6c5535ad3e80",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:03+00:00",
        "timestamp": "1784124003",
        "to_ids": false,
        "type": "url",
        "uuid": "587f58cb-23d1-44b3-a06a-24d75320860f",
        "value": "https://x.com/ramimacisabird/status/2038813850179449156",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:04+00:00",
        "timestamp": "1784124004",
        "to_ids": false,
        "type": "url",
        "uuid": "4f989f05-b611-4fb6-ae6e-10ca050d4d6b",
        "value": "https://app.garnet.ai/public/detections/6c823543-6d82-5677-8048-40b38527250a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:04+00:00",
        "timestamp": "1784124004",
        "to_ids": false,
        "type": "url",
        "uuid": "dbb08074-50ff-4302-833f-a998697a8440",
        "value": "https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:04+00:00",
        "timestamp": "1784124004",
        "to_ids": false,
        "type": "url",
        "uuid": "c128f9a2-d62d-4312-99c2-4d99f410d6bc",
        "value": "https://research.jfrog.com/post/easy-day-js",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:04+00:00",
        "timestamp": "1784124004",
        "to_ids": false,
        "type": "url",
        "uuid": "ca72f639-7b50-472e-92af-ed465f70abc4",
        "value": "https://www.ox.security/blog/easy-day-js-supply-chain-attack-hits-mastra-ai-in-npm",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:05+00:00",
        "timestamp": "1784124005",
        "to_ids": false,
        "type": "url",
        "uuid": "dfdcf4fc-005a-4d1a-9376-102b335965b4",
        "value": "https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:05+00:00",
        "timestamp": "1784124005",
        "to_ids": false,
        "type": "url",
        "uuid": "b79702df-804d-4353-8586-e47be5addfd2",
        "value": "https://www.virustotal.com/gui/ip-address/142.11.206.73/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:05+00:00",
        "timestamp": "1784124005",
        "to_ids": false,
        "type": "url",
        "uuid": "39f5de30-513d-467d-9826-d07e0f625b17",
        "value": "https://www.virustotal.com/gui/file/e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:05+00:00",
        "timestamp": "1784124005",
        "to_ids": false,
        "type": "url",
        "uuid": "ed5c6251-208e-4d25-be84-3454174c3bac",
        "value": "https://www.virustotal.com/gui/file/f7d335205b8d7b20208fb3ef93ee6dc817905dc3ae0c10a0b164f4e7d07121cd/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:05+00:00",
        "timestamp": "1784124005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fdcc8944-6223-4266-94bb-df90b0a2e4d8",
        "value": "142.11.196.106",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:06+00:00",
        "timestamp": "1784124006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "cc6d2296-d9c8-40cc-99b8-bbef0b5882dd",
        "value": "142.11.206.73",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:06+00:00",
        "timestamp": "1784124006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fec99eb3-f3d8-490c-8671-288dfb372e8c",
        "value": "23.254.164.123",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:06+00:00",
        "timestamp": "1784124006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "465f3e55-5ea5-4051-947a-1795e0177ebd",
        "value": "23.254.164.61",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:06+00:00",
        "timestamp": "1784124006",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "74637efb-2a87-407c-bec6-cf33d470fc39",
        "value": "23.254.164.92",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:07+00:00",
        "timestamp": "1784124007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a75eeb6d-2e10-4db0-b1c7-9bb1e82e23d8",
        "value": "23.254.167.216",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:07+00:00",
        "timestamp": "1784124007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6a8f25fb-ec4a-45a3-a845-7c5cc6ca6c13",
        "value": "23.254.203.244",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:07+00:00",
        "timestamp": "1784124007",
        "to_ids": true,
        "type": "domain",
        "uuid": "9062a6bc-c6cc-4f35-af70-dc577902d49b",
        "value": "busyqaz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:07+00:00",
        "timestamp": "1784124007",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d9d312a-fee4-4e41-9519-01aaf69dcc9e",
        "value": "callnrwise.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:07+00:00",
        "timestamp": "1784124007",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fe4dd2f-c920-4381-9f9b-dd3cbe641c3a",
        "value": "cloudmeet.works",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:08+00:00",
        "timestamp": "1784124007",
        "to_ids": true,
        "type": "domain",
        "uuid": "346974ab-cc6c-40cd-96ef-1344a55e30fc",
        "value": "freetalks.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:08+00:00",
        "timestamp": "1784124008",
        "to_ids": true,
        "type": "domain",
        "uuid": "079b6473-1157-4088-a567-18ac8ed3d787",
        "value": "greenweb.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:08+00:00",
        "timestamp": "1784124008",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca9edc59-d6e2-4a00-8ff6-9fc10c6c65fa",
        "value": "interweb.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:08+00:00",
        "timestamp": "1784124008",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7a04850-dc33-4120-adc6-8d750d2a7e23",
        "value": "linecall.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:08+00:00",
        "timestamp": "1784124008",
        "to_ids": true,
        "type": "domain",
        "uuid": "09829e6f-b4b3-4ebd-8589-0a2b008369f9",
        "value": "lzfvefl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:09+00:00",
        "timestamp": "1784124008",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3f1cda1-dfa2-48f2-89b5-75471e79eb4e",
        "value": "maskasd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:09+00:00",
        "timestamp": "1784124009",
        "to_ids": true,
        "type": "domain",
        "uuid": "c93734f2-02f4-402a-ad7c-b1b5927a8c17",
        "value": "msweblive.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:09+00:00",
        "timestamp": "1784124009",
        "to_ids": true,
        "type": "domain",
        "uuid": "01a0afa5-5495-48c1-b20c-fef7ab9dbcfb",
        "value": "netface.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:09+00:00",
        "timestamp": "1784124009",
        "to_ids": true,
        "type": "domain",
        "uuid": "01215b49-0db1-43bf-8360-4e877d4b2fb4",
        "value": "onwebcall.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:09+00:00",
        "timestamp": "1784124009",
        "to_ids": true,
        "type": "domain",
        "uuid": "d360b570-25e7-484d-be22-c956a02927f4",
        "value": "onweblive.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:09+00:00",
        "timestamp": "1784124009",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae7edc2f-0247-4805-a64e-eaeca9a33f77",
        "value": "onwebmeet.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:10+00:00",
        "timestamp": "1784124009",
        "to_ids": true,
        "type": "domain",
        "uuid": "2eb9b0d7-4eb2-4e59-b779-f7cf3f50be36",
        "value": "sfrclak.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:10+00:00",
        "timestamp": "1784124010",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdbd4c69-ec6e-4f9e-8014-c2b154bbcda1",
        "value": "skyweb.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:10+00:00",
        "timestamp": "1784124010",
        "to_ids": true,
        "type": "domain",
        "uuid": "a62e8076-e08c-4247-a960-0c2520d28691",
        "value": "stalelive.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:10+00:00",
        "timestamp": "1784124010",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc12806f-c2fc-47bc-9f82-1a7f08f08933",
        "value": "teamsliues.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:10+00:00",
        "timestamp": "1784124010",
        "to_ids": true,
        "type": "domain",
        "uuid": "84b9160c-4fdc-4a15-89be-187be6af1938",
        "value": "us07webzoom.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:10+00:00",
        "timestamp": "1784124010",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6b66ef9-7a69-43d9-a170-c5bfc6a2b4b7",
        "value": "webtalk.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124010",
        "to_ids": true,
        "type": "domain",
        "uuid": "92d03270-9575-4045-9758-f85c37ad743d",
        "value": "webzoom.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "0340b8ad-0d6f-42b5-8629-9042afc0a937",
        "value": "zoomweb.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "82118b03-8015-489f-9dd7-a4ad9208c8b6",
        "value": "app.us07webzoom.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c57b773-c58e-4694-8764-adb4450f1dad",
        "value": "hwsrv-1320779.hostwindsdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "848d8aba-8ab9-4ce3-be08-b473294e26a5",
        "value": "mail.teamsliues.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a9afda2-7f3a-4c6a-b7ca-c46f9b7c1a26",
        "value": "teams.cloudmeet.works",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:11+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "a613969f-088f-4e90-83af-4b1b76340381",
        "value": "teams.freetalks.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:12+00:00",
        "timestamp": "1784124011",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee6e9fde-9360-4383-90e0-af4e8e895f7b",
        "value": "teams.greenweb.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:12+00:00",
        "timestamp": "1784124012",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9f6b874-de47-407f-852b-f11c358734ec",
        "value": "teams.interweb.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:12+00:00",
        "timestamp": "1784124012",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd80af51-2612-444c-9685-2091b9f4fa20",
        "value": "teams.linecall.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:12+00:00",
        "timestamp": "1784124012",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e595d38-df92-47b2-8cb0-9328bd8dccf0",
        "value": "teams.msweblive.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:12+00:00",
        "timestamp": "1784124012",
        "to_ids": true,
        "type": "domain",
        "uuid": "425d6791-5a0f-4ecf-8282-7f465eb11f19",
        "value": "teams.netface.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:12+00:00",
        "timestamp": "1784124012",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe9ac649-74f0-4915-b401-ef39f13f9952",
        "value": "teams.onwebcall.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:13+00:00",
        "timestamp": "1784124013",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ebf37e1-da98-45c5-ad28-77064c938118",
        "value": "teams.onweblive.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:13+00:00",
        "timestamp": "1784124013",
        "to_ids": true,
        "type": "domain",
        "uuid": "545fd36e-a824-465a-a659-c0d05ce7e1cb",
        "value": "teams.onwebmeet.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:13+00:00",
        "timestamp": "1784124013",
        "to_ids": true,
        "type": "domain",
        "uuid": "47d7a7bc-68e7-4f4c-8f3c-8be2f96842a6",
        "value": "teams.skyweb.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:13+00:00",
        "timestamp": "1784124013",
        "to_ids": true,
        "type": "domain",
        "uuid": "5721e635-26d6-4841-b712-486e8481655a",
        "value": "teams.stalelive.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:13+00:00",
        "timestamp": "1784124013",
        "to_ids": true,
        "type": "domain",
        "uuid": "deefbe1b-571f-46d4-b9d4-d29a6fafa0dc",
        "value": "teams.webtalk.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:14+00:00",
        "timestamp": "1784124013",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d837c1e-b004-464a-b571-b41a2078d570",
        "value": "us02web.zoomweb.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:14+00:00",
        "timestamp": "1784124014",
        "to_ids": true,
        "type": "domain",
        "uuid": "90801d3c-d8d8-463b-a0f6-8d799273c7b6",
        "value": "us05.webzoom.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:14+00:00",
        "timestamp": "1784124014",
        "to_ids": false,
        "type": "url",
        "uuid": "bb42d46d-9c0d-4684-97f1-899758e418e9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/78bbb9df7211debfe1167c75b35234b56ed3ecd5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T14:00:14+00:00",
        "timestamp": "1784124014",
        "to_ids": false,
        "type": "url",
        "uuid": "a8ff8bee-094b-4cbd-a3e7-c3c11c4bd1f7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/06f4859615c1ff70789cf3c2461f6429e9e42d57",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:05+00:00",
        "timestamp": "1784127605",
        "to_ids": false,
        "type": "url",
        "uuid": "84b47868-059e-4013-a332-cc8c9fa20811",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4113e2790ac8a0e3bfcb37f8e3092ca95e2dc805",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:05+00:00",
        "timestamp": "1784127605",
        "to_ids": false,
        "type": "url",
        "uuid": "2bbb0b75-5353-4880-943c-71bdf600ade0",
        "value": "https://www.virustotal.com/gui/ip-address/176.124.198.132/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:06+00:00",
        "timestamp": "1784127605",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7fa9aad-6f27-406e-b68e-82d99212bdc0",
        "value": "analyticape.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:06+00:00",
        "timestamp": "1784127606",
        "to_ids": true,
        "type": "domain",
        "uuid": "cce50c43-db27-43de-8bb3-51b9c77125da",
        "value": "datavoyage.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:06+00:00",
        "timestamp": "1784127606",
        "to_ids": true,
        "type": "domain",
        "uuid": "45a50b6e-21a5-4d2b-9327-975900d3145c",
        "value": "flowchartix.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:06+00:00",
        "timestamp": "1784127606",
        "to_ids": true,
        "type": "domain",
        "uuid": "7732572a-d194-4298-ad0d-011b2aeff0cd",
        "value": "infogauge.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:06+00:00",
        "timestamp": "1784127606",
        "to_ids": true,
        "type": "domain",
        "uuid": "beedab3f-eaec-4314-ab2d-1fe51eefc766",
        "value": "metricspan.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:06+00:00",
        "timestamp": "1784127606",
        "to_ids": true,
        "type": "domain",
        "uuid": "3094aff7-91d3-4fcf-9091-e54b72ed99de",
        "value": "pageglance.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:07+00:00",
        "timestamp": "1784127606",
        "to_ids": true,
        "type": "domain",
        "uuid": "537a9b75-41fc-4e8d-b1c4-9297611b13ba",
        "value": "site-builder.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:07+00:00",
        "timestamp": "1784127607",
        "to_ids": true,
        "type": "domain",
        "uuid": "c673cbcd-dec9-4a1f-8dba-67763c418af5",
        "value": "trackstream.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:07+00:00",
        "timestamp": "1784127607",
        "to_ids": true,
        "type": "domain",
        "uuid": "521b8bd3-0179-4d3e-b6ee-d2c73a96dbe8",
        "value": "webprobe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:07+00:00",
        "timestamp": "1784127607",
        "to_ids": true,
        "type": "domain",
        "uuid": "448b7374-fbae-407d-bdf8-8cce69bf8b69",
        "value": "websift.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:07+00:00",
        "timestamp": "1784127607",
        "to_ids": true,
        "type": "domain",
        "uuid": "03d71c47-bcfa-4809-9784-f128140f3fbd",
        "value": "mail.analyticape.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:07+00:00",
        "timestamp": "1784127607",
        "to_ids": true,
        "type": "domain",
        "uuid": "afb18ffe-dbc7-4669-9f92-5b21dd59d27a",
        "value": "mail.datavoyage.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127607",
        "to_ids": true,
        "type": "domain",
        "uuid": "2806cc31-0754-4b0f-aad0-80a8d2d56dd1",
        "value": "mail.flowchartix.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127608",
        "to_ids": true,
        "type": "domain",
        "uuid": "12c0cd93-0aa1-4009-ad38-26e23b19c0ad",
        "value": "mail.infogauge.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127608",
        "to_ids": true,
        "type": "domain",
        "uuid": "259762b7-286c-4ae0-a963-ba699361cd35",
        "value": "mail.metricspan.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127608",
        "to_ids": true,
        "type": "domain",
        "uuid": "139197ae-217d-4bee-860f-bb39e0246f5e",
        "value": "mail.pageglance.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127608",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f1dd861-c59a-4234-933c-f5440ab86048",
        "value": "mail.site-builder.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127608",
        "to_ids": true,
        "type": "domain",
        "uuid": "508139e2-8f54-40cf-8ed4-f8e87a7ab2bd",
        "value": "mail.trackstream.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:08+00:00",
        "timestamp": "1784127608",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3bcadba-aca9-45e9-8857-44bd5c6955f8",
        "value": "mail.webprobe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:09+00:00",
        "timestamp": "1784127609",
        "to_ids": true,
        "type": "domain",
        "uuid": "c95a05c9-37cb-46ba-ba52-23215caf70f0",
        "value": "mail.websift.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:09+00:00",
        "timestamp": "1784127609",
        "to_ids": false,
        "type": "url",
        "uuid": "7dcba5f4-4f93-4b42-923f-29a34b7b9005",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9306cfd908e5454a987bfbb6b5c64e977ba7c59a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:09+00:00",
        "timestamp": "1784127609",
        "to_ids": false,
        "type": "url",
        "uuid": "13adeb6d-e544-4607-af6b-d7dfb9fbe256",
        "value": "https://x.com/L0Psec/status/2077047248068677826",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:09+00:00",
        "timestamp": "1784127609",
        "to_ids": false,
        "type": "url",
        "uuid": "2a381b9f-381c-4648-97a3-40a1580f7012",
        "value": "https://www.virustotal.com/gui/file/d44dafd48ec502e2512076ad1d66209059511292413123f87965011d5d96262e/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:09+00:00",
        "timestamp": "1784127609",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1cb81ca-eef7-4730-95f8-ba10c2859db9",
        "value": "cigalsn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127609",
        "to_ids": false,
        "type": "url",
        "uuid": "b37cc5e6-7561-43eb-b0c5-671d59c888ca",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/dc9e8aa588bf3fb3a787ef4e8fd80128a8897ac1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127610",
        "to_ids": false,
        "type": "url",
        "uuid": "f35999b9-8a61-4481-af86-55c25c77a093",
        "value": "https://www.virustotal.com/gui/ip-address/8.223.24.84/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127610",
        "to_ids": true,
        "type": "domain",
        "uuid": "bacbe4e9-9a6a-4e59-8edf-bfb80f689bcb",
        "value": "cfgghfcfh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127610",
        "to_ids": true,
        "type": "domain",
        "uuid": "a003f549-2fba-436c-92ab-31bc4212e843",
        "value": "cfgghfcfh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127610",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2a00e79-1682-47bf-94e2-f0041f421e5e",
        "value": "cfgghfcfh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127610",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d6d7145-4f91-43d0-ae8d-84e562934cb2",
        "value": "cfgghfcfh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:10+00:00",
        "timestamp": "1784127610",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f20ed25-fd7b-4acb-9e00-c8e62cc2e717",
        "value": "cfgghfcfh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127610",
        "to_ids": true,
        "type": "domain",
        "uuid": "d548be55-ea62-4961-bd1f-2cb0410fdcf3",
        "value": "cfgghfcfh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127611",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e790965-48a4-4195-a192-99c06766432e",
        "value": "cfgghfcfh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127611",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fdcffc6-50ee-47e0-b77c-7cf405249600",
        "value": "cfgghfcfh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127611",
        "to_ids": true,
        "type": "domain",
        "uuid": "d22fe5e9-c77d-45ba-8541-c6df276bdeeb",
        "value": "cfgghfcfh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127611",
        "to_ids": true,
        "type": "domain",
        "uuid": "f845661e-e6ed-4564-95b5-6d6621dbe3f0",
        "value": "cfgghfcfh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127611",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a6b81a-e1fa-4c09-930b-9235c0f62d7f",
        "value": "cfgghfcfh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:11+00:00",
        "timestamp": "1784127611",
        "to_ids": true,
        "type": "domain",
        "uuid": "263fbdd6-6fdf-4ec5-bef6-7bb7a5941e18",
        "value": "cfgghfyhh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:12+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5a2f9d2-fe49-43c7-9f45-2a48ae4dce42",
        "value": "cfgghfyhh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:12+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd395408-043b-4898-842d-1e02a347eb93",
        "value": "cfgghfyhh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:12+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "e086414e-b032-46fe-9efa-17e325c12058",
        "value": "cfgghfyhh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:12+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d197c77-5bbe-4b86-a0db-c6da969879ac",
        "value": "cfgghfyhh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:12+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "32bfbb86-020d-458b-8595-f29675dd5cd0",
        "value": "cfgghfyhh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:12+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "606c3268-922d-42c6-aa48-0b047dac98da",
        "value": "cfgghvgfh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:13+00:00",
        "timestamp": "1784127612",
        "to_ids": true,
        "type": "domain",
        "uuid": "b96420d5-956d-412a-984b-3129080cb543",
        "value": "cfgghvgfh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:13+00:00",
        "timestamp": "1784127613",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae3997d4-efca-4218-89cb-c92af671f41c",
        "value": "cfgghvgfh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:13+00:00",
        "timestamp": "1784127613",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c7175fa-7fd0-4b6b-8d86-4402ae1f1536",
        "value": "cfgghvgfh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:13+00:00",
        "timestamp": "1784127613",
        "to_ids": true,
        "type": "domain",
        "uuid": "17220f00-2e99-4686-b047-947938eb1709",
        "value": "cfgghvgfh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:13+00:00",
        "timestamp": "1784127613",
        "to_ids": true,
        "type": "domain",
        "uuid": "48f9b623-2f3c-4e71-8de1-04ee59982dc2",
        "value": "cfgghvgfh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:14+00:00",
        "timestamp": "1784127613",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb1c63ce-7291-47c5-a1aa-3eae2ed25346",
        "value": "cfgghvgfh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:14+00:00",
        "timestamp": "1784127614",
