{
  "Event": {
    "analysis": "1",
    "date": "2026-04-24",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-04-25",
    "publish_timestamp": "1777154405",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1777154405",
    "uuid": "41c6badd-b26b-40f1-bee9-8ac50593d892",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:05+00:00",
        "timestamp": "1777114805",
        "to_ids": false,
        "type": "url",
        "uuid": "04c264ed-3bd4-4ac9-b5c6-4b0c546babc6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4a3cc46481bbc2cdfe7fbef7f50e9deb8fdbb5cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:05+00:00",
        "timestamp": "1777114805",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b4aac4a-2aa8-4ca6-a486-8bdb577bb60d",
        "value": "b0kdetsz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:05+00:00",
        "timestamp": "1777114806",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae8defde-1e24-4c52-93cb-455b9e93d8ad",
        "value": "extr-bkn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:06+00:00",
        "timestamp": "1777114806",
        "to_ids": true,
        "type": "domain",
        "uuid": "fed5384b-87f8-4b0d-b57c-bc8913c7118b",
        "value": "hmstkoy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:06+00:00",
        "timestamp": "1777114806",
        "to_ids": false,
        "type": "url",
        "uuid": "48691e53-9ccf-45a7-8629-7095121dc6aa",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0b29470e9b752a9401013ce26bd3adeaac2056a2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:06+00:00",
        "timestamp": "1777114806",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f2620f7-1c49-4f04-8d12-38a264e2bcd3",
        "value": "extranet-books.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:07+00:00",
        "timestamp": "1777114807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7e337c3-ab6b-4c8b-8b78-67d2e9bf8529",
        "value": "shosurterk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:07+00:00",
        "timestamp": "1777114807",
        "to_ids": true,
        "type": "domain",
        "uuid": "743b1e27-471d-45ff-9a54-33795b10b16d",
        "value": "tomcontrolls.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:07+00:00",
        "timestamp": "1777114807",
        "to_ids": true,
        "type": "domain",
        "uuid": "54dc81e2-cca7-4baf-ada7-10fbaa599259",
        "value": "youtude-dl.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:07+00:00",
        "timestamp": "1777114807",
        "to_ids": false,
        "type": "url",
        "uuid": "af5109f9-f472-4b1a-90b2-0c0a0cd62bbe",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b1fef53b3798d0af19079f3f87cdfe111628ec7b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:07+00:00",
        "timestamp": "1777114807",
        "to_ids": true,
        "type": "domain",
        "uuid": "39ed6df9-8f28-4657-a7b2-1cc1f6b5df57",
        "value": "bkneu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:07+00:00",
        "timestamp": "1777114808",
        "to_ids": false,
        "type": "url",
        "uuid": "667c466b-dd4b-4b55-ac3e-d0bb6c2805e0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3753fe8ea3d6a8510e7e89859e9638dabc0b7f0d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:08+00:00",
        "timestamp": "1777114808",
        "to_ids": false,
        "type": "url",
        "uuid": "61897461-8de2-488f-8272-c349cf9938ec",
        "value": "https://x.com/JAMESWT_WT/status/2047971403652043004",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:08+00:00",
        "timestamp": "1777114808",
        "to_ids": false,
        "type": "url",
        "uuid": "0a72231d-8f04-4828-a0c9-030940bfef5e",
        "value": "https://x.com/skocherhan/status/2047973661018046916",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:08+00:00",
        "timestamp": "1777114808",
        "to_ids": false,
        "type": "url",
        "uuid": "13c92177-4197-437f-ab81-9cdb9e5c56c8",
        "value": "https://app.any.run/tasks/ff854da3-2b2e-46f5-8be7-20fa5100f62c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:08+00:00",
        "timestamp": "1777114808",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbdd0522-43b9-4dcd-998c-cdba311c2546",
        "value": "1eryou.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:08+00:00",
        "timestamp": "1777114809",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4a5d615-21bf-486f-bf72-43c53b0201fc",
        "value": "1xbet-today.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:09+00:00",
        "timestamp": "1777114809",
        "to_ids": true,
        "type": "domain",
        "uuid": "de45142f-0d38-415d-bf8f-c2e91f9e80a4",
        "value": "1xbitgiris.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:09+00:00",
        "timestamp": "1777114809",
        "to_ids": true,
        "type": "domain",
        "uuid": "f65c56cd-986a-42ff-bdcc-f27e426c9dd4",
        "value": "216verify-checkguest.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:09+00:00",
        "timestamp": "1777114809",
        "to_ids": true,
        "type": "domain",
        "uuid": "789b4c5a-c011-46f4-be40-50ae4b9374f6",
        "value": "28.com-4h4kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:09+00:00",
        "timestamp": "1777114809",
        "to_ids": true,
        "type": "domain",
        "uuid": "a494d139-42ff-4724-b317-b180ca0b8946",
        "value": "28496374.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:09+00:00",
        "timestamp": "1777114809",
        "to_ids": true,
        "type": "domain",
        "uuid": "dec16d43-d2d7-462f-a0ce-e8347dd3a166",
        "value": "2i.com-9h9kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:09+00:00",
        "timestamp": "1777114810",
        "to_ids": true,
        "type": "domain",
        "uuid": "52b4e437-77a8-47f7-afc6-58177fac2ca6",
        "value": "33996794.4snowplowing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:10+00:00",
        "timestamp": "1777114810",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dc9f290-9b44-4c1e-902d-c0ab23ec950e",
        "value": "38.dimilano2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:10+00:00",
        "timestamp": "1777114810",
        "to_ids": true,
        "type": "domain",
        "uuid": "c780ef38-cca3-45b9-8709-508cdcdb0ae7",
        "value": "4400bet-app.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:10+00:00",
        "timestamp": "1777114810",
        "to_ids": true,
        "type": "domain",
        "uuid": "7230e862-ec72-462b-87c9-242c74950b9f",
        "value": "4snowplowing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:10+00:00",
        "timestamp": "1777114810",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dc90271-dece-4535-ae20-266947d382f8",
        "value": "5500bet-con.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:10+00:00",
        "timestamp": "1777114811",
        "to_ids": true,
        "type": "domain",
        "uuid": "4100fdc1-2286-4f1c-903b-b57ed87a187c",
        "value": "5ubet-apps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:11+00:00",
        "timestamp": "1777114811",
        "to_ids": true,
        "type": "domain",
        "uuid": "499ea7d8-dd4f-4cdf-8ca4-1cbaff2559cc",
        "value": "5y.app-outpaiy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:11+00:00",
        "timestamp": "1777114811",
        "to_ids": true,
        "type": "domain",
        "uuid": "e52cf44d-24cc-4adc-b1c7-64e898b938e2",
        "value": "67914.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:11+00:00",
        "timestamp": "1777114811",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd2bedbc-3d26-49b2-ac89-5f7605d3d239",
        "value": "688v-bet-com.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:11+00:00",
        "timestamp": "1777114811",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a6ffc1e-8688-4d92-bb80-4016438056d7",
        "value": "716c23b12in3c.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:12+00:00",
        "timestamp": "1777114812",
        "to_ids": true,
        "type": "domain",
        "uuid": "708c32d5-6339-4443-8317-93755620fe48",
        "value": "71851154.2polloslocos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:12+00:00",
        "timestamp": "1777114812",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf2b364-5989-49ee-91ee-176eb75357ee",
        "value": "743verify-checkguest.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:12+00:00",
        "timestamp": "1777114812",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8bff33d-b824-45e3-bdca-9fde7de09627",
        "value": "8800bet12.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:12+00:00",
        "timestamp": "1777114812",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb320ec3-5c31-4526-b8eb-8f00dbbb7381",
        "value": "888starz-uzbekisz.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:12+00:00",
        "timestamp": "1777114813",
        "to_ids": true,
        "type": "domain",
        "uuid": "971072a2-9389-4bb0-8c75-19dde2cd16c8",
        "value": "9.com-checks-reservation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:13+00:00",
        "timestamp": "1777114813",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c273a16-bffc-4c59-aa65-4026d024bf91",
        "value": "9096betapps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:13+00:00",
        "timestamp": "1777114813",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a50a6f9-e533-4fab-86b2-dcaa1900ff1e",
        "value": "939-bet-app.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:13+00:00",
        "timestamp": "1777114813",
        "to_ids": true,
        "type": "domain",
        "uuid": "849e88ad-d17d-49ee-8821-ac2be7e3d222",
        "value": "9d.details-reservation-id988912.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:13+00:00",
        "timestamp": "1777114813",
        "to_ids": true,
        "type": "domain",
        "uuid": "75d802db-78dc-47df-a171-53a7c7e407b5",
        "value": "a5.hotel-stay92164.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:13+00:00",
        "timestamp": "1777114813",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cb87611-9a60-41b4-a1ef-8a76296de5bb",
        "value": "aaapays.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:14+00:00",
        "timestamp": "1777114814",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9ad7ce7-75bf-4d50-9d92-8dfe67b8dbd5",
        "value": "accaccess128-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:14+00:00",
        "timestamp": "1777114814",
        "to_ids": true,
        "type": "domain",
        "uuid": "73056b82-aa79-46b0-b195-e3b1a178073a",
        "value": "accaccess231-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:14+00:00",
        "timestamp": "1777114814",
        "to_ids": true,
        "type": "domain",
        "uuid": "341919bf-ac98-4e67-887b-af6d552935c8",
        "value": "accaccess287-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:14+00:00",
        "timestamp": "1777114814",
        "to_ids": true,
        "type": "domain",
        "uuid": "78116f6d-6459-447e-8663-270d84d4d68c",
        "value": "accaccess490-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:14+00:00",
        "timestamp": "1777114814",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c23b25a-f592-4247-8587-a34ec43849b6",
        "value": "accaccess517-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:14+00:00",
        "timestamp": "1777114815",
        "to_ids": true,
        "type": "domain",
        "uuid": "72b20fee-8e31-4c62-93c0-1351677451d7",
        "value": "accaccess628-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:15+00:00",
        "timestamp": "1777114815",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2793066-c575-4a78-ac3b-37ed473ff98b",
        "value": "accaccess724-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:15+00:00",
        "timestamp": "1777114815",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b0ebd62-a90d-4408-b693-412af6849262",
        "value": "accaccess83-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:15+00:00",
        "timestamp": "1777114815",
        "to_ids": true,
        "type": "domain",
        "uuid": "4605284c-c44e-411c-9f52-217ca6e34a68",
        "value": "accaccess864-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:15+00:00",
        "timestamp": "1777114815",
        "to_ids": true,
        "type": "domain",
        "uuid": "7af64bd7-98d1-4753-812b-0429d63b49ce",
        "value": "accessgate334-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:15+00:00",
        "timestamp": "1777114816",
        "to_ids": true,
        "type": "domain",
        "uuid": "be14f312-78fa-4ae1-9afa-6163a7615a6b",
        "value": "accessgate963-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:16+00:00",
        "timestamp": "1777114816",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce16b02f-271e-498a-b657-63dfe0aa26db",
        "value": "accomodationsbookings.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:20+00:00",
        "timestamp": "1777114822",
        "to_ids": true,
        "type": "domain",
        "uuid": "08293047-52d0-4941-9a5f-1b7edd56f22f",
        "value": "acoustivfs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:27+00:00",
        "timestamp": "1777114832",
        "to_ids": true,
        "type": "domain",
        "uuid": "1270fae0-167e-4b17-9b6f-3c2061516445",
        "value": "adkvw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T11:00:36+00:00",
        "timestamp": "1777114837",
        "to_ids": true,
        "type": "domain",
        "uuid": "16c78545-5244-49cc-a471-4a54c1741786",
        "value": "adorahotel-id6935.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:07+00:00",
        "timestamp": "1777118407",
        "to_ids": false,
        "type": "url",
        "uuid": "737c4ed5-6e22-422b-b5c3-8918af6f381b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/87bad85283881b2c889f77894b10c4c8c98aecfb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:07+00:00",
        "timestamp": "1777118407",
        "to_ids": false,
        "type": "url",
        "uuid": "f63865bf-9b63-43f6-b2ae-072dc5f6bf7f",
        "value": "https://x.com/npm_malware/status/2047770322938835364",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:07+00:00",
        "timestamp": "1777118407",
        "to_ids": false,
        "type": "url",
        "uuid": "907079de-8342-4853-9883-e86d11994170",
        "value": "https://socket.dev/npm/package/ikyy/files/4.0.6/lib/buathtml.js",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:07+00:00",
        "timestamp": "1777118407",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a0e72b7-930e-4122-bc52-01395e9d68a0",
        "value": "sl.rzkyfdlh.tech",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:07+00:00",
        "timestamp": "1777118407",
        "to_ids": false,
        "type": "url",
        "uuid": "32fcceca-ee29-4535-9d78-799ed2021256",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/25d5f40b7ae822194da7b3718f5a55f0126aa75f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:07+00:00",
        "timestamp": "1777118408",
        "to_ids": false,
        "type": "url",
        "uuid": "093f98d1-b75b-45d8-bad3-86942101c819",
        "value": "https://www.virustotal.com/gui/file/085236350e442440a2cf5d98de2408ef1148500e948b9ec410238ef94cc7b438/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:08+00:00",
        "timestamp": "1777118408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "65da14a5-0b70-44cd-b80c-4bd5c4e6b4ca",
        "value": "176.65.139.81",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:08+00:00",
        "timestamp": "1777118408",
        "to_ids": true,
        "type": "domain",
        "uuid": "795425ea-75ec-4c3d-b8a8-f11854f801e5",
        "value": "jbrj92scltrbtv7mzejvmovw.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:08+00:00",
        "timestamp": "1777118408",
        "to_ids": false,
        "type": "url",
        "uuid": "fdb3b918-6349-48ea-8b24-162d8b9ded8e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7b351f316591c5c669fd27d1cbe8077ea9070063",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:08+00:00",
        "timestamp": "1777118408",
        "to_ids": false,
        "type": "url",
        "uuid": "98d7ecd1-0b59-478d-83bf-ca10e498c087",
        "value": "https://www.virustotal.com/gui/file/0edc6016136f7d89f28e3014a30a0f948d14e5b5b6c15d66064d0e6392c0fdf3/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:08+00:00",
        "timestamp": "1777118408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8b9838c4-5bcc-4bce-a31f-1f3fd26add41",
        "value": "176.65.139.131",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:08+00:00",
        "timestamp": "1777118409",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0be8d42-3370-47b4-90f7-5f731370f72d",
        "value": "69sexy.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:09+00:00",
        "timestamp": "1777118409",
        "to_ids": false,
        "type": "url",
        "uuid": "fb6569a7-1a0c-4f55-a4b2-b549cd952034",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/496d96695b8bb1410ee8ecbebc6c6b2b05f3708d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:09+00:00",
        "timestamp": "1777118409",
        "to_ids": false,
        "type": "url",
        "uuid": "b75529df-a5f7-40cc-9ba2-07f2f1d0e7ab",
        "value": "https://ipinfo.io/AS214472",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:09+00:00",
        "timestamp": "1777118409",
        "to_ids": false,
        "type": "url",
        "uuid": "22a3ccb6-8b0a-42d5-8c63-53161f573c2b",
        "value": "https://x.com/banthisguy9349/status/2047908100385231203",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:09+00:00",
        "timestamp": "1777118410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "98a454fc-cde8-4e60-824e-b6e9a45b08fd",
        "value": "176.65.139.0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:10+00:00",
        "timestamp": "1777118410",
        "to_ids": false,
        "type": "url",
        "uuid": "544191ee-8206-4dff-8133-dfa0b54dec2d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b66758b56a0c808715329e7e28beeb334a942aff",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "0ktapus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:10+00:00",
        "timestamp": "1777118410",
        "to_ids": true,
        "type": "domain",
        "uuid": "87c97127-75be-41e9-9f8b-3e846bb027a2",
        "value": "navidrome.erfi.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:10+00:00",
        "timestamp": "1777118410",
        "to_ids": false,
        "type": "url",
        "uuid": "06371b63-ca10-4d30-8d44-c1572246b1ba",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b1623ce0df5a4d22214014444afdc73052e730f8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:10+00:00",
        "timestamp": "1777118410",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd922f15-b825-4d22-a8b9-6ddfd8036586",
        "value": "bneanm.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:10+00:00",
        "timestamp": "1777118410",
        "to_ids": true,
        "type": "domain",
        "uuid": "381443bd-fea3-48d1-9eb3-b7640b661709",
        "value": "hanaem.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:10+00:00",
        "timestamp": "1777118410",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b822394-4f03-491f-90b6-eaea14d97bdd",
        "value": "kinmae.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:11+00:00",
        "timestamp": "1777118411",
        "to_ids": true,
        "type": "domain",
        "uuid": "b980e64f-2fa3-43d5-91a7-41a26ca44fe7",
        "value": "notylp.it.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:11+00:00",
        "timestamp": "1777118411",
        "to_ids": true,
        "type": "domain",
        "uuid": "373ad3d1-b1e1-498f-a230-6c0e86ce3614",
        "value": "nrytas.it.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:11+00:00",
        "timestamp": "1777118411",
        "to_ids": true,
        "type": "domain",
        "uuid": "835d4bba-aa8c-41d9-a8ce-14e3092a989c",
        "value": "vebaby.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:11+00:00",
        "timestamp": "1777118411",
        "to_ids": false,
        "type": "url",
        "uuid": "a220ae8f-2ec8-4156-81bc-ddd2f17b55ce",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/618fd94d99855c794a86e3a8ce58809efe771fdb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:11+00:00",
        "timestamp": "1777118411",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdae072a-0ac2-446d-9f31-a06bca3fd83a",
        "value": "kctiff.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:11+00:00",
        "timestamp": "1777118411",
        "to_ids": true,
        "type": "domain",
        "uuid": "17e2c44c-7158-4027-8fc3-ec567d4da761",