        "to_ids": true,
        "type": "domain",
        "uuid": "46b4acab-b60e-436e-a893-29b0854380f3",
        "value": "cfgghvgfh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:14+00:00",
        "timestamp": "1784127614",
        "to_ids": true,
        "type": "domain",
        "uuid": "90d2292b-8e2d-46cd-8690-891df8920980",
        "value": "ggyyhg001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:14+00:00",
        "timestamp": "1784127614",
        "to_ids": true,
        "type": "domain",
        "uuid": "0886f880-6188-4e5a-9964-96384e4468e3",
        "value": "ggyyhg002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:14+00:00",
        "timestamp": "1784127614",
        "to_ids": true,
        "type": "domain",
        "uuid": "7070c3d7-5478-45e0-92be-a4b9b204794b",
        "value": "ggyyhg003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:14+00:00",
        "timestamp": "1784127614",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a598c07-b513-48e3-ba6b-93a51ca40999",
        "value": "ggyyhg004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127614",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea86ab4f-5040-4b23-96a1-8ac32c014311",
        "value": "ggyyhg005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "405932df-7c69-4d9f-866f-a5c67e70630e",
        "value": "ggyyhg006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2b1ca14-3f18-4c55-8fba-6445f0b241dc",
        "value": "ggyyhg007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbc4bbf4-2a33-4df5-b1aa-d9dc4f184802",
        "value": "ggyyhg008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "a33a9305-98d6-484b-b34d-a05ef865a594",
        "value": "ggyyhg009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "2db1b60c-f0fc-40ff-9cc5-121c5753d965",
        "value": "ggyyhg010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:15+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7dc591a-6801-412e-bdbd-e9ae8348cd6d",
        "value": "ggyyhg011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:16+00:00",
        "timestamp": "1784127615",
        "to_ids": true,
        "type": "domain",
        "uuid": "760baed6-4b80-417a-876f-939895340633",
        "value": "ggyyhg012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:16+00:00",
        "timestamp": "1784127616",
        "to_ids": true,
        "type": "domain",
        "uuid": "78ee378c-c01e-43d3-8693-8d6720e5fb43",
        "value": "ggyyhg013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:16+00:00",
        "timestamp": "1784127616",
        "to_ids": true,
        "type": "domain",
        "uuid": "e46bd4af-25af-4827-b002-fbe765d0b70b",
        "value": "ggyyhg014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:16+00:00",
        "timestamp": "1784127616",
        "to_ids": true,
        "type": "domain",
        "uuid": "374c97bb-52a6-4c5d-af0c-84ba984cc560",
        "value": "ggyyhg015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:16+00:00",
        "timestamp": "1784127616",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c3c39aa-9160-422f-92a7-e7f46a05c729",
        "value": "ggyyhg016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:16+00:00",
        "timestamp": "1784127616",
        "to_ids": true,
        "type": "domain",
        "uuid": "cefcaff5-8d25-4514-8ea7-b6db7f34ff98",
        "value": "ggyyhg017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127616",
        "to_ids": true,
        "type": "domain",
        "uuid": "c71ed832-0e8d-4908-b09a-9fb6c4bf0b56",
        "value": "ggyyhg018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "64094ce0-9043-4836-a43e-b00a0419fb4e",
        "value": "ggyyhg019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3a064f6-aca4-4520-9c49-c7751ccc43b6",
        "value": "ggyyhg020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b59b466-3673-434d-8634-3820a6069d95",
        "value": "ggyyhg021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab3d12c6-6665-4983-a3b0-82e5f940dba4",
        "value": "ggyyhg022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "bff28d73-5770-4b11-b501-220abc0a35c0",
        "value": "ggyyhg023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:17+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7ed9b9a-f1f0-49bd-bc8d-9fdd1ea1bbf0",
        "value": "ggyyhg024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127617",
        "to_ids": true,
        "type": "domain",
        "uuid": "56241a70-3bc5-43a7-86cc-3635ac64361e",
        "value": "ggyyhg025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127618",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0c0c5e8-81af-4c15-857f-0b4213aa1131",
        "value": "gyhghjjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127618",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b6ff375-3b6d-41a6-84dd-540a3c1a5767",
        "value": "gyhghjjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127618",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c49b87a-0187-48d4-ba1d-78dffabdf577",
        "value": "gyhghjjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127618",
        "to_ids": true,
        "type": "domain",
        "uuid": "761348cd-1c1e-4e34-bd5e-f4d2acbd7181",
        "value": "gyhghjjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127618",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cbfd35e-d525-423e-a6be-70269c4df701",
        "value": "gyhghjjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:18+00:00",
        "timestamp": "1784127618",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f8c8ae9-7b38-41ed-b255-1f6852cdddf4",
        "value": "gyhghjjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:19+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0a52f46-117d-4945-9ec7-e22d92669382",
        "value": "gyhghjjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:19+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "64882a01-93e2-46bc-8d1a-34ef24043415",
        "value": "gyhghjjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:19+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ad723e0-a512-4ca7-9374-6c698b5fd34d",
        "value": "gyhghjjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:19+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "f26d7f8c-b4f8-484a-a908-09989d4cd298",
        "value": "gyhghjjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:19+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a9f066b-36db-4f98-837f-18375d30476f",
        "value": "gyhghjjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:19+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "e049eace-7ad5-4e52-ac0c-5105b91055dd",
        "value": "gyhghjjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127619",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1dfcc26-4ab1-45c3-8647-0cb9270e7f71",
        "value": "gyhghjjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "15b05210-0a11-4b6b-93e4-c78ec06a70e6",
        "value": "gyhghjjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "7428dc77-9ebb-4879-9c7f-a7448290fdbf",
        "value": "gyhghjjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba5b2aa0-6b49-4048-9718-cc12d379a751",
        "value": "gyhghjjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "661c07f3-3bbb-419f-9fd9-7f2f2e8f8874",
        "value": "gyhghjjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "adba0688-2a9e-432a-9d2f-0574880177b4",
        "value": "gyhghjjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:20+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a32112d-86db-4367-9509-8e23b1e7aa98",
        "value": "gyhghjjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:21+00:00",
        "timestamp": "1784127620",
        "to_ids": true,
        "type": "domain",
        "uuid": "41d66a76-dccc-4643-8c8a-a8a2fc488d3b",
        "value": "gyhghjjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:21+00:00",
        "timestamp": "1784127621",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcc5e4a8-554d-4aa4-a7b7-1421120d3016",
        "value": "gyhghjjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:21+00:00",
        "timestamp": "1784127621",
        "to_ids": true,
        "type": "domain",
        "uuid": "9632c2a7-2fd1-41cc-a6aa-5c6ed3aee4d7",
        "value": "gyhghjjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:21+00:00",
        "timestamp": "1784127621",
        "to_ids": true,
        "type": "domain",
        "uuid": "2817b1cc-956d-4be6-8b03-257990b63b70",
        "value": "gyhghjjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:21+00:00",
        "timestamp": "1784127621",
        "to_ids": true,
        "type": "domain",
        "uuid": "89e4e6ea-0a93-4069-945d-7a0da5f83b5b",
        "value": "gyhghjjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:21+00:00",
        "timestamp": "1784127621",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c89b787-92cb-498b-9e9a-0c7d51a3dae6",
        "value": "gyhghjjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:22+00:00",
        "timestamp": "1784127621",
        "to_ids": true,
        "type": "domain",
        "uuid": "6353fb8d-a152-469f-acc7-632577f8ec8c",
        "value": "gyhghunj001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:22+00:00",
        "timestamp": "1784127622",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2712927-19eb-444f-a58a-48bfdcd38ede",
        "value": "gyhghunj002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:22+00:00",
        "timestamp": "1784127622",
        "to_ids": true,
        "type": "domain",
        "uuid": "4883fa8f-06fa-44e4-9c3f-5288cca54868",
        "value": "gyhghunj003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:22+00:00",
        "timestamp": "1784127622",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4fd765e-5583-4c19-ba2e-f9365c2b8a68",
        "value": "gyhghunj004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:22+00:00",
        "timestamp": "1784127622",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcb66add-5de8-405a-8ee7-44c1f6a97c50",
        "value": "gyhghunj005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:22+00:00",
        "timestamp": "1784127622",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd2014ce-1000-4cb4-97ea-f82794728e27",
        "value": "gyhghunj006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127622",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7768807-a0cf-4f50-9b16-895316adc4ba",
        "value": "gyhghunj007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3feecdd-c1e8-4dba-b5ee-67185214eb25",
        "value": "gyhghunj008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e0cee0b-9066-4a69-b3d0-7eb29ee9fcda",
        "value": "gyhghunj009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "fccbf2d8-273f-4e15-914f-3ff7da8b453a",
        "value": "gyhghunj010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "705bd47d-253f-4ca5-8cd7-7bd4b9f7b0a2",
        "value": "gyhghunj011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "90862c3b-be7f-4ad6-8cc9-96bb534cd8d6",
        "value": "gyhghunj012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:23+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "52dfb1fe-425a-418c-af82-3cbb59e8c1cc",
        "value": "gyhghunj013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127623",
        "to_ids": true,
        "type": "domain",
        "uuid": "af5bdc6b-263b-464c-96d2-4e47999ade27",
        "value": "gyhghunj014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127624",
        "to_ids": true,
        "type": "domain",
        "uuid": "453d5bbd-cac8-45de-bd46-a0cf8730d4a9",
        "value": "gyhghunj015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127624",
        "to_ids": true,
        "type": "domain",
        "uuid": "82f41880-963e-4d38-ba77-5615dada1b1e",
        "value": "gyhghunj016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127624",
        "to_ids": true,
        "type": "domain",
        "uuid": "61a112c5-aed5-4ac4-8930-62b6e80a16ce",
        "value": "gyhghunj017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127624",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7c3053f-7067-4f3d-b8e1-b51fa4a3baf9",
        "value": "gyhghunj018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127624",
        "to_ids": true,
        "type": "domain",
        "uuid": "a24faab9-134b-456f-a7ad-be2bd3bd3dba",
        "value": "gyhghunj019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:24+00:00",
        "timestamp": "1784127624",
        "to_ids": true,
        "type": "domain",
        "uuid": "0164593c-7d0a-4a4e-bacc-6467499d2038",
        "value": "gyhghunj020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:25+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a02dc2c-5fc7-4d2f-acff-690588cad92f",
        "value": "gyhghunj021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:25+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c09fc1a-f3f2-4524-b822-5556c69f60a0",
        "value": "gyhghunj022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:25+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "1afb6519-2cbb-46d4-9cd3-99199e5c50bc",
        "value": "gyhghunj023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:25+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "79b18491-ca1b-4a8a-92e9-c83538353948",
        "value": "gyhghunj024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:25+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0004322-4b52-4610-9668-947435ff3dab",
        "value": "gyhghunj025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:25+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "8906bfa8-47ec-464c-a969-a4938c26d719",
        "value": "gyjfvcfuh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:26+00:00",
        "timestamp": "1784127625",
        "to_ids": true,
        "type": "domain",
        "uuid": "45ade6e9-a079-4fa5-9432-dd440a402082",
        "value": "gyjfvcfuh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:26+00:00",
        "timestamp": "1784127626",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a7cd48c-3be9-4d90-a814-8e8fca8194a1",
        "value": "gyjfvcfuh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:26+00:00",
        "timestamp": "1784127626",
        "to_ids": true,
        "type": "domain",
        "uuid": "394ef0b4-ab53-4bb4-9ab7-c0920ee219e3",
        "value": "gyjfvcfuh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:26+00:00",
        "timestamp": "1784127626",
        "to_ids": true,
        "type": "domain",
        "uuid": "67227b12-0122-4b88-9e26-fa09693cda19",
        "value": "gyjfvcfuh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:26+00:00",
        "timestamp": "1784127626",
        "to_ids": true,
        "type": "domain",
        "uuid": "77e3beef-ad6c-47e1-bd58-3b17e0f59d20",
        "value": "gyjfvcfuh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:26+00:00",
        "timestamp": "1784127626",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb104db8-81b0-4f94-8aa1-82ff86b78e90",
        "value": "gyjfvcfuh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127626",
        "to_ids": true,
        "type": "domain",
        "uuid": "36eae418-90b1-4444-b69d-9f77dfb6bdbd",
        "value": "gyjfvcfuh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "b394314f-0e8a-4cea-8455-06309d4988d3",
        "value": "gyjfvcfuh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfeb39d3-a7b7-4a3e-b967-3cacfd31df4e",
        "value": "gyjfvcfuh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "533dd606-bcc6-41e4-a352-82c9f6b5ff96",
        "value": "gyjfvgguh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "c703987d-d56e-436a-97fc-bcccfbf13369",
        "value": "gyjfvgguh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "80054948-b778-4223-b3b1-1487b3a6c948",
        "value": "gyjfvgguh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:27+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "92726dac-59f9-4cd0-95e0-5be69a11591a",
        "value": "gyjfvgguh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127627",
        "to_ids": true,
        "type": "domain",
        "uuid": "192df3e2-0427-4a8c-a5d7-2948458e1368",
        "value": "gyjfvgguh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f9b5529-db57-4c9f-a6ea-1cc392bc0791",
        "value": "gyjfvgguh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7edce1c-308d-4fba-829a-a5ea86cc4e6e",
        "value": "gyjfvgguh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "d35d2fc4-c408-4b6c-a27e-8df686822d1b",
        "value": "gyjfvgguh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "b71847f1-9285-4cc5-a604-d190319c979a",
        "value": "gyjfvgguh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e167d93-38bf-4743-aa61-67591dcd625e",
        "value": "gyjfyjguh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:28+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7ba12e3-2c04-4e7d-98ec-b3e9f378849e",
        "value": "gyjfyjguh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:29+00:00",
        "timestamp": "1784127628",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0a6ce97-a79a-4587-8b8c-b8dc51cd9752",
        "value": "gyjfyjguh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:29+00:00",
        "timestamp": "1784127629",
        "to_ids": true,
        "type": "domain",
        "uuid": "63c7b14e-1f79-4b90-9ce1-18d5966f88f2",
        "value": "gyjfyjguh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:29+00:00",
        "timestamp": "1784127629",
        "to_ids": true,
        "type": "domain",
        "uuid": "333d5071-e32b-4cd1-816b-faae370f367b",
        "value": "gyjfyjguh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:29+00:00",
        "timestamp": "1784127629",
        "to_ids": true,
        "type": "domain",
        "uuid": "892b5ed0-2998-4ef6-b2f3-aa48edfa20c5",
        "value": "gyjfyjguh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:29+00:00",
        "timestamp": "1784127629",
        "to_ids": true,
        "type": "domain",
        "uuid": "22c3c92c-1c35-40b6-83d8-01f5f4920d09",
        "value": "gyxxd001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:29+00:00",
        "timestamp": "1784127629",
        "to_ids": true,
        "type": "domain",
        "uuid": "4249211b-6d20-4d0e-b757-5a502b5c4ff3",
        "value": "gyxxd002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:30+00:00",
        "timestamp": "1784127629",
        "to_ids": true,
        "type": "domain",
        "uuid": "126ba19f-3a60-4c4e-8310-c7030f662fea",
        "value": "gyxxd003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:30+00:00",
        "timestamp": "1784127630",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9de135a-bca1-44c1-8df2-14ff8a11a34e",
        "value": "gyxxd004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:30+00:00",
        "timestamp": "1784127630",
        "to_ids": true,
        "type": "domain",
        "uuid": "507c7d52-8dbd-4a28-87a7-19df27234b82",
        "value": "gyxxd005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:30+00:00",
        "timestamp": "1784127630",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ee7ac3a-417f-46ef-afd2-b2b623b57808",
        "value": "gyxxd006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:30+00:00",
        "timestamp": "1784127630",
        "to_ids": true,
        "type": "domain",
        "uuid": "52dc7ab9-353b-49fe-aa5f-67f3f93c035b",
        "value": "gyxxd007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:30+00:00",
        "timestamp": "1784127630",
        "to_ids": true,
        "type": "domain",
        "uuid": "6db0a073-92fa-4da8-a9bc-7cfb46269cd3",
        "value": "gyxxd008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:31+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4f20294-ad44-43d2-a664-06569f07b89d",
        "value": "gyxxd009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:31+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a0a2e84-33e6-4c09-b787-edb98133a6d7",
        "value": "gyxxd010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:31+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2be8120-a602-4da0-aef3-2897d1e1284c",
        "value": "gyxxd011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:31+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea43fee4-777c-472c-b2d0-1579ad752ecc",
        "value": "gyxxd012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:31+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9419acc-2fb5-4135-9675-4c3bda43fd32",
        "value": "gyxxd013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:31+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "defaae29-c6b0-4b5c-a6d7-a2d7cace9e0d",
        "value": "gyxxd014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127631",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c37d974-b879-4a9f-a389-694911de3829",
        "value": "gyxxd015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d6a7571-ae7e-4922-be96-4851919d9932",
        "value": "gyxxd016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1ac5320-5b5a-4d92-b6d7-4833cb016651",
        "value": "gyxxd017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9f760e7-77d7-4f15-82ce-db4fcc0d3754",
        "value": "gyxxd018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "912db500-1cdc-46e1-beaf-11947f619f90",
        "value": "gyxxd019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "936b3aef-8c05-4fb6-89a9-4eb4b98e1ef5",
        "value": "gyxxd020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:32+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "b18aec95-9bc7-4267-ae78-5652f9855e80",
        "value": "gyxxd021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127632",
        "to_ids": true,
        "type": "domain",
        "uuid": "09a928f8-1fa4-4283-851e-672baf2c3630",
        "value": "gyxxd022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d9e7217-cd4d-4e38-9b99-c72d21b0f49e",
        "value": "gyxxd023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "a83db40f-12ea-4233-a2f6-c2e51a9a338d",
        "value": "gyxxd024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ec1c915-7d31-492d-b5c6-971baf4d1cc5",
        "value": "gyxxd025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "91d6ad09-8af9-47fb-9a14-70a3a87b3d51",
        "value": "hhgxxddr001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "43e94acf-d104-470c-9bec-c48efc7f55e8",
        "value": "hhgxxddr002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:33+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecacef23-de9d-4bc3-8d24-393988b580c6",
        "value": "hhgxxddr003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127633",
        "to_ids": true,
        "type": "domain",
        "uuid": "7218e833-3170-4a38-850f-73766f0a907a",
        "value": "hhgxxddr004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127634",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4d215bc-28f5-4376-9b6d-4a8029ebb156",
        "value": "hhgxxddr005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127634",
        "to_ids": true,
        "type": "domain",
        "uuid": "f160c03d-45c9-4f41-bd2f-a85646ecd253",
        "value": "hhgxxddr006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127634",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3b0f26d-0467-434a-b1e8-246318498396",
        "value": "hhgxxddr007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127634",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef956dd5-d102-4d97-bae9-89d40cec0c0a",
        "value": "hhgxxddr008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127634",
        "to_ids": true,
        "type": "domain",
        "uuid": "81aaa5af-52a4-4cbf-bcd0-689b3042736c",
        "value": "hhgxxddr009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:34+00:00",
        "timestamp": "1784127634",
        "to_ids": true,
        "type": "domain",
        "uuid": "71de49ce-de55-4fcf-b47f-ce340bb4157b",
        "value": "hhgxxddr010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:35+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1c66226-aab2-421b-9812-009b0aa7d077",
        "value": "hhgxxddr011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:35+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8707317-fb0e-4c20-8156-38ef7bdbdce2",
        "value": "hhgxxddr012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:35+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "599cf11d-6bd7-4be3-a44c-b931a4d2f3ba",