        "value": "litenera.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118412",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bf60980-1639-411d-81e9-07cda04b778d",
        "value": "log.litenera.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118412",
        "to_ids": false,
        "type": "url",
        "uuid": "f3290bad-58f4-4ee2-b4e0-e02880c77d28",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/35cc824222e967a26aeed8305e9d72fc111934f1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118412",
        "to_ids": true,
        "type": "domain",
        "uuid": "f73de08d-8e80-422e-b951-f97d010a6f14",
        "value": "rvtoolsi.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118412",
        "to_ids": true,
        "type": "domain",
        "uuid": "919534f5-89ce-4129-8e01-1c7efec5c14a",
        "value": "rvtoolson.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118412",
        "to_ids": false,
        "type": "url",
        "uuid": "e3da7029-27e2-44c2-9f7f-c0b85748dcfb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c6fc37a632b29c5feccaa621a38d7d4ec8943a64",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118412",
        "to_ids": true,
        "type": "domain",
        "uuid": "8deff789-675d-4f61-8bf1-edf5f6110a70",
        "value": "akioraen.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:12+00:00",
        "timestamp": "1777118413",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb0c6963-509a-454e-82ca-cd751a1cf4ca",
        "value": "alighmd.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:13+00:00",
        "timestamp": "1777118413",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6e98e5d-c9fd-4bac-b6bc-946d0903f988",
        "value": "anzhuo.ttecked.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:13+00:00",
        "timestamp": "1777118413",
        "to_ids": true,
        "type": "domain",
        "uuid": "90868677-b4bb-4398-8dd9-70a14c109271",
        "value": "clou-dprotect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:13+00:00",
        "timestamp": "1777118413",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c80337d-ae4c-4244-8ef1-e69ad018e1cd",
        "value": "iscanslive.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:13+00:00",
        "timestamp": "1777118413",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7e04cd5-a8d1-40ae-82c0-a51c0c8de855",
        "value": "k.akioraen.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:13+00:00",
        "timestamp": "1777118413",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd9706b3-4d9e-4be2-b378-2af255094fde",
        "value": "moonshootvote.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:13+00:00",
        "timestamp": "1777118414",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa603fb6-cec6-4f83-bcd4-0119c10aa19d",
        "value": "ns.ttecked.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:14+00:00",
        "timestamp": "1777118414",
        "to_ids": true,
        "type": "domain",
        "uuid": "146d34c9-29cc-4f70-ac4c-ae9bc8c9818f",
        "value": "pumnq.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:14+00:00",
        "timestamp": "1777118414",
        "to_ids": true,
        "type": "domain",
        "uuid": "c984c404-811b-4fe2-aae6-a3167f63c691",
        "value": "ttecked.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:14+00:00",
        "timestamp": "1777118414",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7543979-e7e5-42d0-848a-2f9316e63cc4",
        "value": "xc.alighmd.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:22+00:00",
        "timestamp": "1777118423",
        "to_ids": true,
        "type": "domain",
        "uuid": "5028f934-1261-44d4-af95-73561b09b1e2",
        "value": "aesbon.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:23+00:00",
        "timestamp": "1777118423",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f8c4a6b-f89b-4a64-8141-dda3407d35e9",
        "value": "ag0ba-order.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:23+00:00",
        "timestamp": "1777118423",
        "to_ids": true,
        "type": "domain",
        "uuid": "7189dd3b-c537-473d-956d-289c88c3aee0",
        "value": "agoda-id4841503.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:23+00:00",
        "timestamp": "1777118423",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0fe7501-f3dd-4aa5-b098-15963fbbb7ad",
        "value": "agoda-id5280811.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:23+00:00",
        "timestamp": "1777118423",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdcb3cc8-5cb0-4f31-a6ef-22573d47aea3",
        "value": "agodandis.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:23+00:00",
        "timestamp": "1777118423",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a71f9b9-24b1-4d45-a044-4d7c778c227e",
        "value": "agodatravel.hotel-approve870291.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:23+00:00",
        "timestamp": "1777118424",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcc5b28f-fad2-4478-8b7f-26410fee05e6",
        "value": "agodaverify-guest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:24+00:00",
        "timestamp": "1777118424",
        "to_ids": true,
        "type": "domain",
        "uuid": "82a7eca7-63a4-43af-b667-30ca0fbb5fa9",
        "value": "air-hotels.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:24+00:00",
        "timestamp": "1777118424",
        "to_ids": true,
        "type": "domain",
        "uuid": "09f10e67-8d4e-42d0-ba7a-78ab9b0648f1",
        "value": "airbnb-appruvs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:24+00:00",
        "timestamp": "1777118424",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e2962df-ab7e-4d98-b361-fa2a3072ee51",
        "value": "akenacchaura.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:24+00:00",
        "timestamp": "1777118424",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eab0158-8903-4fd3-bd66-7efa4fb98b27",
        "value": "albergyx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:24+00:00",
        "timestamp": "1777118424",
        "to_ids": true,
        "type": "domain",
        "uuid": "823c0578-4078-4192-92f6-d8e393cfb661",
        "value": "altercpa.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:24+00:00",
        "timestamp": "1777118425",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0696c41-2905-4e7c-8090-877a68f81eb6",
        "value": "anjuwangchina.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:25+00:00",
        "timestamp": "1777118425",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8ca7bea-6aa4-4df4-8812-c1ebed92ce01",
        "value": "apartamentcomfirmation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:25+00:00",
        "timestamp": "1777118425",
        "to_ids": true,
        "type": "domain",
        "uuid": "0666dde2-4173-48ab-996d-8d20ee471156",
        "value": "apartamentguestcomfirmation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:25+00:00",
        "timestamp": "1777118425",
        "to_ids": true,
        "type": "domain",
        "uuid": "b08b6447-9aeb-4178-8ae1-fe1813445240",
        "value": "api-sky.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:25+00:00",
        "timestamp": "1777118425",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c28afe5-d5b1-4570-876c-b01167859ccb",
        "value": "apovevstrrms94920.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:25+00:00",
        "timestamp": "1777118425",
        "to_ids": true,
        "type": "domain",
        "uuid": "d668f8b2-e08f-4ed5-8481-027705e8fd28",
        "value": "app-outpaiy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:25+00:00",
        "timestamp": "1777118426",
        "to_ids": true,
        "type": "domain",
        "uuid": "68b8aa2a-a81e-427f-b8d6-f8e3d27c5506",
        "value": "appartamentilflat.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:26+00:00",
        "timestamp": "1777118426",
        "to_ids": true,
        "type": "domain",
        "uuid": "2acb6ab1-5389-44d3-8098-53d715411a4a",
        "value": "appetonsta.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:26+00:00",
        "timestamp": "1777118426",
        "to_ids": true,
        "type": "domain",
        "uuid": "4881f7d6-fc4e-4f8d-a390-bfe7b39939f2",
        "value": "approv-guest6549.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:26+00:00",
        "timestamp": "1777118426",
        "to_ids": true,
        "type": "domain",
        "uuid": "75abbb27-b3d3-4a4d-84a0-ad9c634b37ac",
        "value": "argoapp.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:26+00:00",
        "timestamp": "1777118426",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7055fdb-8f03-4a87-96c4-99794dc835c5",
        "value": "arivsstayned.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:26+00:00",
        "timestamp": "1777118426",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ae8322e-b866-41b4-9ef8-ccdbaa6a5970",
        "value": "arminstitute.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:26+00:00",
        "timestamp": "1777118427",
        "to_ids": true,
        "type": "domain",
        "uuid": "f31506b5-f6e9-4bb2-a978-8663b167c5a1",
        "value": "arrival-pend.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:27+00:00",
        "timestamp": "1777118427",
        "to_ids": true,
        "type": "domain",
        "uuid": "7216e308-3602-430a-b5d9-c450162c8c80",
        "value": "arrival-pending.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:27+00:00",
        "timestamp": "1777118427",
        "to_ids": true,
        "type": "domain",
        "uuid": "7064e6f1-ace7-4645-a70b-58128a4913e2",
        "value": "arrivalguestflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:27+00:00",
        "timestamp": "1777118427",
        "to_ids": true,
        "type": "domain",
        "uuid": "59351881-9bd4-40ad-9a08-9b69e5d85686",
        "value": "arrivalstayb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:27+00:00",
        "timestamp": "1777118427",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfc1c07a-d0ac-44c2-a3f7-e928efc5f745",
        "value": "arrivalstybed.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:27+00:00",
        "timestamp": "1777118427",
        "to_ids": true,
        "type": "domain",
        "uuid": "e778e539-9795-4759-a1a1-c70b8252f8aa",
        "value": "assets-medcoturnkey-nonprod.roccommercecloud.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:27+00:00",
        "timestamp": "1777118428",
        "to_ids": true,
        "type": "domain",
        "uuid": "663c5bc1-3605-4dde-a2cc-82b0f6e9609f",
        "value": "assets-tstatssupply-nonprod.roccommercecloud.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:28+00:00",
        "timestamp": "1777118428",
        "to_ids": true,
        "type": "domain",
        "uuid": "206ccaf7-378e-409c-bac6-eb64d9a4171a",
        "value": "aundjwq.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:28+00:00",
        "timestamp": "1777118428",
        "to_ids": true,
        "type": "domain",
        "uuid": "30c89117-430c-4a80-b918-ab74f1c8d2af",
        "value": "austrianhighways.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:28+00:00",
        "timestamp": "1777118428",
        "to_ids": true,
        "type": "domain",
        "uuid": "593f9a66-f59e-4043-a9fd-c8d306cb244b",
        "value": "authpoint749-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:28+00:00",
        "timestamp": "1777118428",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e8f4930-8226-473a-a62d-e454ef815930",
        "value": "authstep119-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:28+00:00",
        "timestamp": "1777118428",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ca7fc30-6d6f-4d15-af5a-a51bd5c14f9f",
        "value": "authstep158-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:28+00:00",
        "timestamp": "1777118429",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ccf6ae1-dbcb-4ccd-84cd-0bbeaeea214d",
        "value": "authstep185-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:29+00:00",
        "timestamp": "1777118429",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d7b4153-07a0-43f1-aae8-f2f04deb885a",
        "value": "authstep195-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:29+00:00",
        "timestamp": "1777118429",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b39c9ca-dc71-45a1-bba3-c8ac40b83087",
        "value": "authstep2-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:29+00:00",
        "timestamp": "1777118429",
        "to_ids": true,
        "type": "domain",
        "uuid": "4df2c6d0-e4ed-41ae-b937-91a575113e83",
        "value": "authstep28-agoda.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:29+00:00",
        "timestamp": "1777118429",
        "to_ids": true,
        "type": "domain",
        "uuid": "5191e0c5-aab6-4e92-9e2d-464a21dc0cb9",
        "value": "authstep291-verify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:29+00:00",
        "timestamp": "1777118429",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dadf9fc-00ee-44f1-9d0a-9782c7e9e25c",
        "value": "authstep358-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:29+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f4f8a6e-ceee-4211-90d7-010b6dcc7e90",
        "value": "authstep44-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "1108b847-79bc-4d85-9853-2d707a438d53",
        "value": "authstep518-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "f60fe6b3-6416-4a6a-b78b-91870f959767",
        "value": "authstep589-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "eeb4ab53-e67f-43e5-bca7-21762c3ddea7",
        "value": "authstep604-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "17de2128-33bb-46bf-90ce-e8a5df108532",
        "value": "authstep647-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "71720419-c0d0-41e6-bbca-bb8379ca7738",
        "value": "authstep677-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118430",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5757b2b-51ff-4e43-a300-102c0017bcdc",
        "value": "authstep84-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:30+00:00",
        "timestamp": "1777118431",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7f80fbe-443e-43e8-8607-e08bcc883da5",
        "value": "authstep903-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:31+00:00",
        "timestamp": "1777118431",
        "to_ids": true,
        "type": "domain",
        "uuid": "48ef60f2-ad8d-48fe-a651-b3eacd33cf0a",
        "value": "authstep91-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:31+00:00",
        "timestamp": "1777118431",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7661c8f-9166-46a9-9f98-111605ae0c3b",
        "value": "authstep925-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:31+00:00",
        "timestamp": "1777118431",
        "to_ids": true,
        "type": "domain",
        "uuid": "45229912-1537-41e4-801d-dd7011f9cc39",
        "value": "authstep942-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:31+00:00",
        "timestamp": "1777118431",
        "to_ids": true,
        "type": "domain",
        "uuid": "581b4a63-08b9-4b1e-a391-8cfbabe06153",
        "value": "authstep951-expedia.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:31+00:00",
        "timestamp": "1777118431",
        "to_ids": true,
        "type": "domain",
        "uuid": "1abff5b3-89ab-4d41-a43d-60fb4c422b16",
        "value": "authstep981-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:31+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fdba2f0-f60e-40dd-9f87-c0253634c5f2",
        "value": "b0kcheckres-verifpay1.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:32+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "502b566d-8e06-4ba6-8a3d-e3afc67152be",
        "value": "b10.stdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:32+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b108d8f-a0f1-462a-9c21-c97dd590dc1b",
        "value": "backend2.explicit.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:32+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "adeb649a-c924-47a0-b2a2-99e4be8cc886",
        "value": "baqro.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:32+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "88742b1f-dac2-4d22-a0f2-3717629b25f5",
        "value": "bbforpay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:32+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2e6479b-b238-4ceb-b23d-365b40fae796",
        "value": "bdo-bank.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:32+00:00",
        "timestamp": "1777118432",
        "to_ids": true,
        "type": "domain",
        "uuid": "448f1d0a-ae25-4c99-acf1-9f6972b17625",
        "value": "be-onsportaal.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:33+00:00",
        "timestamp": "1777118433",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2893dbf-cccc-4f8a-bb83-6f7ef418f4c2",
        "value": "beachvfop.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:33+00:00",
        "timestamp": "1777118433",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2960be2-216e-43a8-8ebd-fe4837212c6c",
        "value": "bedsarrivrom.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:33+00:00",
        "timestamp": "1777118433",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd726391-4382-4037-a086-984a0e649751",
        "value": "best-western-cloud.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:33+00:00",
        "timestamp": "1777118433",
        "to_ids": true,
        "type": "domain",
        "uuid": "1702da77-783a-456b-9d1a-65a55195ef1a",
        "value": "bestwestern-id-bi57kda.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:33+00:00",
        "timestamp": "1777118433",
        "to_ids": true,
        "type": "domain",
        "uuid": "31ca2ae8-b460-4641-ad35-5ec988ca8cd4",
        "value": "bestwestern-id-cv64tip.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:33+00:00",
        "timestamp": "1777118433",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c9359d6-a193-4179-9e79-d0e1e2ccbed6",
        "value": "bestwestern-id-el20mbt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118434",
        "to_ids": true,
        "type": "domain",
        "uuid": "402b8d7a-0837-4be5-ba92-3aee80ec9ed3",
        "value": "bestwestern-id-fr31kaw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118434",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8bdea59-5358-4747-9b05-13a64d43f460",
        "value": "bestwestern-id-fr33bio.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118434",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fa252cf-147c-47e3-82d8-6b901c4a9b66",
        "value": "bestwestern-id-gb72nsa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118434",
        "to_ids": true,
        "type": "domain",
        "uuid": "3110ff90-5c28-4f50-8699-ded86bec2f03",
        "value": "bestwestern-id-gu41vsy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118434",
        "to_ids": true,
        "type": "domain",
        "uuid": "995bc6c1-861c-44d8-9a8d-9950b8771c5a",
        "value": "bestwestern-id-hb74ger.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118434",
        "to_ids": true,
        "type": "domain",
        "uuid": "c41580c4-dcc8-4a68-924b-02f31f207dba",
        "value": "bestwestern-id-hd32saj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:34+00:00",
        "timestamp": "1777118435",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d5555a8-f596-45af-a535-3dcf5c9352cd",
        "value": "bestwestern-id-ib73vbp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:35+00:00",
        "timestamp": "1777118435",
        "to_ids": true,
        "type": "domain",
        "uuid": "e69e7b42-fb08-4c45-b4f6-13e3a99f067e",
        "value": "bestwestern-id-ip53dan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:35+00:00",
        "timestamp": "1777118435",
        "to_ids": true,
        "type": "domain",
        "uuid": "7316e3af-8b55-4973-87c8-4c02d12e7966",
        "value": "bestwestern-id-it39foc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:35+00:00",
        "timestamp": "1777118435",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d523fec-610c-4247-b516-22c1673a15a0",
        "value": "bestwestern-id-js83gns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:35+00:00",
        "timestamp": "1777118435",
        "to_ids": true,
        "type": "domain",
        "uuid": "03faf1cd-0175-472d-a0ae-6a419c6f7ca9",
        "value": "bestwestern-id-kb72ybv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:35+00:00",
        "timestamp": "1777118435",
        "to_ids": true,
        "type": "domain",
        "uuid": "581b5465-70fb-4f2b-9df9-54aadb4d2b79",
        "value": "bestwestern-id-ke43nse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:35+00:00",
        "timestamp": "1777118436",
        "to_ids": true,
        "type": "domain",