        "value": "hhgxxddr013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:35+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9ad2119-943f-4566-80f6-ec70bfe7d316",
        "value": "hhgxxddr014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:35+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "40ceb69d-fa10-4150-99fe-abbcd1796bd5",
        "value": "hhgxxddr015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:35+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "01a8ce1f-8173-4677-ba2d-8d4587773568",
        "value": "hhgxxddr016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127635",
        "to_ids": true,
        "type": "domain",
        "uuid": "7117b900-bed8-4ae3-92c8-37846479f9e2",
        "value": "hhgxxddr017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f6dc7a2-ff68-4e54-b4b2-e0708748c124",
        "value": "hhgxxddr018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dde811e-2394-43ea-a577-328f4b61147f",
        "value": "hhgxxddr019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a1f5b8f-5256-4531-9345-431249d6d35e",
        "value": "hhgxxddr020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "13228018-3cc3-4192-9ee2-ff2558a598d9",
        "value": "hhgxxddr021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8af9c4b-85e0-499b-92b0-10a8ead69145",
        "value": "hhgxxddr022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:36+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "110b9c44-49f1-4808-b0bb-e767cd2fd833",
        "value": "hhgxxddr023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127636",
        "to_ids": true,
        "type": "domain",
        "uuid": "917babdd-cd78-49c8-9b91-316887242774",
        "value": "hhgxxddr024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127637",
        "to_ids": true,
        "type": "domain",
        "uuid": "575cd9bb-60d1-4673-bb72-34fb8aa1525b",
        "value": "hhgxxddr025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127637",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6d59d40-53d0-438a-b7e9-6ccdb6cabfd1",
        "value": "hhuyuhnj001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127637",
        "to_ids": true,
        "type": "domain",
        "uuid": "32a74b13-6dd5-4c6d-9b7a-e97fdf426aed",
        "value": "hhuyuhnj002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127637",
        "to_ids": true,
        "type": "domain",
        "uuid": "4eb8fe75-ff1a-4b68-9b34-6016a1ce861d",
        "value": "hhuyuhnj003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127637",
        "to_ids": true,
        "type": "domain",
        "uuid": "aad5b13b-db6f-4670-a88c-55b059ecbe75",
        "value": "hhuyuhnj004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:37+00:00",
        "timestamp": "1784127637",
        "to_ids": true,
        "type": "domain",
        "uuid": "296e71a7-3b91-4e40-aa56-22bbaa53a851",
        "value": "hhuyuhnj005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:38+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "2144029d-458f-40c1-aa71-c92b2eb62729",
        "value": "hhuyuhnj006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:38+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "558e4646-68bd-4526-993e-48ea823cf788",
        "value": "hhuyuhnj007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:38+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f0b0f6e-01bb-45c8-bd72-2fff5e0d5f1b",
        "value": "hhuyuhnj008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:38+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "70ca4c4c-7cd9-4e2a-af13-10c5939b6eb8",
        "value": "hhuyuhnj009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:38+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbaca6a1-17b5-4824-8ad2-fd13de8bf305",
        "value": "hhuyuhnj010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:38+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "cda08777-46d0-442c-99e5-171f456c5bdc",
        "value": "hhuyuhnj011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127638",
        "to_ids": true,
        "type": "domain",
        "uuid": "b590d6e5-f6a5-401d-b23a-8527de00ab25",
        "value": "hhuyuhnj012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127639",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ab60486-276d-447b-8a85-641179cdc1f8",
        "value": "hhuyuhnj013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127639",
        "to_ids": true,
        "type": "domain",
        "uuid": "742abb60-18ea-4b74-958e-de6876554ce2",
        "value": "hhuyuhnj014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127639",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffc98dda-67aa-43d8-b3b1-463a21b0ee73",
        "value": "hhuyuhnj015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127639",
        "to_ids": true,
        "type": "domain",
        "uuid": "695843b2-c31b-409a-a771-5718d2909dd9",
        "value": "hhuyuhnj016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127639",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fd4d7f9-c13e-40d4-afcc-2b5c4573ccc5",
        "value": "hhuyuhnj017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:39+00:00",
        "timestamp": "1784127639",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f155fa3-23fc-41f0-b7ff-ac7ff2cf3b0b",
        "value": "hhuyuhnj018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:40+00:00",
        "timestamp": "1784127640",
        "to_ids": true,
        "type": "domain",
        "uuid": "a57e93bb-0ffd-43c2-8866-13b44a29c6e0",
        "value": "hhuyuhnj019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:40+00:00",
        "timestamp": "1784127640",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfae2583-303c-439b-983c-c67d679c8bcb",
        "value": "hhuyuhnj020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:40+00:00",
        "timestamp": "1784127640",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ab64c04-5ac1-4d3c-9ab4-fb709cb58229",
        "value": "hhuyuhnj021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:40+00:00",
        "timestamp": "1784127640",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7b34032-f5ba-48df-8c9e-56287f915488",
        "value": "hhuyuhnj022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:40+00:00",
        "timestamp": "1784127640",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2cafeac-f7ff-4c04-bd69-55e3001348a3",
        "value": "hhuyuhnj023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:41+00:00",
        "timestamp": "1784127640",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1ed81d2-a4f0-4d92-b54f-d76e303842cc",
        "value": "hhuyuhnj024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:41+00:00",
        "timestamp": "1784127641",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f09dd79-5aaf-4ed1-9830-0a867e5fbfb1",
        "value": "hhuyuhnj025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:41+00:00",
        "timestamp": "1784127641",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa501582-48f2-4e3b-a212-9a8921188b09",
        "value": "hunghunj001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:41+00:00",
        "timestamp": "1784127641",
        "to_ids": true,
        "type": "domain",
        "uuid": "13e70b56-754e-4b67-ac9a-3386596ce94f",
        "value": "hunghunj002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:41+00:00",
        "timestamp": "1784127641",
        "to_ids": true,
        "type": "domain",
        "uuid": "19d40706-23da-4855-9d5a-77fb4e6410a4",
        "value": "hunghunj003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127641",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e4b7f3e-bf44-4612-811e-57c3e02c1237",
        "value": "hunghunj004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127642",
        "to_ids": true,
        "type": "domain",
        "uuid": "033c9022-10df-452d-b294-b8d4da6cb15c",
        "value": "hunghunj005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127642",
        "to_ids": true,
        "type": "domain",
        "uuid": "c53e85dc-28b3-4b46-abdb-4dc0bc54ed76",
        "value": "hunghunj006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127642",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f50a07a-f8ba-4330-b1b3-808b5929ea53",
        "value": "hunghunj007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127642",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c7f10fc-66ac-42a7-b127-ec5f3ffc3ba7",
        "value": "hunghunj008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127642",
        "to_ids": true,
        "type": "domain",
        "uuid": "33206f93-8983-49c9-b3c7-7379c82dd29a",
        "value": "hunghunj009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:42+00:00",
        "timestamp": "1784127642",
        "to_ids": true,
        "type": "domain",
        "uuid": "c71348bf-dc8a-41cc-a350-df4823e6114e",
        "value": "hunghunj010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5bd435b-761f-48b6-ba08-d452b4d85556",
        "value": "hunghunj011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9c55bbd-5525-41f3-9fae-076c6a141283",
        "value": "hunghunj012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b15d0d1-6e62-4235-9bf4-521e318358a0",
        "value": "hunghunj013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c794f36-b4cc-4bbe-bd9c-2bfb24096379",
        "value": "hunghunj014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "db29f5f5-de6b-42c1-8f63-3d9f65968ef0",
        "value": "hunghunj015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "040feac7-22c6-4a4b-8710-a2a36adacd4c",
        "value": "hunghunj016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:43+00:00",
        "timestamp": "1784127643",
        "to_ids": true,
        "type": "domain",
        "uuid": "468de85c-55f8-4988-a9a0-e2959077f4fc",
        "value": "hunghunj017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:44+00:00",
        "timestamp": "1784127644",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd301d01-41d5-4f68-a356-8615fc3a8a7f",
        "value": "hunghunj018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:44+00:00",
        "timestamp": "1784127644",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b43dda3-409e-48c6-aae2-b039e164e4dc",
        "value": "hunghunj019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:44+00:00",
        "timestamp": "1784127644",
        "to_ids": true,
        "type": "domain",
        "uuid": "91863acd-00b1-4e1e-ac4b-8a9e6bde6342",
        "value": "hunghunj020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:44+00:00",
        "timestamp": "1784127644",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b688808-2821-4c87-8a6c-189f5e878d11",
        "value": "hunghunj021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:44+00:00",
        "timestamp": "1784127644",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f256d33-04f5-4da5-a2d5-b13127e2acfd",
        "value": "hunghunj022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127644",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0eba238-29cd-43f3-9253-7ff28217d6fb",
        "value": "hunghunj023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127645",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bc43fca-9e6f-4874-8027-d0b0c62320db",
        "value": "hunghunj024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127645",
        "to_ids": true,
        "type": "domain",
        "uuid": "873f117b-8812-45cf-9ec4-abf1b3cd7bd2",
        "value": "hunghunj025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127645",
        "to_ids": true,
        "type": "domain",
        "uuid": "e76ffe10-c080-447f-9197-361af95091df",
        "value": "hungy001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127645",
        "to_ids": true,
        "type": "domain",
        "uuid": "baf9eb2a-0bef-4231-9a62-fe86d26cee75",
        "value": "hungy002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127645",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e2feddc-8f7f-4d7f-98be-9232004fa268",
        "value": "hungy003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:45+00:00",
        "timestamp": "1784127645",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e8d4ba8-46ca-44cb-8631-807574cc9758",
        "value": "hungy004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:46+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c00bd0c-e6c4-4ff6-b27b-81817d88c061",
        "value": "hungy005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:46+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dcf8d84-4e30-4069-9a1b-eea423ef9fa5",
        "value": "hungy006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:46+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "313bcc0a-47a6-40e1-94cd-62879cd74264",
        "value": "hungy007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:46+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "9297bf10-8476-48a8-bdd4-b362d1b5c51d",
        "value": "hungy008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:46+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "4872822d-7598-4b10-9a50-e1587a538e8d",
        "value": "hungy009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:46+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc018bd8-d191-4d47-ba55-3ea1c68fe951",
        "value": "hungy010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127646",
        "to_ids": true,
        "type": "domain",
        "uuid": "70c8e433-1d47-4ee5-8fc7-ab8d2342d299",
        "value": "hungy011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2335430-de75-49d4-84db-45cf7cfcd8c1",
        "value": "hungy012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8a77f17-355d-44a0-83b6-c7cfdf4787ae",
        "value": "hungy013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2eae79f-0c66-4feb-acbd-25068d69f94a",
        "value": "hungy014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "71ecfc3f-47cb-4fb8-bc3c-2f987ebb48f3",
        "value": "hungy015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "77612d26-7b66-4b5b-89ac-b9e66a9c3852",
        "value": "hungy016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:47+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ee5f9cd-b381-45f9-91e1-990edd1c1d9c",
        "value": "hungy017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127647",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b4f85a8-bc00-427f-9b62-614bbe09d22c",
        "value": "hungy018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127648",
        "to_ids": true,
        "type": "domain",
        "uuid": "5af68d3a-35d5-40e6-adaa-6dca47e7962b",
        "value": "hungy019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127648",
        "to_ids": true,
        "type": "domain",
        "uuid": "73627d8f-d5e9-4f99-9c23-d8a9b340f873",
        "value": "hungy020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127648",
        "to_ids": true,
        "type": "domain",
        "uuid": "95f09516-ff79-45c5-8bbf-ba2720396fb6",
        "value": "hungy021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127648",
        "to_ids": true,
        "type": "domain",
        "uuid": "98bd8bd3-4cbd-4a8e-8e7f-f0a57d68d8fb",
        "value": "hungy022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127648",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0efeb81-ad79-42bc-9738-6c0c72e5a1e5",
        "value": "hungy023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:48+00:00",
        "timestamp": "1784127648",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d648e32-86d0-40ba-ae12-97072bb3d149",
        "value": "hungy024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe685516-85af-4d18-beb4-230aa5f16789",
        "value": "hungy025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9490a0e-4e84-4324-9cfd-74ffeb967b6e",
        "value": "hzdfthr001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "8751ed83-a4f4-4b92-94d2-90092945b3b7",
        "value": "hzdfthr002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "d55946e2-45d7-45f3-819d-5a0077344148",
        "value": "hzdfthr003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7b0234c-f83a-4529-89f2-b3424d6fe327",
        "value": "hzdfthr004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "c86b1aa4-8a0d-4310-a509-79a8f41fe29f",
        "value": "hzdfthr005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:49+00:00",
        "timestamp": "1784127649",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc0198c4-208d-4866-a2ac-bbbe048680f4",
        "value": "hzdfthr006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:50+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f9495f9-e0f7-488f-915f-97da4e7d5818",
        "value": "hzdfthr007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:50+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "31cca6bb-a0c8-4948-a300-83b240ca24f5",
        "value": "hzdfthr008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:50+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0ed3580-3018-40e7-bb97-50914096e312",
        "value": "hzdfthr009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:50+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcb04515-2f9a-421c-b81f-564948ed8bf1",
        "value": "hzdfthr010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:50+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcffee14-9640-43d1-b55d-7278cc4bba5a",
        "value": "hzdfthr011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:50+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "8803bbbd-1ba6-4823-81d4-4e1b08000d09",
        "value": "hzdfthr012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127650",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec801138-4cc2-4d30-9b8c-01f47ac0c4c1",
        "value": "hzdfthr013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127651",
        "to_ids": true,
        "type": "domain",
        "uuid": "7810ff3c-1470-43e8-9270-48a469b506bc",
        "value": "hzdfthr014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127651",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4832977-b3fb-4643-9732-61cf029b4bf3",
        "value": "hzdfthr015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127651",
        "to_ids": true,
        "type": "domain",
        "uuid": "f519d3da-46b1-43e3-bfc5-82d7dd1d0226",
        "value": "hzdfthr016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127651",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1ae0c67-cbe6-4a0b-9a11-669e90e1656c",
        "value": "hzdfthr017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127651",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d1113ca-4696-40df-a161-945ca9367035",
        "value": "hzdfthr019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:51+00:00",
        "timestamp": "1784127651",
        "to_ids": true,
        "type": "domain",
        "uuid": "87d53b25-9d27-43c1-9e85-5f979cf3bee6",
        "value": "hzdfthr020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:52+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "1542e9d0-bf14-4860-9700-3ab76fbdb66e",
        "value": "hzdfthr021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:52+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3631e17-b35e-4c22-9110-1a4b4919f259",
        "value": "hzdfthr022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:52+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bbcafd1-b17c-4672-82e6-22a9c8375e57",
        "value": "hzdfthr023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:52+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bead540-9f3d-4d60-9bbf-61070dd158a5",
        "value": "hzdfthr024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:52+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b0305bc-0aee-4ea7-8cc9-b9258951e1d2",
        "value": "hzdfthr025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:52+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "998fe3dc-0cff-49ed-a0ee-9ae0af53bfea",
        "value": "hzzdtyg005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127652",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd5b7782-2cd4-48a1-aa23-a3d1cfb001b6",
        "value": "hzzdtyg006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127653",
        "to_ids": true,
        "type": "domain",
        "uuid": "6beec831-a746-4557-bc0a-7d7a05b61223",
        "value": "hzzdtyg008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127653",
        "to_ids": true,
        "type": "domain",
        "uuid": "45c494cb-c6c1-4776-8d3f-f4a3169414f4",
        "value": "hzzdtyg009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127653",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c460d3d-e6e8-4fad-b411-b45bcdf143d4",
        "value": "hzzdtyg010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127653",
        "to_ids": true,
        "type": "domain",
        "uuid": "50cdfbd3-1e6b-4410-a681-255acf149083",
        "value": "hzzdtyg011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127653",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb81274b-32bb-4b5b-9661-bb1868d80577",
        "value": "hzzdtyg013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:53+00:00",
        "timestamp": "1784127653",
        "to_ids": true,
        "type": "domain",
        "uuid": "da0eafc0-e665-4191-8310-64909cd7418d",
        "value": "hzzdtyg021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:54+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "492d5c5d-4a97-41cc-a0f5-5291459d3595",
        "value": "hzzdtyg023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:54+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d011fc6-2164-40dc-8f82-2f41e6f09eaf",
        "value": "hzzdtyg024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:54+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0282c64-2e1a-4e9d-92bd-609a05501c5f",
        "value": "nhewq001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:54+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "d16f71c4-6faa-4d3d-9f13-6a516720994c",
        "value": "nhewq002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:54+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "f713e7a2-2e88-471c-8d35-987dc334f5f1",
        "value": "nhewq003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:54+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "656cfb16-ba13-457e-b21b-733ac10f42bb",
        "value": "nhewq004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127654",
        "to_ids": true,
        "type": "domain",
        "uuid": "c74597cb-ddc3-459c-829e-5abb77ade748",
        "value": "nhewq005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127655",
        "to_ids": true,
        "type": "domain",
        "uuid": "54c3b870-6065-4e35-872a-8ccf766c9399",
        "value": "nhewq006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127655",
        "to_ids": true,
        "type": "domain",
        "uuid": "0809224a-d3c1-43a2-a33f-7aa6db447211",
        "value": "nhewq007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127655",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebe2d071-4212-4260-bd76-38554443ba99",
        "value": "nhewq008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127655",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b380499-50d5-489f-8a89-541671353972",
        "value": "nhewq009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127655",
        "to_ids": true,
        "type": "domain",
        "uuid": "80c7c037-227a-4b00-a2c3-39ef833500ec",
        "value": "nhewq010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:55+00:00",
        "timestamp": "1784127655",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfa59f10-4cfb-4b7a-8b58-fcfc94935292",
        "value": "nhewq011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:56+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c7a4901-9380-4fdb-8b4a-51c013211d92",
        "value": "nhewq012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:56+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "123a128a-79c2-4e81-9a6f-30d22c7b48e7",
        "value": "nhewq013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:56+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "cebc4c60-41cb-46e2-95e5-86f26987795a",
        "value": "nhewq014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:56+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8d06cc8-dd5d-4b5e-a99e-e0817d58766b",
        "value": "nhewq015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:56+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c2a8a53-e278-4212-a6c7-8eedb7d90b9e",