        "uuid": "d44c7a0b-0f64-4b86-ad2b-8f22dabba024",
        "value": "bestwestern-id-kj14mxa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:36+00:00",
        "timestamp": "1777118436",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2c61711-2431-43d8-bcb5-67e38725f960",
        "value": "bestwestern-id-kk83gip.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:36+00:00",
        "timestamp": "1777118436",
        "to_ids": true,
        "type": "domain",
        "uuid": "5891e60f-410a-45aa-870c-51bb7ad206b2",
        "value": "bestwestern-id-ku43osp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:36+00:00",
        "timestamp": "1777118436",
        "to_ids": true,
        "type": "domain",
        "uuid": "067ae1df-9a48-4394-baee-a4b2c35059b0",
        "value": "bestwestern-id-la11vby.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:36+00:00",
        "timestamp": "1777118436",
        "to_ids": true,
        "type": "domain",
        "uuid": "d114b345-5156-4661-81c8-c72a227263a0",
        "value": "bestwestern-id-lk24tyv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:36+00:00",
        "timestamp": "1777118436",
        "to_ids": true,
        "type": "domain",
        "uuid": "d39ba907-1eec-427d-94f8-dd3c5ed068f1",
        "value": "bestwestern-id-ls01min.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:36+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a863724-8bee-4e70-b6a1-328713643867",
        "value": "bestwestern-id-me14ced.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:37+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "4eb088e8-5ff4-4364-b74f-4bc2320ab14a",
        "value": "bestwestern-id-mi33uqj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:37+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6fa9e3c-c0a8-41ee-8397-696505a8cec8",
        "value": "bestwestern-id-mi48gyd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:37+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "932cb6d1-0e79-4190-9925-12c802c6b6f0",
        "value": "bestwestern-id-mi48sjf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:37+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "3102821b-21ff-4336-82f0-1f69624d06ee",
        "value": "bestwestern-id-mk39igh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:37+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "0244c3fc-dbae-4479-bdcc-5dba0b0eb334",
        "value": "bestwestern-id-ml33bmw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:37+00:00",
        "timestamp": "1777118437",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d211516-6f62-4fae-98bc-32f1b3c85332",
        "value": "bestwestern-id-mn71tak.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118438",
        "to_ids": true,
        "type": "domain",
        "uuid": "17e4190f-3cf0-48dc-981e-fbd3dc24b63b",
        "value": "bestwestern-id-mw43opi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118438",
        "to_ids": true,
        "type": "domain",
        "uuid": "d56af39c-5868-4be1-b1fc-6b940668b20f",
        "value": "bestwestern-id-mx41ofl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118438",
        "to_ids": true,
        "type": "domain",
        "uuid": "f09145eb-04e7-4d8e-8122-6b773f154e5a",
        "value": "bestwestern-id-nt52vos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118438",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0854a0a-0001-4a5a-8f0d-b9d0705c7902",
        "value": "bestwestern-id-oa74fta.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118438",
        "to_ids": true,
        "type": "domain",
        "uuid": "64b0183d-71a0-4bdf-b2da-8e7f9b9a45f9",
        "value": "bestwestern-id-oe14vya.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118438",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5d7192c-8777-4afa-9285-277baa32e0e8",
        "value": "bestwestern-id-of39fra.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:38+00:00",
        "timestamp": "1777118439",
        "to_ids": true,
        "type": "domain",
        "uuid": "14907996-156e-43e4-8526-7fcd65ebf4f2",
        "value": "bestwestern-id-of46swe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:39+00:00",
        "timestamp": "1777118439",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fd26b4d-666e-4b1e-840d-12f7db92dfeb",
        "value": "bestwestern-id-ok12kot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:39+00:00",
        "timestamp": "1777118439",
        "to_ids": true,
        "type": "domain",
        "uuid": "06805813-e19b-43f9-b1bc-e60d99eae989",
        "value": "bestwestern-id-ol92loc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:39+00:00",
        "timestamp": "1777118439",
        "to_ids": true,
        "type": "domain",
        "uuid": "740702ba-3726-4783-8a7c-fb77080ea365",
        "value": "bestwestern-id-or96mgd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:39+00:00",
        "timestamp": "1777118439",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d4ea3c1-3e03-43ce-9155-8c3adf5dde7b",
        "value": "bestwestern-id-ow38bye.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:39+00:00",
        "timestamp": "1777118439",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a3a665f-9589-4ac0-9bdd-ee803ac8c10c",
        "value": "bestwestern-id-ph73uog.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:39+00:00",
        "timestamp": "1777118440",
        "to_ids": true,
        "type": "domain",
        "uuid": "da45eb66-61aa-4fb0-9d7d-52cc2d820564",
        "value": "bestwestern-id-pi85vys.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:40+00:00",
        "timestamp": "1777118440",
        "to_ids": true,
        "type": "domain",
        "uuid": "226f1d93-d7f0-4075-a97d-12ccca0088d1",
        "value": "bestwestern-id-py83vdh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:40+00:00",
        "timestamp": "1777118440",
        "to_ids": true,
        "type": "domain",
        "uuid": "7db11229-2309-4392-916e-0bfed197eb72",
        "value": "bestwestern-id-pz46gba.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:40+00:00",
        "timestamp": "1777118440",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4900657-0c26-4eac-b621-8f7165c87ec4",
        "value": "bestwestern-id-re53gid.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:40+00:00",
        "timestamp": "1777118440",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4c13528-7169-4165-8906-d7361a19da63",
        "value": "bestwestern-id-rt52txt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:40+00:00",
        "timestamp": "1777118440",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6e2804b-c482-455b-985d-43b9344f14dd",
        "value": "bestwestern-id-sh58she.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:40+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "391026e2-854a-4fb1-b772-8f9f73592903",
        "value": "bestwestern-id-sk38vxj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:41+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "30790bf5-1bcb-4dff-8dad-4f11c04b9497",
        "value": "bestwestern-id-ti86nbj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:41+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "3991c8de-d809-4629-b683-b29cea6943b4",
        "value": "bestwestern-id-to27gys.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:41+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "00fbba25-3296-48f6-bc37-5bab2139a364",
        "value": "bestwestern-id-tr47vkf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:41+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "60df1237-be5d-488e-9ad5-b2a707a9b337",
        "value": "bestwestern-id-us01onl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:41+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f04d6d7-bfcc-4379-b597-42f690761c16",
        "value": "bestwestern-id-ut59bid.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:41+00:00",
        "timestamp": "1777118441",
        "to_ids": true,
        "type": "domain",
        "uuid": "7991a539-52ed-4646-9c53-66b3fbb72a18",
        "value": "bestwestern-id-vf23fsd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118442",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8673acb-5685-4e68-ad7d-1ca8284cef6e",
        "value": "bestwestern-id-vs11csi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118442",
        "to_ids": true,
        "type": "domain",
        "uuid": "d52c64ef-88b0-475e-a320-be1ba91f4168",
        "value": "bestwestern-id-vy34gdk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118442",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd26d78f-db45-4542-a3ed-0f2205fe6a14",
        "value": "bestwestern-id-wk52iqp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118442",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb442ca1-2412-4f66-bd57-9e8e169b04aa",
        "value": "bestwestern-id-ya87kig.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118442",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7aea180-21e1-4f2d-9b16-d84244c3f3a7",
        "value": "bestwestern-id-yt28utk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118442",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e38336c-5473-40a3-9bc4-b40fc73d902d",
        "value": "bestwestern-id-yv38sdt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:42+00:00",
        "timestamp": "1777118443",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c566945-e01d-4d20-b237-f5bbbd5a8075",
        "value": "bestwestern-id-yv57hvs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:43+00:00",
        "timestamp": "1777118443",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d168a66-13ba-45c6-9434-b17829157db3",
        "value": "bonkondor.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:43+00:00",
        "timestamp": "1777118443",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ce12e5b-34f7-4fe9-a32c-03758bb77068",
        "value": "bookaccess225-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:43+00:00",
        "timestamp": "1777118443",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e0e5e8e-de3f-43c0-80cf-ebe65ff34f40",
        "value": "booking-confirm2103.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:43+00:00",
        "timestamp": "1777118443",
        "to_ids": true,
        "type": "domain",
        "uuid": "47f2b2db-de97-4d7e-a975-1fcfdb68278e",
        "value": "booking-confirm3303.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:43+00:00",