        "value": "nhewq016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:56+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "9565d5b7-d231-43ce-8841-9ecf30148af3",
        "value": "nhewq017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127656",
        "to_ids": true,
        "type": "domain",
        "uuid": "7920202e-8d4c-4bd4-9e2e-11926f97555e",
        "value": "nhewq018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "54649e84-96bb-487b-a9f4-ca543843e6cb",
        "value": "nhewq019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "98f6896a-bcd2-4014-90e1-2e3d5a9d2863",
        "value": "nhewq020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "3464ceb2-791e-4f24-8478-9fb2e0ae78e8",
        "value": "nhewq021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbf88f04-fe75-4132-abbb-ee37b622933a",
        "value": "nhewq022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "2347b885-a3d9-4c21-ab84-8495f41746fd",
        "value": "nhewq023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:57+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3505eea-9084-47f5-9931-42be4639b218",
        "value": "nhewq024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127657",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ee38f4b-328c-4f0f-be3f-02e947665bb6",
        "value": "nhewq025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e7e599b-a79d-4cd7-b178-4812b8384355",
        "value": "nhggbb001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "b48463a8-3ad9-499e-be33-646dcff31acc",
        "value": "nhggbb002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "a20b54b9-97e8-4ebf-9d12-9daa6e25a062",
        "value": "nhggbb003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "b936d2f5-c216-424f-91e3-412ed4a7ef0d",
        "value": "nhggbb004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "be3732ce-3cca-49de-b078-e9db26d3c745",
        "value": "nhggbb005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:58+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "38d3fba5-bb42-4800-8173-8082828395a5",
        "value": "nhggbb006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127658",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b2c7561-f73f-4dc2-bb24-f98f15334fa7",
        "value": "nhggbb007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2562df4-be24-440b-a5fc-dbed3b6bc1cb",
        "value": "nhggbb008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "604d50ea-ac98-40ba-9dd5-8fda333ec327",
        "value": "nhggbb009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1728340-2ed7-4a0c-9d85-14b6cc29477a",
        "value": "nhggbb010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "a928164f-222a-4ac5-9f57-77be2a79b12f",
        "value": "nhggbb011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "8366898e-faac-404f-a290-8b58e61f4dd3",
        "value": "nhggbb012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:00:59+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ebee9aa-9b1b-45be-88f0-7a8b1255d071",
        "value": "nhggbb013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:00+00:00",
        "timestamp": "1784127659",
        "to_ids": true,
        "type": "domain",
        "uuid": "002451c4-647e-47e0-abb9-26f632b20f5b",
        "value": "nhggbb014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:00+00:00",
        "timestamp": "1784127660",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd765e10-d3d4-49b1-979f-cd0887ef97fb",
        "value": "nhggbb015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:00+00:00",
        "timestamp": "1784127660",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa02cbcd-df22-423c-9faa-d5ed3a83b2b1",
        "value": "nhggbb016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:00+00:00",
        "timestamp": "1784127660",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2757053-32ab-4210-b0e4-3859eba634e8",
        "value": "nhggbb017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:00+00:00",
        "timestamp": "1784127660",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d0e8386-c709-448d-8840-853c2e889534",
        "value": "nhggbb018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:00+00:00",
        "timestamp": "1784127660",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4bc64ba-b154-442b-8ae5-5ff3f871ee5f",
        "value": "nhggbb019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "83596f9a-06da-477d-ab2c-be1e46e0acac",
        "value": "nhggbb020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c5ceda6-9843-405b-a009-eb12554cd5fd",
        "value": "nhggbb021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "34822e43-daaf-484f-bbe3-3843a2846eda",
        "value": "nhggbb022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "f689f301-e179-4242-be7c-fe8981c975ba",
        "value": "nhggbb023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcc5068a-ecda-47c1-8ca9-7640b256c02e",
        "value": "nhggbb024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c7809c3-f03c-47bf-b350-63b1c237985b",
        "value": "nhggbb025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:01+00:00",
        "timestamp": "1784127661",
        "to_ids": true,
        "type": "domain",
        "uuid": "d947d919-87b1-4ca3-aa75-6b043977d1a3",
        "value": "nnbxd001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4cf9cb5-8787-44d0-8094-70e57c184e47",
        "value": "nnbxd002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee89a793-dbc9-4671-8aed-dae28c38c969",
        "value": "nnbxd003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "924da646-23f3-4053-aa2e-ced16ba7b927",
        "value": "nnbxd004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "97f1f976-a02d-455f-adeb-9b20e70ced94",
        "value": "nnbxd005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6e7f2cb-a949-4439-ab32-1a6feb78140e",
        "value": "nnbxd006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "84060019-e468-4cf5-b7b0-fad657e28ea7",
        "value": "nnbxd007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:02+00:00",
        "timestamp": "1784127662",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ba2d2e6-b8ed-4ef8-bf06-f03f6563689a",
        "value": "nnbxd008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:03+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7f619d7-800e-4905-8e73-90b68395d149",
        "value": "nnbxd009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:03+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "77799a7c-92f2-4544-b7cb-5a1b28cd047a",
        "value": "nnbxd010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:03+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b52c78a-ab3c-4a73-8e2e-c9cbe204630f",
        "value": "nnbxd011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:03+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "b705f87e-0a44-413b-8dc3-7eb58cd8ad72",
        "value": "nnbxd012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:03+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "25939b3b-15a7-468f-a3fa-c353a71e046c",
        "value": "nnbxd013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:03+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "2062e5d1-40a3-4557-b22e-db71a6188476",
        "value": "nnbxd014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127663",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6eee047-c596-48c7-a0f8-411382da0b37",
        "value": "nnbxd015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3e4e4ce-6cae-4abe-a7be-6ffea6f16244",
        "value": "nnbxd016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6bbcd70-10b3-4790-8e35-e9a23df79b39",
        "value": "nnbxd017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d5f6bb2-b78c-46b1-8e75-1750c60e6082",
        "value": "nnbxd018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "d714aa57-c259-4fb7-a188-9e39571213c9",
        "value": "nnbxd019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d2e7e0c-f34d-40e3-b814-c2c175153b2e",
        "value": "nnbxd020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:04+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c17af5b-8f52-41e1-b3ed-128a5c248017",
        "value": "nnbxd021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127664",
        "to_ids": true,
        "type": "domain",
        "uuid": "53ea7fb7-0265-4393-b630-095237afc46d",
        "value": "nnbxd022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "960e9ca8-1528-4301-8a4a-922b77cf1182",
        "value": "nnbxd023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "844576bb-2fc9-4b51-a172-7ac95c614d58",
        "value": "nnbxd024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "13e2f247-0552-44b9-8c64-a506c130b096",
        "value": "nnbxd025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb7b9f9a-16a4-48cc-b1c2-b8ad0f4a8ef9",
        "value": "nuhgg001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "ded8a15c-14e0-4be7-b47f-258c9e8874e4",
        "value": "nuhgg002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:05+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "abc2584d-8744-405b-86c6-571e80c13448",
        "value": "nuhgg003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127665",
        "to_ids": true,
        "type": "domain",
        "uuid": "df489021-c060-4912-ba97-4740f95580ea",
        "value": "nuhgg004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f663596-6d5e-4829-93a2-2f6c8f050117",
        "value": "nuhgg005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "877b078e-a404-45b6-b9cb-7537dfd85608",
        "value": "nuhgg006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "887ce277-f5bc-4b7e-a6de-4f3f1e6ed29c",
        "value": "nuhgg007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe36976b-1550-4614-827f-afe09c8af303",
        "value": "nuhgg008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "45231476-2b74-4396-8c63-3e16f61c9500",
        "value": "nuhgg009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:06+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "61f48a8c-5f33-4793-a4fb-dd94bcaa370b",
        "value": "nuhgg010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127666",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2e607c2-dca5-43c3-a2d6-23db7e1543ec",
        "value": "nuhgg011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6de7c86-a2d8-4e33-b7f4-e84c62cecf72",
        "value": "nuhgg012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c006c4a-09b8-444f-8631-62b301162bf8",
        "value": "nuhgg013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c2c94f4-c54a-4c8e-b699-dcc1747ede1f",
        "value": "nuhgg014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b2c3ac2-cc57-4b82-bc94-9c0402224b94",
        "value": "nuhgg015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "45de5812-dd1c-440f-b821-fc62d07a4061",
        "value": "nuhgg016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:07+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cea673c-0d48-4588-8a0c-eca20fc0c669",
        "value": "nuhgg017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:08+00:00",
        "timestamp": "1784127667",
        "to_ids": true,
        "type": "domain",
        "uuid": "551de360-6d91-4e2b-ad91-c2da43ebd0c9",
        "value": "nuhgg018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:08+00:00",
        "timestamp": "1784127668",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fa5eae0-b902-4683-b1f2-7294819ea14b",
        "value": "nuhgg019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:08+00:00",
        "timestamp": "1784127668",
        "to_ids": true,
        "type": "domain",
        "uuid": "255cd230-4bc3-4c74-a5e4-ecf414265180",
        "value": "nuhgg020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:08+00:00",
        "timestamp": "1784127668",
        "to_ids": true,
        "type": "domain",
        "uuid": "51535522-0778-4b6e-b062-eb4787048cb1",
        "value": "nuhgg021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:08+00:00",
        "timestamp": "1784127668",
        "to_ids": true,
        "type": "domain",
        "uuid": "27313323-caf2-41a1-9241-ae1b4e65dbc6",
        "value": "nuhgg022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127668",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7938ea8-c750-4dea-a2bb-794423c42ca6",
        "value": "nuhgg023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea91501d-057e-4df2-98dc-39ad83fbc968",
        "value": "nuhgg024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9c688b7-57e5-4315-8c80-5539992511e8",
        "value": "nuhgg025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "89c8a92c-3af2-450b-9f5a-d738c370f210",
        "value": "rtyghhbf001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9248cd2-9613-4b88-a6d3-58d8beea3da6",
        "value": "vcuuhjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebd03bb0-88ba-4b97-aabe-3a6179bbd031",
        "value": "vcuuhjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:09+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7a30ac1-f048-456b-a0c0-bacbc7d9f2be",
        "value": "vcuuhjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127669",
        "to_ids": true,
        "type": "domain",
        "uuid": "49642ac7-6d92-4ff3-87da-70af0e4520ac",
        "value": "vcuuhjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "582f5688-5bb0-4c56-9e4e-35ae20a969b4",
        "value": "vcuuhjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "fca50075-e6e7-4057-a71a-ddb196b20b24",
        "value": "vcuuhjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6abc69b-d650-4bd2-8e84-f22a1c8938ca",
        "value": "vcuuhjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c35f3c5-5fb1-4e1e-8e3d-ae804ef0649e",
        "value": "vcuuhjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "45cddc07-c5e1-4482-be24-b75a9a2bf12e",
        "value": "vcuuhjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:10+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "7102154b-cba7-4bb3-8a73-ec92432c3b03",
        "value": "vcuuhjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127670",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ae9d006-eadb-49c2-83f4-0b6de72b10d2",
        "value": "vcyhjhjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "24f51684-fafa-40ed-912e-4e82bdde759f",
        "value": "vcyhjhjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8352249-3274-451d-a870-a4ec32539e80",
        "value": "vcyhjhjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e47994a-99b2-40ea-9259-9da7e6c28139",
        "value": "vcyhjhjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "846574bf-d4c5-4dcc-a27d-b086ccc227cc",
        "value": "vcyhjhjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3cf3351-bc5b-4477-a7da-b185b5ab37a8",
        "value": "vcyhjhjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:11+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9e64666-74cc-4ca9-a887-6652425d74b9",
        "value": "vcyhjhjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127671",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef4e5011-e927-4990-a852-ea1de547bd95",
        "value": "vcyhjhjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "b39abf78-0fb9-4baf-94b4-32516b741608",
        "value": "vcyhjhjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "e31e14ec-5c54-469c-869b-bf81c7247031",
        "value": "vcyhjhjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fceceb7-27b4-4b68-89d6-c0d4f8e4a505",
        "value": "vgfuhjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea5317a7-50d8-4b00-918f-f2e0a96af250",
        "value": "vgfuhjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "5da0cae0-5e75-4fb6-877c-e3c0e62d1d1c",
        "value": "vgfuhjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:12+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd5cafe5-3a9b-4789-ae9d-a9627eef0906",
        "value": "vgfuhjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127672",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1ac6288-2622-48e4-9dec-56838c75ea49",
        "value": "vgfuhjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "53a25949-4ea5-4e0c-8bcc-554df5bdfd85",
        "value": "vgfuhjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2589d22-7569-4deb-808d-443294821634",
        "value": "vgfuhjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "a442d672-5263-46cd-888d-d1eb9a53a7a3",
        "value": "vgfuhjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eb90ef9-f28c-4b28-9bde-b894f26c732b",
        "value": "vgfuhjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "14f29a2b-6906-4175-9115-6546f2e9d9d6",
        "value": "vgfuhjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:13+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbee08e0-c9b7-46a7-adff-c24258da4449",
        "value": "vgfuhjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127673",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c899084-d490-4458-9ef5-f16c7b5e0f04",
        "value": "vgjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "5939a0df-8e81-43bf-8093-653ee970b890",
        "value": "vgjhd006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad736956-396d-41d5-9f6e-c60bdde5cbb2",
        "value": "vgjhd007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "fde58d8b-5d58-4b45-9ec1-20e72535248c",
        "value": "vgjhd008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "56f15264-8158-4ea8-81ef-7adda8baa049",
        "value": "vgjhd009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc288240-9d12-4a9e-996b-ea517bc58ee3",
        "value": "vgjhd010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:14+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1b94f13-de1c-4553-8ae3-b634422969a9",
        "value": "vgjhd011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127674",
        "to_ids": true,
        "type": "domain",
        "uuid": "914b905a-10f2-4f56-b33e-4541a8792a5e",
        "value": "vgjhd012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "67b2804f-21cf-4469-814f-9410ecfa4e36",
        "value": "vgjhd013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "df3a8a44-0b4e-454f-b2c1-5a4dfc1e0153",
        "value": "vgjhd014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "435f8609-2016-48ec-89dc-84aad2ffe16a",
        "value": "vgjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e1fbdd6-fa89-437b-8c38-29ef74da5d24",
        "value": "vgjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e9d79cf-914e-4c77-9399-acbbededebfb",
        "value": "vgjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:15+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9311734-4b7a-4d22-8ce8-feae9db977a3",
        "value": "vgjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127675",
        "to_ids": true,
        "type": "domain",
        "uuid": "06bae988-901c-44e6-939e-5cafe07ab227",
        "value": "vgjvd015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127676",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bf18bef-5373-441e-a9d3-3b4c9784d725",
        "value": "vgjvd016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127676",
        "to_ids": true,
        "type": "domain",
        "uuid": "def9b6d2-f942-4f65-8552-0d1517795508",
        "value": "vgjvd017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127676",
        "to_ids": true,
        "type": "domain",
        "uuid": "41706748-5eab-427f-9f2c-064fcf251f10",
        "value": "vgjvd018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127676",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c6aea34-47a9-4ec9-9b06-4672452d188b",
        "value": "vgjvd019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127676",
        "to_ids": true,
        "type": "domain",
        "uuid": "e812793e-fbf5-48a9-917c-95fba9066845",
        "value": "vgjvd020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:16+00:00",
        "timestamp": "1784127676",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ed6ac49-c5f7-4057-8170-130b07a90e96",
        "value": "vgjvd021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "354663ed-e960-4944-ae8d-b1ec8b3e0038",
        "value": "vgjvd022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "450bfbc9-ee7d-48de-b770-811b36328631",
        "value": "vgjvd023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce98fcf3-ef1d-497f-9033-9df29d334b3e",
        "value": "vgjvd024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8adc63b-a2f9-47e6-96d2-9b71600572ca",
        "value": "vgjvd025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4d2ba0a-50dc-4e1b-92cf-18241776f867",
        "value": "vgvhhgyjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f8c5a50-d03b-45b6-9a31-e7747eeeea60",
        "value": "vgvhhgyjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:17+00:00",
        "timestamp": "1784127677",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc018932-f3ae-488c-b9f9-a27c2787e838",
        "value": "vgvhhgyjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "75796863-145f-4a84-8973-f87678a3ed9b",
        "value": "vgvhhgyjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "e79ceb4f-7939-4b7c-9337-d22bb206633b",
        "value": "vgvhjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "22430338-5ccd-42ef-9d0d-6b68121ebb74",
        "value": "vgvhjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cd67b6d-72ed-4621-9c58-ad2570cbcec1",
        "value": "vgvhjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "480911f0-5b60-4698-91ab-1b6fc186d252",
        "value": "vgvhjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2759cb0-42ee-4505-a431-a694efe6b347",
        "value": "vgvxdryjhjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:18+00:00",
        "timestamp": "1784127678",
        "to_ids": true,
        "type": "domain",
        "uuid": "aeb5e207-1589-493f-afbe-94d713d4f56c",
        "value": "vgvxdryjhjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:19+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "20f6df31-b9c4-4188-8d6b-b50865933ee4",
        "value": "vgvxdryjhjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:19+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "d769fc9f-8075-454b-90ee-20fdccb90f6d",
        "value": "vgvxdryjhjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:19+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "fae3f8cb-eb9f-4d48-b668-dd8ab8b06b0d",
        "value": "vgvxdryjhjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:19+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "13c916a3-3f14-42b9-a01b-af1ee48c59f2",
        "value": "vgvxdryjhjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:19+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ddca4e1-351c-4cf6-838c-758fb575c922",
        "value": "vgvxdryjhjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:19+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8224a25-abea-475c-a69f-7ed5f3ee5d3f",
        "value": "vgvxdryjhjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127679",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e9ae1c4-8923-4c89-a959-1dc0855a8a8f",
        "value": "vgvxdryjhjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "40f822bb-c86b-4919-ae4f-087f2ed8711a",
        "value": "vgvxdryjhjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "786e3fd5-fb2b-40bc-90f5-45dd058bbaf4",
        "value": "vgvxdryjhjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "1254f20e-509d-4800-8a96-69582464a404",
        "value": "vgvxvgyjhjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "934a4bc5-5c0e-46ef-89e1-187e18b9ad9f",
        "value": "vgvxvgyjhjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5e6ed18-365b-473a-8073-5b53aba35d93",
        "value": "vgvxvgyjhjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:20+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "e53e7f8b-568b-45a2-ae51-458fbeb7ba84",
        "value": "vgvxvgyjhjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127680",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa45e116-a3be-4bcf-9adf-30001dbb97fd",
        "value": "vgvxvgyjhjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "a78728ca-e23f-47f0-967e-f2f48c6d27b4",
        "value": "vgvxvgyjhjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "72499833-185d-4244-adfb-2ecdd4080845",
        "value": "vgvxvgyjhjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "eda8b28c-801a-4caa-b0f8-6ef12b12e240",