        "timestamp": "1777118443",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3b707f4-5b2d-48b0-974c-c4bf0cb1173c",
        "value": "booking-confirm4105.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:43+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "83ac3824-8d6a-4c30-a1e3-e67b10891226",
        "value": "booking-confirm4230.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:44+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5dea191-94b6-4dea-829e-d94ab02357d1",
        "value": "booking-confirm4231.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:44+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfbfd015-5010-4d39-813b-7063d0173f41",
        "value": "booking-confirm4232.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:44+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "579e1431-a35f-4951-a8a6-5e8072c87924",
        "value": "booking-confirm4233.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:44+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d66a08a-6785-4ac6-95f5-fb2625d3b9d0",
        "value": "booking-confirm4234.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:44+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "49e27805-2b2a-451a-aec5-cf0fcb6b9bf7",
        "value": "booking-confirm6233.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:44+00:00",
        "timestamp": "1777118444",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f9b1fde-35d7-4c13-825e-9ce81408d027",
        "value": "booking-confirmation-id724679.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118445",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbf3303c-14c9-48a0-a0fd-f7787f9cc5a5",
        "value": "booking-confirmation-id726779.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118445",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ee6372a-f9e8-4bd3-9da1-b50808c6dafb",
        "value": "booking-confirmation-id72689.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118445",
        "to_ids": true,
        "type": "domain",
        "uuid": "6446ad9e-3ff2-4a75-9e33-4cf43ae831c3",
        "value": "booking-confirmation-id75379.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118445",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd0bc3bf-a93e-4a33-841f-a83a9ebea89c",
        "value": "booking-confirmation-id76487.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118445",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a040b2b-43e2-48aa-bb06-adeb15342a3b",
        "value": "booking-confirmation.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118445",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a20ffd3-6551-43f5-a7d5-23c2641e5a80",
        "value": "booking-confirmation6785171.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:45+00:00",
        "timestamp": "1777118446",
        "to_ids": true,
        "type": "domain",
        "uuid": "b41d2cea-6425-40ee-9113-dcbd0562a575",
        "value": "booking-guest-verlfy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:46+00:00",
        "timestamp": "1777118446",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b61000b-50b0-4996-b6b9-cb9ebefc7004",
        "value": "booking-hotelsreserv.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:46+00:00",
        "timestamp": "1777118446",
        "to_ids": true,
        "type": "domain",
        "uuid": "41916192-2f2c-4ec5-bdd2-891372dff6ab",
        "value": "booking-id112739737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:46+00:00",
        "timestamp": "1777118446",
        "to_ids": true,
        "type": "domain",
        "uuid": "3edac111-c242-4f43-9ceb-a0180f09f0ae",
        "value": "booking-id15438.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:46+00:00",
        "timestamp": "1777118446",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1644082-a638-4e91-874e-91b8dad786ea",
        "value": "booking-id23754.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:46+00:00",
        "timestamp": "1777118446",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9f47d0e-6df9-4231-b6ef-7e1cace9415e",
        "value": "booking-id35732.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:46+00:00",
        "timestamp": "1777118447",
        "to_ids": true,
        "type": "domain",
        "uuid": "67eb7239-85dd-4118-9475-ce1a5106cedb",
        "value": "booking-id4628462.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:47+00:00",
        "timestamp": "1777118447",
        "to_ids": true,
        "type": "domain",
        "uuid": "c59e48f6-b48d-435c-9628-7cac7d2005c0",
        "value": "booking-id4841503.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:47+00:00",
        "timestamp": "1777118447",
        "to_ids": true,
        "type": "domain",
        "uuid": "d784072d-287c-487a-82b2-6571606ed0ba",
        "value": "booking-id49264737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:47+00:00",
        "timestamp": "1777118447",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e691467-926b-48f7-b30b-7c85dc472180",
        "value": "booking-id49264914.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:47+00:00",
        "timestamp": "1777118447",
        "to_ids": true,
        "type": "domain",
        "uuid": "60b3170e-77f7-4a10-b8c4-5508e1746481",
        "value": "booking-id49269137.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:47+00:00",
        "timestamp": "1777118447",
        "to_ids": true,
        "type": "domain",
        "uuid": "83f94570-9e68-4fb3-8a67-4ba5b29e499a",
        "value": "booking-id511114737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:47+00:00",
        "timestamp": "1777118448",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9e31c88-0b53-4caa-b653-328e37801306",
        "value": "booking-id5900654.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:48+00:00",
        "timestamp": "1777118448",
        "to_ids": true,
        "type": "domain",
        "uuid": "376d1348-e153-4626-a0f2-6ccb8c268d1f",
        "value": "booking-id5928561263.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:48+00:00",
        "timestamp": "1777118448",
        "to_ids": true,
        "type": "domain",
        "uuid": "330b93ff-f9d3-4243-b5d0-8f4a21765a17",
        "value": "booking-id6028561263.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:48+00:00",
        "timestamp": "1777118448",
        "to_ids": true,
        "type": "domain",
        "uuid": "0581e909-70ea-4b33-a411-12a03d0cb5d4",
        "value": "booking-id6128561263.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:48+00:00",
        "timestamp": "1777118448",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bb97ad1-8bed-4be5-85a5-c756ad857464",
        "value": "booking-id6228561263.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:48+00:00",
        "timestamp": "1777118448",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bff7e3d-d6f2-4913-8859-21378f5d6f7a",
        "value": "booking-id65423.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:48+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ac6bab5-6d7d-40f9-8d25-934a4b2a4234",
        "value": "booking-id85342.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:49+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "c01821c9-8d8b-4cfd-a300-6c3d5b5cf49e",
        "value": "booking-id85432.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:49+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf2975da-a908-4a3b-9190-a4aa9f073f23",
        "value": "booking-id93264737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:49+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b4573c6-259f-49c2-a36b-5e746b4fccaf",
        "value": "booking-id958782.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:49+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbf49113-3ef7-416d-b044-9fe119aa7f3f",
        "value": "booking-id98264737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:49+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7bf9eef-c1e1-4e1b-9c09-9cdae5ffd32f",
        "value": "booking-payment-5609.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:49+00:00",
        "timestamp": "1777118449",
        "to_ids": true,
        "type": "domain",
        "uuid": "f91edf29-27bf-454f-b860-2de013478370",
        "value": "booking-reservation-id-8904323.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118450",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbb0e36a-aeda-4bc3-8f06-1a49cb8370d8",
        "value": "booking-thequartersaladaeng.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118450",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebca3a68-0024-4aaa-a6a4-a5f1aaeb19f0",
        "value": "booking.confirmation-id73.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118450",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a46c10d-ec55-4024-b3ed-cb45bdac5580",
        "value": "booking.confirmation-id76.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118450",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4f6d937-e41c-4221-9ccc-f1d0b88862c5",
        "value": "booking.confirmation-id799.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118450",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6c70d82-4700-42c2-8221-f1546eab6d39",
        "value": "booking.confirmation3490-webhotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118450",
        "to_ids": true,
        "type": "domain",
        "uuid": "147c1385-d633-45da-9534-7f4d39e7b146",
        "value": "booking.confirmationrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:50+00:00",
        "timestamp": "1777118451",
        "to_ids": true,
        "type": "domain",
        "uuid": "a853164d-5f55-4c5d-9db3-12b45895f1d2",
        "value": "booking.cozyapartment2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:51+00:00",
        "timestamp": "1777118451",
        "to_ids": true,
        "type": "domain",
        "uuid": "41545f6c-8291-4aad-ac0a-38f671c8877b",
        "value": "booking.cozyrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:51+00:00",
        "timestamp": "1777118451",
        "to_ids": true,
        "type": "domain",
        "uuid": "b25dc03b-9206-4de1-ab29-8a5740e760f0",
        "value": "booking.hotel-stay129811.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:51+00:00",
        "timestamp": "1777118451",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c1c90f0-f413-4e22-97a9-3ddee24acd1d",
        "value": "booking.hotel-stay531213.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:51+00:00",
        "timestamp": "1777118451",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea55eb09-742e-4250-a476-a9a9fef3fb60",
        "value": "booking.luxurylocations2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:51+00:00",
        "timestamp": "1777118451",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cb1cdaa-f793-4abd-bfea-098732ce8315",
        "value": "booking.reservation-id9927615.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:51+00:00",
        "timestamp": "1777118452",
        "to_ids": true,
        "type": "domain",
        "uuid": "724d425d-f49a-4705-ac89-626922cca71b",
        "value": "booking.reserve-arrival-eur.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:52+00:00",
        "timestamp": "1777118452",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce0b673d-459a-4278-abe1-be0fbd5efc97",
        "value": "bookingreserv-hotel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:52+00:00",
        "timestamp": "1777118452",
        "to_ids": true,
        "type": "domain",
        "uuid": "33762dc1-9f18-4c5f-af4c-643c0e39492c",
        "value": "bookingreserved-hotel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:52+00:00",
        "timestamp": "1777118452",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba8c2f2-796f-4199-b3cc-fb130c9f3eb8",
        "value": "bookinguest-verlf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:52+00:00",
        "timestamp": "1777118452",
        "to_ids": true,
        "type": "domain",
        "uuid": "a24a87aa-efad-4781-a638-13a6297b7236",
        "value": "bookingverifyplatform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:52+00:00",
        "timestamp": "1777118452",
        "to_ids": true,
        "type": "domain",
        "uuid": "01789544-3bb7-4bb3-9a96-3a29e3ea12c5",
        "value": "booklandguestinfo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:52+00:00",
        "timestamp": "1777118453",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8451cc1-02fb-4e3d-be6f-2f957a599e0f",
        "value": "bookln-guestcomplete.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:53+00:00",
        "timestamp": "1777118453",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2854771-9689-486e-abe7-2b1916f0b59d",
        "value": "booknow-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:53+00:00",
        "timestamp": "1777118453",
        "to_ids": true,
        "type": "domain",
        "uuid": "d76121ec-58bd-44a3-a7b7-e76736db8eb8",
        "value": "bookrecep-stayrespaynow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:53+00:00",
        "timestamp": "1777118453",
        "to_ids": true,
        "type": "domain",
        "uuid": "b22013c2-5814-4a6e-a7ab-c6933fd44060",
        "value": "bookstep073-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:53+00:00",
        "timestamp": "1777118453",
        "to_ids": true,
        "type": "domain",
        "uuid": "7861317b-ff1c-4dad-8a36-882db05737bd",
        "value": "boooking-montema.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:53+00:00",
        "timestamp": "1777118453",
        "to_ids": true,
        "type": "domain",
        "uuid": "161530e8-f4b4-4d40-9bfe-a5005dc0376e",
        "value": "brisbanesoho.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:53+00:00",
        "timestamp": "1777118454",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f36820d-3d85-49ae-b797-a851f852e958",
        "value": "budaya4dtoto.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:54+00:00",
        "timestamp": "1777118454",
        "to_ids": true,
        "type": "domain",
        "uuid": "36052d6e-6011-499e-8c20-26e12937325e",
        "value": "bv.feyakryma-wzg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:54+00:00",
        "timestamp": "1777118454",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9efb7f9-6989-4aa8-8cd0-bd0a7bf5c290",
        "value": "bwh.bestwestern-id-el20mbt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:54+00:00",
        "timestamp": "1777118454",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba4ee889-ed31-4a16-97c6-12d0feb74970",
        "value": "bwh.bestwestern-id-mi33uqj.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:54+00:00",
        "timestamp": "1777118454",
        "to_ids": true,
        "type": "domain",
        "uuid": "d87a9252-4e79-4f21-b13f-88d1fdaf849c",
        "value": "bwh.bestwestern-id-mi48gyd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:54+00:00",
        "timestamp": "1777118454",
        "to_ids": true,
        "type": "domain",
        "uuid": "96a7c796-93a5-43c1-9ffa-8eb63197f787",
        "value": "bz8c9qk6.genieaibz.dpdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:54+00:00",
        "timestamp": "1777118455",
        "to_ids": true,
        "type": "domain",
        "uuid": "f47ee3cb-7bb7-4469-9533-64cb0289279b",
        "value": "c9.confirm-id45356.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:55+00:00",
        "timestamp": "1777118455",
        "to_ids": true,
        "type": "domain",
        "uuid": "13658560-9adf-4e24-82b6-2eb22d910d62",
        "value": "camper-exped.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:55+00:00",
        "timestamp": "1777118455",
        "to_ids": true,
        "type": "domain",
        "uuid": "26f695a2-9135-480e-b493-493c8f5bf2b1",
        "value": "cancelroom-check.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:55+00:00",
        "timestamp": "1777118455",
        "to_ids": true,
        "type": "domain",
        "uuid": "4778621e-d7b1-4e68-acaa-7cc8b9573ffc",
        "value": "card-verified-reservation5620.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:55+00:00",
        "timestamp": "1777118455",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c10cbbc-77d1-4512-b6d5-229d541c264c",
        "value": "cardmanagerguestbook.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:55+00:00",
        "timestamp": "1777118455",
        "to_ids": true,
        "type": "domain",
        "uuid": "b787b373-07e2-40eb-8bca-d102f87121b3",
        "value": "cdn-3.uae-business-directory.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:55+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2c81fca-f159-4ca5-8534-f75f6dd36763",
        "value": "cdn-7.uae-business-directory.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:56+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "90bde50d-66ab-4f3b-b284-a6935861494e",
        "value": "cdn.who.int.aether.bumiayu.biz.id",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:56+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "35874775-b501-4310-bdda-3bb9ccf7073f",
        "value": "centralhouseporto.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:56+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "2979e5fd-80c3-4d61-99fc-66e46f6363c7",
        "value": "centralhouseportoribeira.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:56+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "b32c9d50-de76-48d4-a408-5c727ba8f030",
        "value": "centralrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:56+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd75ab86-b1ce-4453-b301-540b492f5f5a",
        "value": "cermin333.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:56+00:00",
        "timestamp": "1777118456",
        "to_ids": true,
        "type": "domain",
        "uuid": "daf5bb2b-9fe9-4f9b-ab8e-407e2af429d9",
        "value": "chat.stdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118457",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecc5032c-65f4-41e0-8e47-d84295be016b",
        "value": "chckinstayed.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118457",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dff7d16-436d-48c7-a6b1-98ace9ce0d52",
        "value": "check-inguest984947.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118457",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6defeea-d841-4490-87d9-9ea41c33fac6",
        "value": "checkguestsstay1099.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118457",
        "to_ids": true,
        "type": "domain",
        "uuid": "0251e628-c25a-4370-b4b8-c5893854778e",
        "value": "checkin-manager-now.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118457",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ca8a44a-d98a-44bf-8206-3a10c4157aa1",
        "value": "checkin-process-easy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118457",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f25814b-58a2-4c51-82e0-442f5203a1ee",
        "value": "checkin-welcome-guide.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:57+00:00",
        "timestamp": "1777118458",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8203ffe-b301-460d-b59e-f8f8a508ca37",
        "value": "checkunit840-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:58+00:00",
        "timestamp": "1777118458",
        "to_ids": true,
        "type": "domain",
        "uuid": "c67ab9b6-7d55-41de-8ec7-72294b514eff",
        "value": "chekguests903248.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:58+00:00",
        "timestamp": "1777118458",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2c0960d-f550-4831-b14e-f2e579b7f3fd",
        "value": "chekinfguests92319.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:58+00:00",
        "timestamp": "1777118458",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6cdf6cb-071c-46bf-8db3-a7ecba4466b8",
        "value": "chinahairbeauty.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:58+00:00",
        "timestamp": "1777118458",
        "to_ids": true,
        "type": "domain",
        "uuid": "78cf1364-89bb-4c5d-8388-d1a8fd417712",
        "value": "christelijk-mutualiteit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:58+00:00",
        "timestamp": "1777118458",
        "to_ids": true,
        "type": "domain",
        "uuid": "497f495a-3fb2-4d74-96ee-be5250d7a468",
        "value": "christian-habicht.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:58+00:00",
        "timestamp": "1777118459",
        "to_ids": true,
        "type": "domain",
        "uuid": "7240cd4a-8c58-43bf-8154-ed07a9ba058c",
        "value": "cinqueterrerivier.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:59+00:00",
        "timestamp": "1777118459",
        "to_ids": true,
        "type": "domain",
        "uuid": "9af3d51f-77c8-46a5-8369-be0f869a211e",
        "value": "cogil99.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:59+00:00",
        "timestamp": "1777118459",