        "value": "vgvxvgyjhjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f50f342-a68f-46ab-8a07-f274e9f423b5",
        "value": "vgvxvgyjhjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "d680de4a-afbe-4ccc-9bd1-ad891c16566a",
        "value": "vgvxvgyjhjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:21+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eb183f0-3e10-47c0-836b-bf0a0f6f941b",
        "value": "vgvxvgyjhjh026.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127681",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d9b6e30-90a1-49ae-8f64-83e06ae9aa5c",
        "value": "vgxhjhjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba4fce7-4982-4cb6-8c29-f2eed73f0421",
        "value": "vgxhjhjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "91ff5207-435d-4812-b88d-71391d9c2cde",
        "value": "vgxhjhjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2b1dec5-26c9-4b4b-b8f6-09130ab0b780",
        "value": "vgxhjhjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "40c1740c-798b-4343-b0c7-9b2acb068665",
        "value": "vgxhjhjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "173d5aa2-5ed2-400f-a250-83b023ff75db",
        "value": "vgxhjhjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:22+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "034a45bf-bb30-46e7-83a2-5792cd3c27a6",
        "value": "vgxhjhjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:23+00:00",
        "timestamp": "1784127682",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4103238-04b6-4277-a0c2-5adeab7794eb",
        "value": "vgxhjhjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:23+00:00",
        "timestamp": "1784127683",
        "to_ids": true,
        "type": "domain",
        "uuid": "5edaac51-341a-42cf-9a57-9f85f6e43da5",
        "value": "vgxhjhjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:23+00:00",
        "timestamp": "1784127683",
        "to_ids": true,
        "type": "domain",
        "uuid": "7700f561-c58c-4ce1-b6ac-3ce7ed731839",
        "value": "vgxhjhjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:23+00:00",
        "timestamp": "1784127683",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f1c8e62-775a-4592-ad63-155347484d53",
        "value": "vgxhjhjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:23+00:00",
        "timestamp": "1784127683",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae6cb3e6-cc1a-43fc-ae9e-d81898d57d6b",
        "value": "vgyjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127683",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5b7ebc1-51f7-46b0-b06f-e813f727c0a7",
        "value": "vgyjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a3cb30d-02df-40d1-91d9-c5647cb3eb09",
        "value": "vgyjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "50c31be5-17c3-4004-9454-c5dbbfdbb12b",
        "value": "vgyjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "1515136f-7d30-4a28-93ab-cb089b9dd946",
        "value": "xrtfybvb001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ca72765-8725-4a33-bee5-e793e7f0c7fd",
        "value": "xrtfybvb002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f4f1b84-36f4-4215-91f9-441d6ea542a1",
        "value": "xrtfybvb003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:24+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "092fb5d7-a341-47ab-a9c4-319781d0f615",
        "value": "xrtfybvb004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127684",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e8fd215-dffc-4ce8-8795-e7b9a419b85c",
        "value": "xrtfybvb005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "7145a2d7-4cbd-46f0-a53b-71cfb8fee224",
        "value": "xrtfybvb006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d4dd044-cb80-46b6-8398-8d2daa116b1d",
        "value": "xrtfybvb007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "312bec2b-f9a9-42ae-8531-fb194f3d1c32",
        "value": "xrtfybvb008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "73f8c9eb-ab6e-49dd-aa12-6e040266fcae",
        "value": "xrtfybvb009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f0f7bda-df55-4bcf-bbf5-d6913808ad9b",
        "value": "xrtfybvb010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:25+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6ebc126-77f1-4dee-8828-16a4bc4b7591",
        "value": "xrtfybvb011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127685",
        "to_ids": true,
        "type": "domain",
        "uuid": "9089f706-1e4c-400c-a183-36a36d510129",
        "value": "xrtfybvb012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "439daba8-320c-404b-9c82-10611dfec759",
        "value": "xrtfybvb013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "f43d4cad-8bcb-4f16-91c1-ded52ad1d073",
        "value": "xrtfybvb014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e3f2968-e27a-47e6-ad5e-28818bc6c262",
        "value": "xrtfybvb015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "35b18122-caf0-4771-aafa-0494ef722158",
        "value": "xrtfybvb016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1f0474c-8152-4da0-af99-87adc57ccf29",
        "value": "xrtfybvb017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:26+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "947859b5-9ce8-48be-93e8-f5d2bb43bcc0",
        "value": "xrtfybvb018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127686",
        "to_ids": true,
        "type": "domain",
        "uuid": "6de6781e-88cf-4864-9f03-3a8d132ee9f8",
        "value": "xrtfybvb019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127687",
        "to_ids": true,
        "type": "domain",
        "uuid": "326e289e-7fc1-453e-9503-820cee420a19",
        "value": "xrtfybvb020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127687",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4a3223c-f23a-4449-b334-2d8ec7701e93",
        "value": "xrtfybvb021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127687",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d08f112-a5c6-4d99-b037-5f318883b78f",
        "value": "xrtfybvb022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127687",
        "to_ids": true,
        "type": "domain",
        "uuid": "23346aa3-88dd-4aeb-9ceb-11f2ec556bda",
        "value": "xrtfybvb023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127687",
        "to_ids": true,
        "type": "domain",
        "uuid": "e74f7376-94da-42b8-8a6a-a2d40c284f46",
        "value": "xrtfybvb024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:27+00:00",
        "timestamp": "1784127687",
        "to_ids": true,
        "type": "domain",
        "uuid": "a246b8b0-6e26-4e44-abed-0e44ec9b2353",
        "value": "xrtfybvb025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:28+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7227eb8-5859-4349-a18f-24d44c0b4f3a",
        "value": "0.hzdfthr005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:28+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "c15f9572-d84f-419e-a7e9-bb6aa5b429ac",
        "value": "0.hzdfthr014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:28+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "78fb30c7-ee15-41bf-b4ad-6f729674dc5e",
        "value": "0.hzdfthr023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:28+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a56a18-f9a3-4c14-8a4e-1a4f8eec658b",
        "value": "0.vcuuhjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:28+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "57b13160-d517-4891-85fa-b4214abfe44f",
        "value": "1.hzdfthr006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:28+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "37deaedb-6a28-4ee3-9b11-1cf7a6ce8ee7",
        "value": "1.hzdfthr015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127688",
        "to_ids": true,
        "type": "domain",
        "uuid": "3336e28d-89ff-43fc-adb1-eb53c9780d37",
        "value": "1.hzdfthr024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127689",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce60702f-104f-4dae-8e00-9b82bdf15cc8",
        "value": "1.vcuuhjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127689",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b954322-7223-4fc9-93ce-df2e97a3db9d",
        "value": "2.hzdfthr007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127689",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b1ee0b1-1ce2-4e99-874a-a1b0c356fce9",
        "value": "2.hzdfthr016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127689",
        "to_ids": true,
        "type": "domain",
        "uuid": "f16fabab-c2aa-495b-9c0e-f16dd6245521",
        "value": "2.hzdfthr025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127689",
        "to_ids": true,
        "type": "domain",
        "uuid": "0efea919-b2ef-49c4-a38a-cab15b6ba757",
        "value": "2.vcuuhjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:29+00:00",
        "timestamp": "1784127689",
        "to_ids": true,
        "type": "domain",
        "uuid": "198bc126-c4c7-49b2-a0ce-2546b5cffe0d",
        "value": "2d.gyhghjjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:30+00:00",
        "timestamp": "1784127690",
        "to_ids": true,
        "type": "domain",
        "uuid": "9445df72-b950-432f-a663-5c3191e5dca1",
        "value": "2d.gyhghjjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:30+00:00",
        "timestamp": "1784127690",
        "to_ids": true,
        "type": "domain",
        "uuid": "93c73f6f-ff83-4495-b94d-a401ddeda362",
        "value": "2e.gyhghjjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:30+00:00",
        "timestamp": "1784127690",
        "to_ids": true,
        "type": "domain",
        "uuid": "46987fb1-d2e5-46b8-b060-1f79786cd845",
        "value": "2e.gyhghjjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:30+00:00",
        "timestamp": "1784127690",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3d6c8e2-cfd4-471d-a33b-0c2bab6b77c2",
        "value": "2e.gyhghjjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:30+00:00",
        "timestamp": "1784127690",
        "to_ids": true,
        "type": "domain",
        "uuid": "87d4a3b8-8fad-4eec-98f9-c8a785d9ae42",
        "value": "2f.gyhghjjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127690",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b2b4036-badd-4bed-bb8c-ceb1cc53f145",
        "value": "2f.gyhghjjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea43d26f-7c63-406c-9c89-4ce776447d51",
        "value": "2f.gyhghjjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbd7e9f7-f538-4004-bfd7-7b1870a7d511",
        "value": "2g.gyhghjjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eed76aa-784f-4dbd-88bb-50c3a9689cd9",
        "value": "2g.gyhghjjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "76944a05-caf9-431a-9a89-14dc3d5acb43",
        "value": "2g.gyhghjjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f2e2232-4106-4956-99ae-a7d2b42c0026",
        "value": "2h.gyhghjjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:31+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8e15b03-6fa0-4ad6-a517-eae06c1b7da8",
        "value": "2h.gyhghjjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127691",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2488b80-0093-4adf-b0d0-1d87b31b20be",
        "value": "2h.gyhghjjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "440408db-c0dd-40cf-9a67-5f43ad5e92e2",
        "value": "2i.gyhghjjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "71556bf1-9dea-4ece-828f-2c557806ac4c",
        "value": "2i.gyhghjjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "9560ade8-6b89-485d-91df-5dbd2ee928ab",
        "value": "2i.gyhghjjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6705c3b-a3e0-45ff-85ff-85260c4dae77",
        "value": "2j.gyhghjjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbf1f34e-022c-4435-9035-8c9289c48563",
        "value": "2j.gyhghjjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:32+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b52846d-ca7b-4185-b9e7-32a91a05da00",
        "value": "2j.gyhghjjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127692",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c04ade1-9c4a-49ff-af77-c2436d2ba2c6",
        "value": "2k.gyhghjjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "b153d740-868a-4af5-895d-c072c58774a6",
        "value": "2k.gyhghjjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae503c47-d207-4110-a2c5-3d5df1790ae2",
        "value": "2l.gyhghjjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1ac85f4-d7ef-4f7b-85ed-b4745b59f859",
        "value": "2l.gyhghjjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c9b1931-2a50-4a66-a82c-14c8375fa2bc",
        "value": "2m.gyhghjjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "34829587-58ae-4a67-bbdc-912a6cbdabb5",
        "value": "2o.rtyghhbf001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:33+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "77d63673-80e8-44de-89bf-1685c3b02cf0",
        "value": "2p.vcyhjhjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127693",
        "to_ids": true,
        "type": "domain",
        "uuid": "44cd9dbd-2cd3-4055-97b3-eb369dd2f8a4",
        "value": "2p.vgvhjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "18a255e2-d8ab-4f68-8aa2-b13a68b7a1f7",
        "value": "2q.vcyhjhjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a9930bc-d358-411c-8b46-902074fdda17",
        "value": "2q.vgvhjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "0093801b-d63a-472c-95d2-a038835e649d",
        "value": "2r.hhgxxddr001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "129486a2-4ef5-4d97-a839-3c9c2d709fb8",
        "value": "2r.hhgxxddr010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a7f72cc-dd01-48ec-8e3a-656cc7abf39e",
        "value": "2r.vcyhjhjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:34+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b16b90e-6171-4cad-b418-98aed3f4d43e",
        "value": "2r.vgvhjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:35+00:00",
        "timestamp": "1784127694",
        "to_ids": true,
        "type": "domain",
        "uuid": "44da0647-94c0-4c77-8ec0-b68a40300a6a",
        "value": "2r.vgxhjhjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:35+00:00",
        "timestamp": "1784127695",
        "to_ids": true,
        "type": "domain",
        "uuid": "1112e48a-aab1-4a47-a9b3-b290d6d055d2",
        "value": "2s.hhgxxddr002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:35+00:00",
        "timestamp": "1784127695",
        "to_ids": true,
        "type": "domain",
        "uuid": "e91bd97e-a734-437e-94f0-9cc3feca3db7",
        "value": "2s.hhgxxddr011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:35+00:00",
        "timestamp": "1784127695",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbd41e97-7f69-4907-a33e-362646a51dbf",
        "value": "2s.hhgxxddr020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:35+00:00",
        "timestamp": "1784127695",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ef4e386-1f8b-44c0-a108-aba10479dd76",
        "value": "2s.vcyhjhjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:35+00:00",
        "timestamp": "1784127695",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7b25e81-6145-4a15-9d65-5cecb895765d",
        "value": "2s.vgvhjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127695",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0bdd0-91c8-4fce-92a9-a27f35acbf79",
        "value": "2s.vgxhjhjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "b98f0903-d0a5-40d2-8f10-ceeec06c4e53",
        "value": "2t.hhgxxddr003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "72178bdc-6c22-4400-9fad-23d847ce88ac",
        "value": "2t.hhgxxddr012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "49dc74e6-652c-4063-b97c-f6d13700ba65",
        "value": "2t.hhgxxddr021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0376311-df54-4256-b988-afb34b130e72",
        "value": "2t.vcyhjhjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e471b47-0a49-4ee6-877b-d5680d0b64d8",
        "value": "2t.vgxhjhjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:36+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "1939c229-8896-4a93-9b97-091f7e471dd5",
        "value": "2u.gyhghunj001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127696",
        "to_ids": true,
        "type": "domain",
        "uuid": "60b12a7d-2e85-4703-bddb-e778accbed2c",
        "value": "2u.gyhghunj010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127697",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8948d33-e28c-46b6-9523-c406384165ea",
        "value": "2u.hhgxxddr004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127697",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d14e619-2477-480f-91ec-59cbe477c6b5",
        "value": "2u.hhgxxddr013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127697",
        "to_ids": true,
        "type": "domain",
        "uuid": "6450db05-53d7-4190-84cd-aca1a19d45ec",
        "value": "2u.hhgxxddr022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127697",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4015ac3-57c7-4123-aeda-5459ca335790",
        "value": "2u.vcyhjhjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127697",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0142606-7f62-49f0-97ee-c43c4710905d",
        "value": "2u.vcyhjhjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:37+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "1958a05e-3c87-48fc-b76c-c925a6d5374a",
        "value": "2u.vgxhjhjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:38+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ee08202-b725-4327-9915-af1a070c5635",
        "value": "2v.gyhghunj002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:38+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "befc9689-6f6f-4c1f-9c32-bc0ccce9d861",
        "value": "2v.gyhghunj011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:38+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "c82339ae-08ab-4236-b7a5-0de9e577347d",
        "value": "2v.gyhghunj020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:38+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "54db123e-7346-4412-8287-2dcd3c6f29e8",
        "value": "2v.hhgxxddr005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:38+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e8dbf8f-fe9a-4018-92aa-592b3676efd9",
        "value": "2v.hhgxxddr014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:39+00:00",
        "timestamp": "1784127698",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2242aae-6209-48ea-bb11-9d07873c7dfa",
        "value": "2v.hhgxxddr023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:39+00:00",
        "timestamp": "1784127699",
        "to_ids": true,
        "type": "domain",
        "uuid": "d15e2bdc-2c18-414e-9b1b-211e6d00808c",
        "value": "2v.vcyhjhjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:39+00:00",
        "timestamp": "1784127699",
        "to_ids": true,
        "type": "domain",
        "uuid": "edc82158-5058-4f01-8a8a-89c35c9c9a74",
        "value": "2v.vgxhjhjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:39+00:00",
        "timestamp": "1784127699",
        "to_ids": true,
        "type": "domain",
        "uuid": "04d92ed9-5fa4-4dd9-ad72-7e01fd73687a",
        "value": "2v.vgxhjhjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:39+00:00",
        "timestamp": "1784127699",
        "to_ids": true,
        "type": "domain",
        "uuid": "45a4c6ae-2075-4d43-8458-6ed8b984b2c5",
        "value": "2w.gyhghunj003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:39+00:00",
        "timestamp": "1784127699",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd8aa025-56f7-4bf2-b516-d1903159974b",
        "value": "2w.gyhghunj012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a568e9b-ef10-46e3-b4d8-90a46ec793d8",
        "value": "2w.gyhghunj021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "db56fd2d-0ad5-4951-b5de-67f041e32c62",
        "value": "2w.hhgxxddr006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8014fe9-3c0e-43f2-a66d-83146bc4fb8c",
        "value": "2w.hhgxxddr015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "7029e001-fe00-42dd-a9fb-5f96c10360ba",
        "value": "2w.hhgxxddr024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddaadbc5-8b27-4dec-8373-4cdcdadc0678",
        "value": "2w.vcyhjhjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc6d9573-43aa-4be6-9b5a-9c9aa5d282a3",
        "value": "2w.vgxhjhjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:40+00:00",
        "timestamp": "1784127700",
        "to_ids": true,
        "type": "domain",
        "uuid": "44906a43-d745-42f8-a9f3-0b2858feb18a",
        "value": "2w.vgxhjhjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "30365eb4-fec5-47a9-80cd-50c0bb42c6c7",
        "value": "2x.gyhghunj004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "54a7ede4-7a3a-4c2f-9115-c391dc6170ee",
        "value": "2x.gyhghunj013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "d884f738-ab98-45db-8798-52030e2c34bb",
        "value": "2x.gyhghunj022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "682344ba-dd73-4b36-a813-fdcd8869441f",
        "value": "2x.hhgxxddr007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5e288a3-b259-47a2-a89b-6c60f40e4fc9",
        "value": "2x.hhgxxddr016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "99d0e312-e8a4-4006-80bc-2a08f11d49e2",
        "value": "2x.hhgxxddr025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:41+00:00",
        "timestamp": "1784127701",
        "to_ids": true,
        "type": "domain",
        "uuid": "723ea280-f823-4f2c-aad0-96163a6f2667",
        "value": "2x.hunghunj001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:42+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "df73f2b8-7bfe-4a86-9ee8-cd083fb91ceb",
        "value": "2x.hunghunj010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:42+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd74534b-c3d5-4676-ab5d-eea661b26364",
        "value": "2x.vcyhjhjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:42+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "2661b723-d9bd-4407-80da-24d57ce50f24",
        "value": "2x.vgxhjhjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:42+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "d888fc3b-2c7d-4917-bb8e-5642b260a4d5",
        "value": "2y.gyhghunj005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:42+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "54320250-a580-497c-adb7-42d496679712",
        "value": "2y.gyhghunj014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:42+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "f80a9de3-f9b1-47e7-a597-ac956bcb8936",
        "value": "2y.gyhghunj023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127702",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b869206-6fc1-47d8-a351-af9073147834",
        "value": "2y.hhgxxddr008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "22cd34c7-0dc7-4bdc-a449-6a20ec929136",
        "value": "2y.hhgxxddr017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c3abef1-2e31-48b7-afc4-48cb0e1d7f44",
        "value": "2y.hunghunj002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "85a418bc-ca33-4579-98e5-84b528384a14",
        "value": "2y.hunghunj011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fd835a8-e198-4529-8ebd-dc5023ad99de",
        "value": "2y.hunghunj020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "532afc6c-7c28-4509-a3e7-eba8726d40c1",
        "value": "2y.vgxhjhjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:43+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f67d0fc-b3ef-4ad2-a627-03502b65866f",
        "value": "2z.gyhghunj006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:44+00:00",
        "timestamp": "1784127703",
        "to_ids": true,
        "type": "domain",
        "uuid": "20ec07e2-2b55-461c-b11a-7cc9ebe90e89",
        "value": "2z.gyhghunj015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:44+00:00",
        "timestamp": "1784127704",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfc56cc1-3d34-4646-a298-b9207d8dad1f",
        "value": "2z.gyhghunj024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:44+00:00",
        "timestamp": "1784127704",
        "to_ids": true,
        "type": "domain",
        "uuid": "65060827-b0d6-4727-bcb7-317eee13aed2",
        "value": "2z.hhgxxddr009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:44+00:00",
        "timestamp": "1784127704",
        "to_ids": true,
        "type": "domain",
        "uuid": "9841d4f1-ad82-4a5f-9123-438b8d262821",
        "value": "2z.hhgxxddr018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:44+00:00",
        "timestamp": "1784127704",
        "to_ids": true,
        "type": "domain",
        "uuid": "7317755c-11c6-4873-85f3-d39a974036ec",
        "value": "2z.hunghunj003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:44+00:00",
        "timestamp": "1784127704",
        "to_ids": true,
        "type": "domain",
        "uuid": "11d1db91-2084-4e0e-bbfa-648a08111bc5",
        "value": "2z.hunghunj012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127704",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5d4d1f5-dc51-4b20-a18d-1030e0812f41",
        "value": "2z.hunghunj021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fa95884-e331-4e6c-b413-9de8d4657c4e",
        "value": "2z.vgxhjhjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecd115ea-d169-4e50-988d-8d1015912b8d",
        "value": "3.hzdfthr008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ef7a2c8-776c-46f5-80c0-d96d7ec21a3d",
        "value": "3.hzdfthr017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "546e2afc-e694-4377-b417-babb12ce0895",
        "value": "3.vcuuhjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "283c1ae8-c769-4b10-b7dd-c5ab0bd8db68",
        "value": "30.gyhghunj007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:45+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0d48029-53b1-499c-9a43-70e4ca166b15",
        "value": "30.gyhghunj016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127705",
        "to_ids": true,
        "type": "domain",
        "uuid": "d76de113-f207-448c-bb92-11a78845ac35",
        "value": "30.gyhghunj025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127706",
        "to_ids": true,
        "type": "domain",
        "uuid": "a67348cc-723e-46a4-8248-a1b4ae86c7d4",
        "value": "30.hhgxxddr019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127706",
        "to_ids": true,
        "type": "domain",
        "uuid": "d70c5368-d38b-43c2-9bb8-0fa3b7ddd0a2",
        "value": "30.hunghunj004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127706",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a196ac6-a549-4f0c-9fd2-950a42f748a1",
        "value": "30.hunghunj013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127706",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d187b6e-2585-4515-8a6c-4054d748904a",
        "value": "30.hunghunj022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127706",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ec8018e-f54d-4548-adcf-405da18f4758",
        "value": "31.gyhghunj008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:46+00:00",
        "timestamp": "1784127706",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c356e85-e8de-4e68-a8d4-f929f2a2b496",
        "value": "31.gyhghunj017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:47+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bd83730-247c-4dd5-8fff-939eada77c1d",
        "value": "31.hunghunj005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:47+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "44ec3251-a3e0-41e4-8dea-c1b799492ac4",
        "value": "31.hunghunj014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:47+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "04b36bdb-a849-4c3e-b5df-b0cff4a81c6d",
        "value": "31.hunghunj023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:47+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4817bc7-ad64-4958-b188-3b2fc272632b",
        "value": "32.gyhghunj009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:47+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "0984c5b8-8629-4e7c-bd1f-67ea499f3f4f",
        "value": "32.gyhghunj018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:47+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "653d1737-4826-4d84-880f-b42ce489a573",
        "value": "32.hunghunj006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127707",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b7374d4-53ef-4464-b0cd-7237de65d47b",
        "value": "32.hunghunj015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127708",
        "to_ids": true,
        "type": "domain",
        "uuid": "20bfc3ea-ec91-4800-a993-9c4d26badc5a",
        "value": "32.hunghunj024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127708",
        "to_ids": true,
        "type": "domain",
        "uuid": "01ec34d2-04a1-4705-883f-886ebe50bd36",
        "value": "33.gyhghunj019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127708",
        "to_ids": true,
        "type": "domain",
        "uuid": "87c90379-a9e7-498f-9bbb-e62654423eca",
        "value": "33.hunghunj007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127708",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c25a648-9fc7-48e5-bae4-f56a1c20dc14",
        "value": "33.hunghunj016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127708",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a36505c-9549-4178-9c04-c5e5dc26f7b5",
        "value": "33.hunghunj025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:48+00:00",
        "timestamp": "1784127708",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6b59a1b-378d-4c16-9643-297acde199e8",
        "value": "34.hunghunj008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:49+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "104c29ca-cc1d-45b0-a8ba-543c7c639789",
        "value": "34.hunghunj017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:49+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "508f5a1c-c696-4d20-8c31-2ff4e0739af7",
        "value": "35.hunghunj009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:49+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba43dbb5-4d93-482d-b54d-dac937371883",
        "value": "35.hunghunj018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:49+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "6004dfe5-a129-4867-b65c-67cca1d5ad37",
        "value": "36.hunghunj019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:49+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ebac0cc-9631-44db-a465-331a4f622bb4",
        "value": "39.hhuyuhnj001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:49+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d75b081-04c6-4851-a6f7-17513db87005",
        "value": "39.hhuyuhnj010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127709",
        "to_ids": true,
        "type": "domain",
        "uuid": "51229462-7a03-41cd-af14-9dda321793df",
        "value": "3a.hhuyuhnj002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9370f1e-8f69-48a2-988d-d801a9f5a4b7",
        "value": "3a.hhuyuhnj011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "91f968e7-4a6b-4299-b8a5-2e54f878bb95",
        "value": "3a.hhuyuhnj020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e75b5ec-5713-4768-b6d7-78609c760f38",
        "value": "3b.hhuyuhnj003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ec605eb-79ea-44a8-9079-e7442ada9bdc",
        "value": "3b.hhuyuhnj012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e7e0d54-0aab-4b0c-b098-a46c9f69749d",
        "value": "3b.hhuyuhnj021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:50+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5c99e83-87a7-4165-a005-b1c08b811a7c",
        "value": "3c.hhuyuhnj004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127710",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b1cf94c-ab84-4de5-9914-2e04ed660640",
        "value": "3c.hhuyuhnj013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "73f1a314-6302-4951-a7fb-3f67656d6381",
        "value": "3c.hhuyuhnj022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecc6945c-9fc9-403f-b504-8df1711315a4",
        "value": "3d.hhuyuhnj005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "43fc71da-d2e7-4075-960d-ba08bb148821",
        "value": "3d.hhuyuhnj014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "e70ea24e-9cee-4e5d-a8af-99b24bdf10b9",
        "value": "3d.hhuyuhnj023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9482f42-28a3-4d23-ac5b-22fca152ee95",
        "value": "3d.xrtfybvb001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:51+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff616643-d70a-4297-909b-dc577765f3e0",
        "value": "3d.xrtfybvb010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127711",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb18ea75-e17d-4d63-b0f4-2070fb3d7247",
        "value": "3e.hhuyuhnj006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127712",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5d7194b-4e97-416b-9098-4755c0141d3a",
        "value": "3e.hhuyuhnj015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127712",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc2e9d65-3b9e-4e4f-aa8d-606f1d719071",
        "value": "3e.hhuyuhnj024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127712",
        "to_ids": true,
        "type": "domain",
        "uuid": "5be7793f-0c06-4901-afc1-5683eb1ae465",
        "value": "3e.xrtfybvb002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127712",
        "to_ids": true,
        "type": "domain",
        "uuid": "794c32a5-6519-4145-a52b-da3c9d714099",
        "value": "3e.xrtfybvb011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127712",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0cef88e-f235-4b79-ad41-94782758a14b",
        "value": "3e.xrtfybvb020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:52+00:00",
        "timestamp": "1784127712",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f660ec-a9b5-4991-abe8-e903e6497c42",
        "value": "3f.hhuyuhnj007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:53+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fd6a478-ded9-4cb3-9d63-02d2754f04c0",
        "value": "3f.hhuyuhnj016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:53+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bdc1d46-bbc3-451b-af4f-5938e6417e96",
        "value": "3f.hhuyuhnj025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:53+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "501a5cee-3d44-4811-90ba-1cb79d0a9300",
        "value": "3f.xrtfybvb003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:53+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "f936d679-350a-4cbe-a07d-cd677b3f2622",
        "value": "3f.xrtfybvb012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:53+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "2de58b65-8093-4e5b-9393-f1c697ab68fe",
        "value": "3f.xrtfybvb021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:53+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "e00a6a8e-ca09-4b73-8712-c914d7b3d48f",
        "value": "3g.hhuyuhnj008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127713",
        "to_ids": true,
        "type": "domain",
        "uuid": "86108b62-9e00-4a4e-b196-3de7281d9b17",
        "value": "3g.hhuyuhnj017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "0199dd94-cb20-4e62-9c6e-ecc62f8ea89b",
        "value": "3g.xrtfybvb004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bb5cfc3-4268-42cd-9b0f-f996694610e1",
        "value": "3g.xrtfybvb013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ce74a98-332d-4c3e-bf86-121d218d780b",
        "value": "3g.xrtfybvb022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "c508d188-8897-4c92-8936-ed6e095951a6",
        "value": "3h.hhuyuhnj009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "545cbf02-bb38-4b54-9b28-dfab7b1dffb9",
        "value": "3h.hhuyuhnj018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:54+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd95b70c-0ec9-4cca-b7fc-89262b958430",
        "value": "3h.xrtfybvb005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:55+00:00",
        "timestamp": "1784127714",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c2f0aad-a54f-4866-bd64-b4a983a885b2",
        "value": "3h.xrtfybvb014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:55+00:00",
        "timestamp": "1784127715",
        "to_ids": true,
        "type": "domain",
        "uuid": "989033cb-9402-4d8f-a9c3-4d514d901d48",
        "value": "3h.xrtfybvb023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:55+00:00",
        "timestamp": "1784127715",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc839fbd-9f4a-46d7-84eb-6de162c9b49f",
        "value": "3i.hhuyuhnj019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:55+00:00",
        "timestamp": "1784127715",
        "to_ids": true,
        "type": "domain",
        "uuid": "22b1687a-71b9-40c1-a8b8-0732a80573ff",
        "value": "3i.xrtfybvb006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:55+00:00",
        "timestamp": "1784127715",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca7f8e4e-5b08-4fa9-9ae6-c2d917da3d89",
        "value": "3i.xrtfybvb015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:55+00:00",
        "timestamp": "1784127715",
        "to_ids": true,
        "type": "domain",
        "uuid": "08b948db-0c6d-478c-baba-8976991970c0",
        "value": "3i.xrtfybvb024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127715",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cf82cbf-6a0f-4ff6-8f31-c5afb50ac9d7",
        "value": "3j.xrtfybvb007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d173ec0-7719-4498-ab48-8468bb196508",
        "value": "3j.xrtfybvb016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "5404155e-c1b8-4e3a-a049-f48f28de5d10",
        "value": "3j.xrtfybvb025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dedc5a3-2689-46a5-90bf-8f2629a0a9fd",
        "value": "3k.xrtfybvb008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "a61d7e02-127e-4bea-af7a-178671664d12",
        "value": "3k.xrtfybvb017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "6348d4fd-e56b-4f94-9034-96a517bd0e3d",
        "value": "3l.xrtfybvb009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:56+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "52817261-babb-47d9-a6a6-74e39303a966",
        "value": "3l.xrtfybvb018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127716",
        "to_ids": true,
        "type": "domain",
        "uuid": "a08cbea7-c3e8-4b16-a290-0de70d06cbfc",
        "value": "3m.xrtfybvb019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "40b81aa8-c23a-4de4-b82e-b5fa1940c0f8",
        "value": "4.hzdfthr009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cfb8895-1e60-4d67-ba30-43a69d0dea58",
        "value": "4.hzdfthr018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "9646534a-8e33-4674-b44a-68a555266bf0",
        "value": "4.vcuuhjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "a119909e-8f49-4a8f-ad37-a9663146f4d1",
        "value": "48.cfgghfcfh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "be5446b7-dfd0-4b2a-8496-3e26edb53b4f",
        "value": "49.cfgghfcfh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:57+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "07f1fbf8-9d5b-4d13-83d5-2d937b358b35",
        "value": "4a.cfgghfcfh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127717",
        "to_ids": true,
        "type": "domain",
        "uuid": "0980b051-eb8c-4f3f-b423-fd0721d86b7a",
        "value": "4b.cfgghfcfh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127718",
        "to_ids": true,
        "type": "domain",
        "uuid": "384d60e0-462e-42e6-ad83-d52d202991c2",
        "value": "4c.cfgghfcfh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127718",
        "to_ids": true,
        "type": "domain",
        "uuid": "b72a3744-13d9-432c-a5b7-84d3ad54cfb2",
        "value": "4d.cfgghfcfh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127718",
        "to_ids": true,
        "type": "domain",
        "uuid": "72f78584-e685-41a2-9d96-f83098c0d3f3",
        "value": "4e.cfgghfcfh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127718",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0190b43-0848-4670-92da-f5ace0e4f528",
        "value": "4e.cfgghfcfh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127718",
        "to_ids": true,
        "type": "domain",
        "uuid": "eba9c420-61fd-4feb-852e-167300fd7fda",
        "value": "4f.cfgghfcfh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:58+00:00",
        "timestamp": "1784127718",
        "to_ids": true,
        "type": "domain",
        "uuid": "8efcab0a-9fe0-4496-88cf-fa1f78486d73",
        "value": "4f.cfgghfcfh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dddbc33-5216-4c5d-8e56-7b2e0ddace29",
        "value": "4g.cfgghfcfh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a54247b-eb57-4f46-b9c9-6f9dad1826e6",
        "value": "4t.cfgghvgfh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "af7395a3-95b8-498a-aaa1-e7146b60e6ca",
        "value": "4u.cfgghvgfh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f47f94b-d061-4990-beac-626b461db9f7",
        "value": "4v.cfgghvgfh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "080121b1-2b5e-4931-a9d8-2d808d502751",
        "value": "4w.cfgghfyhh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ee54ab2-8812-4e73-b7c8-8e3adb21ac98",
        "value": "4w.cfgghvgfh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:01:59+00:00",
        "timestamp": "1784127719",
        "to_ids": true,
        "type": "domain",
        "uuid": "8163d11c-e4df-4a76-9167-6c718621017e",
        "value": "4x.cfgghfyhh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:00+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "c017d979-51ad-451c-a5cb-13683ffb0f8d",
        "value": "4x.cfgghvgfh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:00+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bd27cc5-9fee-4e5d-8ca5-305209ad4c1f",
        "value": "4y.cfgghfyhh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:00+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d3d0403-8b11-428e-a104-48cd4b08e3fc",
        "value": "4y.cfgghvgfh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:00+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "eeb2617e-700a-4a6d-9835-7013814bc0ba",
        "value": "4z.cfgghfyhh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:00+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "36bd4f1e-726e-4539-beeb-98a091ebfd53",
        "value": "5.hzdfthr019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:00+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "b19719c0-bfa1-4a83-b622-921daf248349",
        "value": "5.vcuuhjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127720",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f9781f0-08f7-4fd4-b1e8-3723da272094",
        "value": "5.vcuuhjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "c12c05f3-a343-46c6-bc7c-b35fedf2146e",
        "value": "50.cfgghfyhh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e358789-7a46-4f6f-bf96-c1300bf586a5",
        "value": "50.cfgghvgfh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "246ef65f-8fb0-490a-80ab-b9f8ff669fcc",
        "value": "51.cfgghfyhh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7b5b889-39db-4967-b85e-1cf98d0f4de5",
        "value": "51.cfgghvgfh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc58d27d-b92a-4b2e-a8b8-c351a65e0b04",
        "value": "5r.gyjfvcfuh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:01+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "02f319a3-548f-49c7-8e6e-9399193f0e68",
        "value": "5s.gyjfvcfuh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:02+00:00",
        "timestamp": "1784127721",
        "to_ids": true,
        "type": "domain",
        "uuid": "6586009c-ab91-4728-81e2-d4e85a19a0f3",
        "value": "5t.gyjfvcfuh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:02+00:00",
        "timestamp": "1784127722",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c68c398-0124-4af6-9a9c-b0bed7f91c2f",
        "value": "5u.gyjfvcfuh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:02+00:00",
        "timestamp": "1784127722",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e15cdf7-240d-4286-bae4-7455cf31bcb2",
        "value": "5v.gyjfvcfuh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:02+00:00",
        "timestamp": "1784127722",
        "to_ids": true,
        "type": "domain",
        "uuid": "a025a62d-5675-41e5-930b-f5bb93b49945",
        "value": "5v.gyjfvgguh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:02+00:00",
        "timestamp": "1784127722",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5a00fa4-0c00-445c-b682-e7bed5f9c6a3",
        "value": "5w.gyjfvcfuh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:02+00:00",
        "timestamp": "1784127722",
        "to_ids": true,
        "type": "domain",
        "uuid": "e28e9940-ba14-496a-8b05-c521cc1bd786",
        "value": "5w.gyjfvcfuh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:03+00:00",
        "timestamp": "1784127722",
        "to_ids": true,
        "type": "domain",
        "uuid": "1afe18a0-a644-41ec-9ebe-507e134efb82",
        "value": "5w.gyjfvgguh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:03+00:00",
        "timestamp": "1784127723",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea42beff-4069-4532-b0bf-d2224a4f5190",
        "value": "5x.gyjfvcfuh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:03+00:00",
        "timestamp": "1784127723",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cfe5772-57c7-494b-ae0c-316d94fa3819",
        "value": "5x.gyjfvgguh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:03+00:00",
        "timestamp": "1784127723",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d6de139-c722-4a5b-8e83-2226c448899f",
        "value": "5y.gyjfvcfuh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:03+00:00",
        "timestamp": "1784127723",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf7578e2-e90c-434c-91a2-06c4609c3372",
        "value": "5y.gyjfvgguh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:03+00:00",
        "timestamp": "1784127723",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad6e3e03-0902-4974-af16-586807a8231d",
        "value": "5z.gyjfvcfuh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127723",
        "to_ids": true,
        "type": "domain",
        "uuid": "16a7633e-bd19-4576-ae19-6b019045165e",
        "value": "5z.gyjfvgguh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127724",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2fc3593-faa6-46de-9c4f-258ebd1e23d2",
        "value": "6.vcuuhjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127724",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c204c70-cb21-48d9-bcd6-f96d5a201798",
        "value": "60.gyjfvgguh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127724",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f22f09d-9fde-4784-abd7-1f82c8179169",
        "value": "61.gyjfvgguh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127724",
        "to_ids": true,
        "type": "domain",
        "uuid": "d60b8b4a-2828-4241-bd06-97c5abab0e53",
        "value": "61.gyjfyjguh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127724",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e0c7e49-49e9-4d79-a282-635e60e9c495",
        "value": "62.gyjfvgguh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:04+00:00",
        "timestamp": "1784127724",
        "to_ids": true,
        "type": "domain",
        "uuid": "17e5fb69-b0f6-4ee8-9f9e-4dfc51e5db4f",
        "value": "62.gyjfyjguh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:05+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdcfa2e3-3bdf-42b0-9dd3-36b9a3656f29",
        "value": "63.gyjfvgguh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:05+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1fedcd9-7141-46da-a14d-c2d5e2731c45",
        "value": "63.gyjfyjguh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:05+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c87694c-789f-40c7-98db-dfa54671d4c9",
        "value": "64.gyjfyjguh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:05+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfa43a0c-eb73-48fe-9de7-25e3f2c69810",
        "value": "65.gyjfyjguh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:05+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d9f7128-8563-4ca0-bd36-babeed61cc36",
        "value": "66.gyjfyjguh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:05+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "7918b377-8272-4f16-9850-97b36fb51ea8",
        "value": "7.vcuuhjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127725",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7245370-e20e-47e7-8b40-a7943b6828bd",
        "value": "8.vcuuhjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "e298a87b-e16f-4975-854e-1b4c19c2b751",
        "value": "api.hhgxxddr001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "17383681-7f0c-4e70-909b-83a7cee279ef",
        "value": "bt.vgvhhgyjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e9b9fd5-ff05-4dd0-8b90-cf204e8e6818",
        "value": "bu.vgvhhgyjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "5355d6a2-7a0d-4e97-a95b-ab80341b6b02",
        "value": "bv.vgvhhgyjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcd6e061-70e5-49ac-be22-3216b9d801be",
        "value": "bw.vgvhhgyjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:06+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "b431f47a-1887-4bd9-933c-bb37475cd7e3",
        "value": "cg.vgvxdryjhjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:07+00:00",
        "timestamp": "1784127726",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfafbc24-cf66-4d2c-b0fb-74e9ae133fda",
        "value": "ch.vgvxdryjhjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:07+00:00",
        "timestamp": "1784127727",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9e9789b-085d-4426-b7d7-9dc68b567158",
        "value": "ci.vgvxdryjhjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:07+00:00",
        "timestamp": "1784127727",
        "to_ids": true,
        "type": "domain",
        "uuid": "c203231a-29a4-4525-b0c6-b5b17e54e7c2",
        "value": "cj.vgvxdryjhjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:07+00:00",
        "timestamp": "1784127727",
        "to_ids": true,
        "type": "domain",
        "uuid": "07265d5c-ec9e-44ee-91e4-48f1660416be",
        "value": "ck.vgvxdryjhjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:07+00:00",
        "timestamp": "1784127727",
        "to_ids": true,
        "type": "domain",
        "uuid": "e93ed088-ba60-4353-ae6b-50530e172bb2",
        "value": "ck.vgvxdryjhjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:07+00:00",
        "timestamp": "1784127727",
        "to_ids": true,
        "type": "domain",
        "uuid": "98993a87-62da-4e4f-8b63-5f0817733db7",
        "value": "cl.vgvxdryjhjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:08+00:00",
        "timestamp": "1784127727",
        "to_ids": true,
        "type": "domain",
        "uuid": "18888ff3-3afb-4b71-9db8-c3d378f93798",
        "value": "cl.vgvxdryjhjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:08+00:00",
        "timestamp": "1784127728",
        "to_ids": true,
        "type": "domain",
        "uuid": "d26301e7-6484-4f2d-b8b5-5881356d5e0c",
        "value": "cm.vgvxdryjhjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:08+00:00",
        "timestamp": "1784127728",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7bce83e-51f0-40a6-82cf-8ea75226ea71",
        "value": "cn.vgvxdryjhjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:08+00:00",
        "timestamp": "1784127728",
        "to_ids": true,
        "type": "domain",
        "uuid": "def3ea00-8ac8-4836-ace5-90910e8c0de0",
        "value": "co.vgvxdryjhjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:08+00:00",
        "timestamp": "1784127728",
        "to_ids": true,
        "type": "domain",
        "uuid": "37a008ce-7ac4-4af8-8673-5f09cff99501",
        "value": "co.vgvxvgyjhjh020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:08+00:00",
        "timestamp": "1784127728",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a507e9b-0390-4b63-a02d-57317224b1c9",
        "value": "cp.vgvxvgyjhjh021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127728",
        "to_ids": true,
        "type": "domain",
        "uuid": "3efc9d7a-9f26-4cd4-9d26-983cdab16be0",
        "value": "cq.vgvxvgyjhjh022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127729",
        "to_ids": true,
        "type": "domain",
        "uuid": "60ae91d6-b283-4a92-b25d-d96616aaaab1",
        "value": "cr.vgvxvgyjhjh023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127729",
        "to_ids": true,
        "type": "domain",
        "uuid": "da286726-bccc-4a8a-84db-27d0790fe90a",
        "value": "cs.vgvxvgyjhjh024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127729",
        "to_ids": true,
        "type": "domain",
        "uuid": "635c298a-b501-4f7a-a580-7eb80274bcbc",
        "value": "ct.vgvxvgyjhjh016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127729",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2e3d769-0322-4f4f-a919-2b808b0b73c2",
        "value": "ct.vgvxvgyjhjh025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127729",
        "to_ids": true,
        "type": "domain",
        "uuid": "e10dd55d-d17f-4196-b420-68ec1fe71ac3",
        "value": "cu.vgvxvgyjhjh017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:09+00:00",
        "timestamp": "1784127729",
        "to_ids": true,
        "type": "domain",
        "uuid": "4544f396-6816-4921-9c66-2bb3cfc683c7",
        "value": "cu.vgvxvgyjhjh026.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:10+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "f77b3ccc-6557-4722-b1d2-6d81d1afa412",
        "value": "cv.vgvxvgyjhjh018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:10+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "195df5b2-9058-4a97-82a5-901acd8ae84d",
        "value": "cw.vgvxvgyjhjh019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:10+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "04fb8b9e-a351-4627-9214-1a9150dc35d9",
        "value": "m.hzzdtyg010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:10+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "c75187fc-e60c-4e38-ac5f-3ca9577d585f",
        "value": "n.hzzdtyg011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:10+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "bda78801-9ba1-47fc-84fa-1062b19849cf",
        "value": "o.hzzdtyg021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:10+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "98a6b576-e0a8-4973-82d8-7b451e025e74",
        "value": "p.hzzdtyg013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:11+00:00",
        "timestamp": "1784127730",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1997db0-0693-4319-ae08-995c4b1779fe",
        "value": "q.hzzdtyg005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:11+00:00",
        "timestamp": "1784127731",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6a65f2e-6537-406f-84c0-c5cbbd90eafd",
        "value": "q.hzzdtyg023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:11+00:00",
        "timestamp": "1784127731",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e7099f9-ef9c-4488-8773-94ed7520bed3",
        "value": "qt.vgjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:11+00:00",
        "timestamp": "1784127731",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad36a464-5981-49f8-b85b-1ca847da7941",
        "value": "r.hzzdtyg006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:11+00:00",
        "timestamp": "1784127731",
        "to_ids": true,
        "type": "domain",
        "uuid": "04bac05e-0db9-4f9e-9360-a72268c11678",
        "value": "r.hzzdtyg024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:11+00:00",
        "timestamp": "1784127731",
        "to_ids": true,
        "type": "domain",
        "uuid": "59eb8980-aae7-452a-8268-8299dea93084",
        "value": "t.hzzdtyg008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:12+00:00",
        "timestamp": "1784127732",
        "to_ids": true,
        "type": "domain",
        "uuid": "89423c12-41c7-4bb0-927c-9f7472626167",
        "value": "th.vgjhd010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:12+00:00",
        "timestamp": "1784127732",
        "to_ids": true,
        "type": "domain",
        "uuid": "b86847da-9626-48ed-be8b-affa98d8d92b",
        "value": "ti.vgjhd011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:12+00:00",
        "timestamp": "1784127732",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4195ffa-0cf5-4f47-a2a8-2bfe0493e669",
        "value": "tj.vgjhd012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:12+00:00",
        "timestamp": "1784127732",
        "to_ids": true,
        "type": "domain",
        "uuid": "113312e3-37c6-49d4-80af-85e0d1bbfb82",
        "value": "tk.vgjhd013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:12+00:00",
        "timestamp": "1784127732",
        "to_ids": true,
        "type": "domain",
        "uuid": "499ce8cd-93c6-4bfe-90b8-09c394346fd7",
        "value": "tl.vgjhd014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127732",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4b6b5b4-23b5-4752-8691-c0aa24c26cbe",
        "value": "tm.vgjhd006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "44df629f-5b2f-4ceb-940a-dea9a45b6d1a",
        "value": "tn.nuhgg001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "77637552-0811-4fb0-8c15-6696b2ebc912",
        "value": "tn.nuhgg010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2bf48a8-0c17-4c12-b3d7-db8795f498ac",
        "value": "tn.vgjhd007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "03934998-4e61-4da6-b3c0-1408fa898a5a",
        "value": "to.nnbxd001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc131857-2f00-4d9f-9f2c-4e616c27d929",
        "value": "to.nnbxd010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:13+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4a3127d-0512-49d0-aedc-b34a10d1a91b",
        "value": "to.nuhgg002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127733",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff29edbd-def2-499f-a876-bb84894745d4",
        "value": "to.nuhgg011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "32e4f049-cf70-4305-b6cd-af70d82beab1",
        "value": "to.nuhgg020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e9c2e5e-01c9-4dc1-b022-7468157687bd",
        "value": "to.vgjhd008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "885f973e-ad6c-499a-87c3-237ad38f0813",
        "value": "tp.nnbxd002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "9879d3ac-b32e-4723-b54a-00351b5572d8",
        "value": "tp.nnbxd011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "5045f93c-7aad-4693-bc96-2328aff31825",
        "value": "tp.nnbxd020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:14+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "c71cf76a-08e4-4e14-817f-bf760567f7ae",
        "value": "tp.nuhgg003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127734",
        "to_ids": true,
        "type": "domain",
        "uuid": "57f18a9c-5d5a-401e-803a-edbcbfcaaf49",
        "value": "tp.nuhgg012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "493e4153-8033-449a-876b-879da9a59f90",
        "value": "tp.nuhgg021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c72b688-e718-49ef-8917-8bf2f5b1227d",
        "value": "tp.vgjhd009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fd1a62d-cb3c-4ef0-a2ed-032db16e247b",
        "value": "tq.nnbxd003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "154f675f-e40f-472e-a671-2f0d97d525d7",
        "value": "tq.nnbxd012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "025bed36-e690-4006-9adc-bbea67e7e5f8",
        "value": "tq.nnbxd021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:15+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b654719-ca15-4f64-8d5a-16d341d562f1",
        "value": "tq.nuhgg004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127735",
        "to_ids": true,
        "type": "domain",
        "uuid": "09944a2c-10bf-40c6-b771-d34098055e1e",
        "value": "tq.nuhgg013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127736",
        "to_ids": true,
        "type": "domain",
        "uuid": "242314d1-8532-41a2-8690-669ed5ea1a90",
        "value": "tq.nuhgg022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127736",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d2071f1-93c8-45fa-9901-d393eff8aba9",
        "value": "tr.nnbxd004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127736",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0c7ec2b-e253-498b-b92f-9f678bfc0871",
        "value": "tr.nnbxd013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127736",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5f31d51-0b3e-4a23-a060-841b9285ee80",
        "value": "tr.nnbxd022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127736",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9a0f638-36f0-4336-9bbf-f000bbc65ae4",
        "value": "tr.nuhgg005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:16+00:00",
        "timestamp": "1784127736",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8c27d51-f41c-4ba8-8f94-772b7ecc2558",
        "value": "tr.nuhgg014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:17+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d45b30a-e0d1-4477-81ec-1e7a1ed1cfe5",
        "value": "tr.nuhgg023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:17+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b70f9f5-4f9e-4bfd-9686-c01685dfa0eb",
        "value": "ts.nnbxd005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:17+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "64516841-64d0-4512-809e-79b998bc773f",
        "value": "ts.nnbxd014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:17+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "352da788-9747-4f18-a4b6-2ce6126a51a8",
        "value": "ts.nnbxd023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:17+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2160d19-58f4-4d55-a5b4-5f013a0abbbf",
        "value": "ts.nuhgg006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:17+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf5307d8-c101-4c60-90e0-073df1605dc7",
        "value": "ts.nuhgg015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127737",
        "to_ids": true,
        "type": "domain",
        "uuid": "b380593f-3cc4-412a-b6da-b1f9d80a2f04",
        "value": "ts.nuhgg024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "a679c0ba-d9cd-4b35-8eed-d54213817b49",
        "value": "tt.nnbxd006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "58937f94-3a40-46a3-aa11-075c92d79d84",
        "value": "tt.nnbxd015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3771640-5fd0-4b77-aad8-78c61bfdffe0",
        "value": "tt.nnbxd024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "495a5e13-bd3c-4f91-b921-d46031384555",
        "value": "tt.nuhgg007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "c613d7c7-ade0-4258-9c04-2bbf415508eb",
        "value": "tt.nuhgg016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:18+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "990878a4-91a5-4f60-a3b9-a517b768f48a",
        "value": "tt.nuhgg025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127738",
        "to_ids": true,
        "type": "domain",
        "uuid": "d49d640b-dc63-483d-bba1-441b13ced5cf",
        "value": "tu.nnbxd007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6798d0d-af17-442b-94ed-67ea5712111d",
        "value": "tu.nnbxd016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f82d7c0-c5ed-457f-9fde-89a124fa2ea2",
        "value": "tu.nnbxd025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9f328fc-d722-47ec-bac3-ae2318d14b48",
        "value": "tu.nuhgg008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ebae5f4-0253-4b56-a6d6-30cb48a6773a",
        "value": "tu.nuhgg017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea243715-84c9-47cc-8f3c-c5462e8c506e",
        "value": "tv.nnbxd008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:19+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "f198b1c3-7039-403f-be4e-ccb457b6215c",
        "value": "tv.nnbxd017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127739",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b4224c9-dab2-4f63-ad2e-10fd724da513",
        "value": "tv.nuhgg009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "743ea9bb-a430-42a4-bd8b-a89c5e833ec0",
        "value": "tv.nuhgg018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8597aad-1c15-4ddd-ac8c-1e7590dcdd35",
        "value": "tw.nnbxd009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "1da4f2e5-6b84-4e14-8445-e39c606da810",
        "value": "tw.nnbxd018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ee7a4d8-abeb-4d5c-aee0-fec9aa3829b9",
        "value": "tw.nuhgg019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "1992a927-3024-479a-8b7a-58246c1926b7",
        "value": "tw.vgjvd020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:20+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "fad2e70f-3578-4730-86dc-8802ac4e474b",
        "value": "tx.nhewq001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127740",
        "to_ids": true,
        "type": "domain",
        "uuid": "583503b3-af6d-414d-8e32-f08f3c853600",
        "value": "tx.nhewq010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b037c24-566c-47ab-9e99-f2ac3a546c6c",
        "value": "tx.nnbxd019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "45e83b3e-f3e1-4166-82a3-198c8d29c407",
        "value": "tx.vgjvd021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb76d3c8-3f02-4923-b662-510eed8eeb1d",
        "value": "ty.nhewq002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6e1f57b-b836-4d19-9a05-f5a6a7e980e5",
        "value": "ty.nhewq011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6a15228-a79f-4990-a8a9-b31b0884e5d4",
        "value": "ty.nhewq020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:21+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "26e441df-1958-4ef7-93e8-29ea2d9c238b",
        "value": "ty.vgjvd022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127741",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5b49da9-5690-4728-beae-a747fd9f067a",
        "value": "tz.nhewq003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "85425060-6fa5-4fd9-a3db-ba3119f62d5b",
        "value": "tz.nhewq012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "902517a2-f8ef-49d9-9997-892235f0df72",
        "value": "tz.nhewq021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "f258ea5a-d161-4aa8-b7a9-3ea8de9c0fc2",
        "value": "tz.vgjvd023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "05826a2f-0f88-4b9b-a4c3-64d742c0fb30",
        "value": "u.hzzdtyg009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "485e3d5b-e7e9-4d29-9e7d-dad5788768b6",
        "value": "u0.nhewq004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:22+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e1e1a72-1804-4532-9553-be5ef6099d39",
        "value": "u0.nhewq013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127742",
        "to_ids": true,
        "type": "domain",
        "uuid": "87f1f65c-8cff-4d5a-85b6-806c80677975",
        "value": "u0.nhewq022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127743",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8479ba2-01c7-4a49-8e30-3cba273f648f",
        "value": "u0.vgjvd015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127743",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ee65b78-1cc4-4aae-b545-b7a47e6f8ed8",
        "value": "u0.vgjvd024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127743",
        "to_ids": true,
        "type": "domain",
        "uuid": "40771253-dbd6-4237-a9f8-10d81c84bd85",
        "value": "u1.nhewq005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127743",
        "to_ids": true,
        "type": "domain",
        "uuid": "bffa0211-0edd-44a2-8f33-847f33790a45",
        "value": "u1.nhewq014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127743",
        "to_ids": true,
        "type": "domain",
        "uuid": "3524db07-ac3d-47b5-aa23-e549fb1ee226",
        "value": "u1.nhewq023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:23+00:00",
        "timestamp": "1784127743",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9cea1bd-00fb-4380-9553-9bbba1364c51",
        "value": "u1.vgjvd016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:24+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f63c70e-7f90-4702-8d0d-d65d281a82c4",
        "value": "u1.vgjvd025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:24+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "b68654cd-fdd4-4f86-afd8-8513d0e22607",
        "value": "u2.nhewq006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:24+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e203c7f-4902-427a-a252-39512b28ca88",
        "value": "u2.nhewq015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:24+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3e196ab-6eca-4849-969d-84c41bc71382",
        "value": "u2.nhewq024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:24+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ca2a4e2-ad91-4b8f-8ddf-b2f9713e73ef",
        "value": "u2.vgjvd017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:24+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd1f1daf-453f-4456-be64-3819109dfa89",
        "value": "u3.nhewq007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127744",
        "to_ids": true,
        "type": "domain",
        "uuid": "a13cfc37-3df4-44ee-b869-d07be9f2a05f",
        "value": "u3.nhewq016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "262e20a5-7cfb-4fc6-b49b-596a23f5ec15",
        "value": "u3.nhewq025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8b4065b-8e77-454c-a6f5-a94a38d95570",
        "value": "u3.vgjvd018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ecf6f6c-5635-459f-b932-28dee6858feb",
        "value": "u4.nhewq008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb530e01-0255-418b-9ff8-4c823a4e6100",
        "value": "u4.nhewq017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f36f12a-ace2-4233-ac5b-bfd5a63431ba",
        "value": "u4.vgjvd019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:25+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd2b1d6f-b1f8-4c9c-aa32-ca042f61985e",
        "value": "u5.hungy001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127745",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fa6d89a-1c31-4df6-92e8-8c8497837907",
        "value": "u5.hungy010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6ebf622-2cf0-4725-be1d-d45f308ed7fa",
        "value": "u5.nhewq009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9fe2e24-7965-4b8f-9b62-411883fadfb9",
        "value": "u5.nhewq018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b7604c4-9620-4126-87fc-668daab19aaa",
        "value": "u6.hungy002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba06515d-ddfb-45c0-a11a-caec93641586",
        "value": "u6.hungy011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "00dc5491-fa61-4914-b659-21e0df036d35",
        "value": "u6.hungy020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:26+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "87641ba7-4959-4b98-90b2-d008d181390e",
        "value": "u6.nhewq019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127746",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b96e8e5-1a8f-43a3-88a0-8df965d872be",
        "value": "u7.hungy003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdbad12f-f221-430e-9223-9e3733d3c3b1",
        "value": "u7.hungy012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "579e50d9-0f09-4fbe-92a4-ae7849854e76",
        "value": "u7.hungy021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bc898d0-5a1a-4360-a380-bf82c99a7463",
        "value": "u8.hungy004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ca96f22-7677-4168-9336-5bce11dd89e7",
        "value": "u8.hungy013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "67170bc3-d054-4d8c-98af-7d896c0d6510",
        "value": "u8.hungy022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:27+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3699945-c1e3-420f-b492-2c3a0b3a50ba",
        "value": "u9.hungy005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127747",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e8a709d-b55b-43b0-b6e1-34f4e3d11d21",
        "value": "u9.hungy014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127748",
        "to_ids": true,
        "type": "domain",
        "uuid": "d55a988b-8952-4420-aa62-118960dd9c1f",
        "value": "u9.hungy023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127748",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfa431e4-0746-4f4f-bb8a-f1e09ad90408",
        "value": "ua.hungy006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127748",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7543cf0-f7ad-404c-82b0-cfae91dc9139",
        "value": "ua.hungy015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127748",
        "to_ids": true,
        "type": "domain",
        "uuid": "aed5d548-100a-43ed-a542-6dfa37526b10",
        "value": "ua.hungy024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127748",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb870b33-c14c-4506-8139-e27aa448f516",
        "value": "ub.hungy007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:28+00:00",
        "timestamp": "1784127748",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2618fdd-04ca-4484-aba0-99e4d6ecc56a",
        "value": "ub.hungy016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "11b859c8-754e-4287-8bb4-d18d9ce96ba6",
        "value": "ub.hungy025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "eead2bae-cece-4dce-8c7f-759004046c7d",
        "value": "uc.hungy008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce491fa9-e765-4007-b063-12de386d0d13",
        "value": "uc.hungy017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cf7b0e6-e202-4be8-97f3-3505995704e9",
        "value": "ud.hungy009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "13141bb8-63c9-4a42-b7f6-fce12d9cab09",
        "value": "ud.hungy018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bdc7ba0-9745-4aa5-82b4-f5cd86237729",
        "value": "ue.gyxxd001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:29+00:00",
        "timestamp": "1784127749",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3c61d7c-762e-40a0-ae88-162abb88a7fe",
        "value": "ue.gyxxd010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:30+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "e90c8c69-da0a-4ddf-b903-ae8236f530bb",
        "value": "ue.hungy019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:30+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "51a6dc88-5b6f-437c-97df-c34435e0d928",
        "value": "uf.gyxxd002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:30+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "326793a5-cf02-4212-84d6-848bb7e87dfe",
        "value": "uf.gyxxd011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:30+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "5918257f-4170-4a30-9b60-d066b51cc3d7",
        "value": "uf.gyxxd020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:30+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "b813720f-ed89-49c0-9fd1-61223eeeb56c",
        "value": "ug.gyxxd003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:30+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "a281aec3-3d76-4147-9cdc-2c1210b57194",
        "value": "ug.gyxxd012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127750",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9fc31d8-1738-48ce-963a-33e27bb98896",
        "value": "ug.gyxxd021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "586044cd-b4e4-4368-962b-77451ecca466",
        "value": "uh.gyxxd004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "3aa872e2-1a0f-44cd-a011-4b4102cdd1dd",
        "value": "uh.gyxxd013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0f0775f-9084-499e-9712-8f11e6698b21",
        "value": "uh.gyxxd022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c0cffc-2e9a-4dfb-baf0-047decbe3115",
        "value": "ui.gyxxd005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "721bdb80-b72e-4cec-8c46-25ce9083a645",
        "value": "ui.gyxxd014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:31+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "64814c88-a368-4b07-b8c6-49a7858a2909",
        "value": "ui.gyxxd023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127751",
        "to_ids": true,
        "type": "domain",
        "uuid": "35a6da33-3aff-4a72-a0d2-46ffc6f2d36c",
        "value": "uj.gyxxd006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bf2468f-2737-4d4d-99f2-3ea0245b999a",
        "value": "uj.gyxxd015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "61761ee8-57bb-44e9-9b65-ef6e26074d53",
        "value": "uj.gyxxd024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "93b00313-69cb-4b93-8514-31ec070468bf",
        "value": "uk.gyxxd007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "886da9ae-d455-411f-9689-9fba265d02da",
        "value": "uk.gyxxd016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4cb3fc7-61a7-4fc9-8ff6-d9d20ff1d98b",
        "value": "uk.gyxxd025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:32+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "48c56818-b635-4e22-a7b2-658def0b53c1",
        "value": "ul.gyxxd008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127752",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc5e7470-157d-44ca-906e-cf460af168a1",
        "value": "ul.gyxxd017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127753",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd8daa26-65ea-4c45-ae28-18cf873919f6",
        "value": "um.gyxxd009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127753",
        "to_ids": true,
        "type": "domain",
        "uuid": "19dedeea-0157-4823-b00d-ff75c12f50e0",
        "value": "um.gyxxd018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127753",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3aeb8c2-3edc-4b1e-a857-9deb1ed7e7f5",
        "value": "un.gyxxd019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127753",
        "to_ids": true,
        "type": "domain",
        "uuid": "68e8e6f3-603a-40f8-88ea-e11d7bc7ccc9",
        "value": "vu.nhggbb001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127753",
        "to_ids": true,
        "type": "domain",
        "uuid": "58851e05-25ee-44b0-a8f0-9e7536ea4d27",
        "value": "vu.nhggbb010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:33+00:00",
        "timestamp": "1784127753",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce66ec32-5385-4b7a-931d-aa92e290562b",
        "value": "vv.nhggbb002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:34+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "00c7c639-b8af-4297-b89b-e059b385fa57",
        "value": "vv.nhggbb011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:34+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "508ed249-217e-4b26-b2e8-fd6086c44c13",
        "value": "vv.nhggbb020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:34+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2db169b-c661-43c6-9215-7f1894b875fe",
        "value": "vw.nhggbb003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:34+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "f418a27b-9797-46da-803e-646df75b10ef",
        "value": "vw.nhggbb012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:34+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "be4fb6c7-f404-40a0-b059-c988e76880fe",
        "value": "vw.nhggbb021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:34+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6c95979-366a-41af-8208-65244526c0fb",
        "value": "vx.nhggbb004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127754",
        "to_ids": true,
        "type": "domain",
        "uuid": "69e7d36c-f9e7-4d7f-9d68-b55194245c80",
        "value": "vx.nhggbb013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c0d3540-0b8c-42a8-b053-d11234eb75ba",
        "value": "vx.nhggbb022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "250bf7cc-a317-4433-aa3a-127769f18653",
        "value": "vy.nhggbb005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "a72baef1-ef90-4cc1-ae47-afb03e21589d",
        "value": "vy.nhggbb014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "24e63d32-6a3d-4ca0-b249-9c26eaf634ca",
        "value": "vy.nhggbb023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceea4aa3-60db-43d8-8e20-881721b2d2dd",
        "value": "vz.nhggbb006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:35+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "7067ec8d-b87c-49de-844f-721d26397575",
        "value": "vz.nhggbb015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127755",
        "to_ids": true,
        "type": "domain",
        "uuid": "c920cba4-d0d5-4ca5-b183-f7bf1a9c4063",
        "value": "vz.nhggbb024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab9d3b3b-316a-4b79-ba46-0b1f5f8ec892",
        "value": "w0.nhggbb007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "4df5a7f2-01a7-47b6-accd-83319213a736",
        "value": "w0.nhggbb016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "37f0452b-751d-4e99-a97c-82c6030ef84b",
        "value": "w0.nhggbb025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "c526b400-c65e-4b5a-9427-8cbfb9f4fc44",
        "value": "w1.nhggbb008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "a735fe2e-9e36-41ae-972b-f63d13a1e765",
        "value": "w1.nhggbb017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:36+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "39154d81-316b-446d-9f0c-b4ab4bf7cf30",
        "value": "w2.nhggbb009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127756",
        "to_ids": true,
        "type": "domain",
        "uuid": "50fc89cb-02df-4e8e-a1e8-dd607097245c",
        "value": "w2.nhggbb018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "3be1f112-365d-4a89-a5eb-8f00fa0dde23",
        "value": "w3.nhggbb019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "d175e984-ef86-4012-8568-85e8ff2fee8e",
        "value": "wj.vgjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "80c8595a-3b35-48d4-b9cf-8de7e51b43e8",
        "value": "wk.vgjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "96cbdcaa-80b2-4344-b1b0-5c3813eca0b9",
        "value": "wl.vgjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "93813a37-8a9c-4ac5-b487-c7577868ab14",
        "value": "wm.vgjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:37+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "4629d04f-f2d9-43e1-90ec-3e2047987503",
        "value": "wx.ggyyhg001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127757",
        "to_ids": true,
        "type": "domain",
        "uuid": "e58467cd-a32f-4b45-bae4-105437002bf8",
        "value": "wx.ggyyhg010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127758",
        "to_ids": true,
        "type": "domain",
        "uuid": "f13b97b4-4e8c-456b-ba21-86975b8942a7",
        "value": "wy.ggyyhg002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127758",
        "to_ids": true,
        "type": "domain",
        "uuid": "11962ce9-8615-49f2-8a92-883d6681555e",
        "value": "wy.ggyyhg011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127758",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c2c8cf0-c3ba-4c72-9556-dfbe005aedc0",
        "value": "wy.ggyyhg020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127758",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7e7c3ea-7abd-41e3-a14c-865403007abb",
        "value": "wz.ggyyhg003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127758",
        "to_ids": true,
        "type": "domain",
        "uuid": "7495c541-dd78-4fa1-be04-674da6e8277c",
        "value": "wz.ggyyhg012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:38+00:00",
        "timestamp": "1784127758",
        "to_ids": true,
        "type": "domain",
        "uuid": "af5832a8-859e-4478-a29a-701cd847fa26",
        "value": "wz.ggyyhg021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:39+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec595542-32a3-4077-b7dd-4d820a373311",
        "value": "x0.ggyyhg004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:39+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "43e99965-31c2-4c94-b280-495b67f2b646",
        "value": "x0.ggyyhg013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:39+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "bddae645-1497-4f88-92f7-e6787a9d4603",
        "value": "x0.ggyyhg022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:39+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "a409bc4f-886f-48f0-887d-6159c819026b",
        "value": "x1.ggyyhg005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:39+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "10c15751-bfc4-46b9-a456-5eefb133c6fc",
        "value": "x1.ggyyhg014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:39+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f4abd9b-1001-4d22-b716-c9cb7fe001ac",
        "value": "x1.ggyyhg023.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127759",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4c8afdf-aac4-4a60-b662-c607b631f692",
        "value": "x2.ggyyhg006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7567f5-ffc7-4302-a9b8-b45e24d823d0",
        "value": "x2.ggyyhg015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "db3a3445-a08e-4eac-9f5f-111ebea5c22c",
        "value": "x2.ggyyhg024.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "75049243-0d2d-4fcd-821a-620ae6983ee4",
        "value": "x3.ggyyhg007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "b289d1f6-8032-4831-9360-587c1eafc21b",
        "value": "x3.ggyyhg016.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fff5e9a-8e64-435d-9500-eb84bcaedbb8",
        "value": "x3.ggyyhg025.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:40+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ed1cf24-22d4-4ce7-9023-9710d6b7064e",
        "value": "x4.ggyyhg008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127760",
        "to_ids": true,
        "type": "domain",
        "uuid": "671fb59e-56f4-4727-aefc-0de6f4be494a",
        "value": "x4.ggyyhg017.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127761",
        "to_ids": true,
        "type": "domain",
        "uuid": "dae1fe93-21f6-430c-81d6-8a7ab4b9ed65",
        "value": "x5.ggyyhg009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127761",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e50d5fd-31b2-4eab-8636-4954b1b25544",
        "value": "x5.ggyyhg018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127761",
        "to_ids": true,
        "type": "domain",
        "uuid": "86c95e1e-49d2-4866-957d-bb32e62f9a78",
        "value": "x6.ggyyhg019.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127761",
        "to_ids": true,
        "type": "domain",
        "uuid": "91e1c8a8-223b-4510-876a-338d20ae9725",
        "value": "zo.vgfuhjh010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127761",
        "to_ids": true,
        "type": "domain",
        "uuid": "59fd3b30-dae4-47af-8683-7d5832e9e40b",
        "value": "zp.vgfuhjh011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:41+00:00",
        "timestamp": "1784127761",
        "to_ids": true,
        "type": "domain",
        "uuid": "054e2b9c-4cd7-4232-8fa3-3539a074503b",
        "value": "zq.vgfuhjh012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:42+00:00",
        "timestamp": "1784127762",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e9895c7-a2ac-4243-bfe7-5ba3e6d4b9db",
        "value": "zr.vgfuhjh013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:42+00:00",
        "timestamp": "1784127762",
        "to_ids": true,
        "type": "domain",
        "uuid": "9be51957-67f3-4f30-b617-2f90daebbef5",
        "value": "zs.vgfuhjh005.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:42+00:00",
        "timestamp": "1784127762",
        "to_ids": true,
        "type": "domain",
        "uuid": "9314b957-498c-42c8-a6fe-fee0f58c30ec",
        "value": "zs.vgfuhjh014.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:42+00:00",
        "timestamp": "1784127762",
        "to_ids": true,
        "type": "domain",
        "uuid": "92c2a6ba-fd7f-41ab-adf6-65a16dbf7ca2",
        "value": "zt.vgfuhjh006.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:42+00:00",
        "timestamp": "1784127762",
        "to_ids": true,
        "type": "domain",
        "uuid": "a459a3fa-148e-4d87-a3ff-f2528ac7b59e",
        "value": "zt.vgfuhjh015.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127762",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa21fdd1-5a0d-47fd-8419-cde1a35c5ec0",
        "value": "zu.vgfuhjh007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127763",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea6e28ef-e77e-476e-9323-4a8d7cd22df6",
        "value": "zv.vgfuhjh008.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127763",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c6c2d29-4399-4bcd-9a13-6c212985a497",
        "value": "zw.hzdfthr001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127763",
        "to_ids": true,
        "type": "domain",
        "uuid": "a80a1ec8-a8b4-4a44-93a8-4b5f8139542a",
        "value": "zw.hzdfthr010.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127763",
        "to_ids": true,
        "type": "domain",
        "uuid": "4871519f-31c8-445e-87f7-8f3b7f00e7a5",
        "value": "zw.vgfuhjh009.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127763",
        "to_ids": true,
        "type": "domain",
        "uuid": "d36e5aa0-309b-440f-ae3e-d3f2e07c22d6",
        "value": "zw.vgyjhjh001.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:43+00:00",
        "timestamp": "1784127764",
        "to_ids": true,
        "type": "domain",
        "uuid": "76a7515c-66ee-4a9d-b51a-f70da3d302f9",
        "value": "zx.hzdfthr002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:44+00:00",
        "timestamp": "1784127764",
        "to_ids": true,
        "type": "domain",
        "uuid": "927a5088-77fc-4068-a4f6-169900897f25",
        "value": "zx.hzdfthr011.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:44+00:00",
        "timestamp": "1784127764",
        "to_ids": true,
        "type": "domain",
        "uuid": "605c9fa5-1f59-4210-82a2-11a3d2376335",
        "value": "zx.hzdfthr020.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127764",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddaf355b-4263-49ca-9b34-60b7af658ccb",
        "value": "zx.vgyjhjh002.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f600f3-2af7-49ba-95df-22e1c9aed5ff",
        "value": "zy.hzdfthr003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "98894da2-17f1-49bc-84ad-3d1ee1eebfe6",
        "value": "zy.hzdfthr012.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "f23fdbb9-1149-4797-8417-4b231293177c",
        "value": "zy.hzdfthr021.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ac02ea4-911b-4a37-bdfc-07e13c0e7408",
        "value": "zy.vgyjhjh003.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dc0cefc-42ba-4a54-847a-eb43d37de09d",
        "value": "zz.hzdfthr004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:45+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "4603fbda-25c0-4584-a3bf-9b2720205581",
        "value": "zz.hzdfthr013.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127765",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a7efd91-e53e-46b6-a68b-e3f9b2492998",
        "value": "zz.hzdfthr022.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127766",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9479b29-62b6-4000-9786-2880b33ab9f2",
        "value": "zz.vgyjhjh004.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127766",
        "to_ids": false,
        "type": "url",
        "uuid": "5be64ba6-711d-4c44-b3eb-3bc925a3983f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ad29e1891538e937a711c14caea62b7b91b36395",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127766",
        "to_ids": false,
        "type": "url",
        "uuid": "315b6783-cd83-441b-ada0-8234351405c8",
        "value": "https://x.com/D3LabIT/status/2077379636116226295",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127766",
        "to_ids": false,
        "type": "url",
        "uuid": "893721fa-b6b4-4ad7-bfdd-f0a966d15672",
        "value": "https://www.virustotal.com/gui/file/32da5d96b9f685116b370168e430bce8d3bd0a9c91dfd04e8047d267b01d603b/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127766",
        "to_ids": true,
        "type": "domain",
        "uuid": "cee0d412-fe74-463c-9f6b-5acc1c9f58bf",
        "value": "hzdfthr018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:46+00:00",
        "timestamp": "1784127766",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b2f74b0-b53c-4179-be3f-bac2485f2b60",
        "value": "mg8x25614a.hzdfthr018.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:47+00:00",
        "timestamp": "1784127766",
        "to_ids": false,
        "type": "url",
        "uuid": "3774c0a9-ed89-4947-9628-6f12b8b3025a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/bae032f68e914f8cd5b6ae79b82716ea8eda8cfe",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:47+00:00",
        "timestamp": "1784127767",
        "to_ids": false,
        "type": "url",
        "uuid": "79cf481d-24e3-4f07-92bb-556ada5457c2",
        "value": "https://x.com/sdcyberresearch/status/2077372646585471271",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:47+00:00",
        "timestamp": "1784127767",
        "to_ids": true,
        "type": "domain",
        "uuid": "63a36e7b-579a-4e41-88ca-7362070392e2",
        "value": "styleohmans.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:47+00:00",
        "timestamp": "1784127767",
        "to_ids": true,
        "type": "domain",
        "uuid": "b04c25d0-664a-469b-b72d-8e659bdc8164",
        "value": "styleoutscan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:47+00:00",
        "timestamp": "1784127767",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ae2852b-56aa-4999-8386-4474b19f0713",
        "value": "stylepoulinse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T15:02:47+00:00",
        "timestamp": "1784127767",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a36733-5a91-463a-810b-ef6eaf6fe42c",
        "value": "stylewowow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:03+00:00",
        "timestamp": "1784131204",
        "to_ids": false,
        "type": "url",
        "uuid": "d1834532-8f71-4e75-85de-c3b4aada931a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ff2712320843fb6dd25ab4ffe6f02744aa53adb4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:04+00:00",
        "timestamp": "1784131204",
        "to_ids": true,
        "type": "domain",
        "uuid": "99f07873-51d3-46d0-9ed7-462501f54928",
        "value": "min-js.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:05+00:00",
        "timestamp": "1784131205",
        "to_ids": false,
        "type": "url",
        "uuid": "73ace046-0ce1-4f4d-b37d-4593cd7dd11d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2ad34120c8a95dbfbcadf370b2867db9b887bbf6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:06+00:00",
        "timestamp": "1784131205",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c343f06-eb65-444c-9b56-42050b867d8c",
        "value": "cloud-js.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:06+00:00",
        "timestamp": "1784131206",
        "to_ids": false,
        "type": "url",
        "uuid": "51169885-d36e-4144-b591-1a85db7be71c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/8942abe9206c1c73c18edf0a5a75b3bbd26f7fc0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:06+00:00",
        "timestamp": "1784131206",
        "to_ids": false,
        "type": "url",
        "uuid": "816f8d73-6e19-42c9-a332-2edae4a369e4",
        "value": "https://x.com/sdcyberresearch/status/2069369647275671619",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-07-15T16:00:06+00:00",
        "timestamp": "1784131206",
        "to_ids": true,
        "type": "domain",
        "uuid": "47e9ad62-cc22-4dec-9fd6-9cdf7d4b84a4",
        "value": "cloud-stat.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}