        "to_ids": true,
        "type": "domain",
        "uuid": "206a09d1-89a6-44a1-84f4-eb3fa3c24691",
        "value": "com-1h1kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:59+00:00",
        "timestamp": "1777118459",
        "to_ids": true,
        "type": "domain",
        "uuid": "b09a2676-e288-456e-81bf-849cad0e53af",
        "value": "com-1h5frw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:59+00:00",
        "timestamp": "1777118459",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5ee7652-5f45-4d4e-b940-7a0f46f2cf59",
        "value": "com-2a2prh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:59+00:00",
        "timestamp": "1777118459",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1522e11-bac2-4fe8-91d4-7b3e49fca2b8",
        "value": "com-2h2kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:00:59+00:00",
        "timestamp": "1777118460",
        "to_ids": true,
        "type": "domain",
        "uuid": "516a378e-1946-408f-832b-5fff8587e9d2",
        "value": "com-3h3kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:00+00:00",
        "timestamp": "1777118460",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd30b6c0-15a1-4715-95c3-3f3a3bee6df7",
        "value": "com-4f4hrw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:00+00:00",
        "timestamp": "1777118460",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0cf8ea4-5f3b-4fdb-afa2-3e693f1b1795",
        "value": "com-4h4kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:00+00:00",
        "timestamp": "1777118460",
        "to_ids": true,
        "type": "domain",
        "uuid": "7449573c-71a3-48de-bf04-4b8877ffe579",
        "value": "com-4h4uwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:00+00:00",
        "timestamp": "1777118460",
        "to_ids": true,
        "type": "domain",
        "uuid": "da9c437e-cdec-4f83-81c9-c9572f7a6f8e",
        "value": "com-6f6hrw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:00+00:00",
        "timestamp": "1777118460",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cdef60e-ff55-4a20-b9d4-efbb1eacdfd1",
        "value": "com-6h6kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:00+00:00",
        "timestamp": "1777118461",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1c086e2-7a8e-4cc8-a3ec-b696fe4b9f50",
        "value": "com-6w6prh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:01+00:00",
        "timestamp": "1777118461",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a12eba0-0063-4e09-8c2a-c22e69ccdb43",
        "value": "com-7h7kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:01+00:00",
        "timestamp": "1777118461",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d9922c3-02e7-4e49-a4cd-fd29f0f7594a",
        "value": "com-8f8hrw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:01+00:00",
        "timestamp": "1777118461",
        "to_ids": true,
        "type": "domain",
        "uuid": "1560a964-c9f7-4809-a41d-b0b916c6946f",
        "value": "com-8h8kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:01+00:00",
        "timestamp": "1777118461",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c1e7135-b56f-46a9-9a25-a5db90a7e596",
        "value": "com-9h9kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:01+00:00",
        "timestamp": "1777118461",
        "to_ids": true,
        "type": "domain",
        "uuid": "43bb38e3-f760-4e62-9340-70e655d4bbf7",
        "value": "com-android-app.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:01+00:00",
        "timestamp": "1777118462",
        "to_ids": true,
        "type": "domain",
        "uuid": "24bf4822-c290-4090-b9af-28189cc4196a",
        "value": "com-cancel-operation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:02+00:00",
        "timestamp": "1777118462",
        "to_ids": true,
        "type": "domain",
        "uuid": "d60cc764-6d7b-4479-ad88-ea7784b02415",
        "value": "com-cancel-reserv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:02+00:00",
        "timestamp": "1777118462",
        "to_ids": true,
        "type": "domain",
        "uuid": "aca31669-d30f-4a96-93d1-2fa9f948315d",
        "value": "com-checking-hotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:02+00:00",
        "timestamp": "1777118462",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b401592-3540-4d1f-be72-b939e22f0a70",
        "value": "com-checking-property.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:02+00:00",
        "timestamp": "1777118462",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff335233-b674-47f9-8be4-d15784a09fc5",
        "value": "com-checks-hotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:02+00:00",
        "timestamp": "1777118462",
        "to_ids": true,
        "type": "domain",
        "uuid": "69ee51ad-e737-4b26-bd1e-5205bf359785",
        "value": "com-checks-reservation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:02+00:00",
        "timestamp": "1777118463",
        "to_ids": true,
        "type": "domain",
        "uuid": "5db64c5e-eb50-4640-842f-32132ae5fb75",
        "value": "com-checks-validation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:03+00:00",
        "timestamp": "1777118463",
        "to_ids": true,
        "type": "domain",
        "uuid": "34e2f888-cc2a-4256-95b1-ad2f8b50257d",
        "value": "com-confirmid.im",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:03+00:00",
        "timestamp": "1777118463",
        "to_ids": true,
        "type": "domain",
        "uuid": "23dcbdec-70fd-42bf-ad0b-e9764f85c654",
        "value": "com-conflrma-aparts.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:03+00:00",
        "timestamp": "1777118463",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7d62e20-3287-49a1-b7be-011593fca482",
        "value": "com-property-validation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:03+00:00",
        "timestamp": "1777118463",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4f2dbdb-cf9d-4e78-a540-1edeaca6b566",
        "value": "com-registry-home.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:03+00:00",
        "timestamp": "1777118463",
        "to_ids": true,
        "type": "domain",
        "uuid": "de81c441-85e5-489d-9a8a-5ff8e3a50043",
        "value": "com-reserv-checkings.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:03+00:00",
        "timestamp": "1777118464",
        "to_ids": true,
        "type": "domain",
        "uuid": "b70b1274-c441-4ab6-93e3-bf62ff23e75e",
        "value": "com-review-reserv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:04+00:00",
        "timestamp": "1777118464",
        "to_ids": true,
        "type": "domain",
        "uuid": "857b05c4-4c0f-49a6-8aef-2b1b9980c274",
        "value": "com-validation-reservation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:04+00:00",
        "timestamp": "1777118464",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb834485-58d7-40bf-91e9-d5c4bc2b0aed",
        "value": "com-your-cancel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:04+00:00",
        "timestamp": "1777118464",
        "to_ids": true,
        "type": "domain",
        "uuid": "a31b1706-70d3-4073-b81c-54c2e50db7fc",
        "value": "comfortmilan2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:04+00:00",
        "timestamp": "1777118464",
        "to_ids": true,
        "type": "domain",
        "uuid": "0388801c-7bc8-4ea2-9d4b-b7e63bf78388",
        "value": "complains-chekins.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:04+00:00",
        "timestamp": "1777118464",
        "to_ids": true,
        "type": "domain",
        "uuid": "30ecf20a-9765-4bf5-8d6c-0578e4f48178",
        "value": "comtind-reservs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:04+00:00",
        "timestamp": "1777118465",
        "to_ids": true,
        "type": "domain",
        "uuid": "80d6d146-ad50-48bd-b6f6-4ba6b69c89cd",
        "value": "confinfos-pagesid6491.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:05+00:00",
        "timestamp": "1777118465",
        "to_ids": true,
        "type": "domain",
        "uuid": "303b9248-55a6-4aa1-a86a-b844cce50da3",
        "value": "confirm-booking.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:05+00:00",
        "timestamp": "1777118465",
        "to_ids": true,
        "type": "domain",
        "uuid": "24f2cab9-d908-4d51-a19f-d6cacd52ac45",
        "value": "confirm-id37929.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:05+00:00",
        "timestamp": "1777118465",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b3c4e8f-27d4-4107-83ff-94770f31c579",
        "value": "confirm-id4044866.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:05+00:00",
        "timestamp": "1777118465",
        "to_ids": true,
        "type": "domain",
        "uuid": "54a1a8eb-7f85-4a89-af48-76ea9068620b",
        "value": "confirm-id4044867.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:05+00:00",
        "timestamp": "1777118465",
        "to_ids": true,
        "type": "domain",
        "uuid": "30803057-c7d2-4269-abbd-a8c4cd57c5a9",
        "value": "confirm-id432225.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:05+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "a253ad74-102c-4102-80ae-c80cb6add378",
        "value": "confirm-id43241.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "b20f7307-8799-47d6-ba97-0abdb3d5b761",
        "value": "confirm-id43242.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "c12bd764-f955-40a1-9d5f-8f281f5b9aa2",
        "value": "confirm-id43245.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dbf31b3-efa7-4811-bf7e-3b6db96cf9e9",
        "value": "confirm-id43250.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "83e8ec89-9d23-472c-b8ad-a3423978129d",
        "value": "confirm-id43250.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "73031f15-775d-4ad0-8483-d692d4ead04e",
        "value": "confirm-id43251.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118466",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8d68e95-4ddb-4115-a6cd-6642d6fc720e",
        "value": "confirm-id43251.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:06+00:00",
        "timestamp": "1777118467",
        "to_ids": true,
        "type": "domain",
        "uuid": "63413b97-9273-4ee1-a557-f5d445a7135a",
        "value": "confirm-id43253.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:07+00:00",
        "timestamp": "1777118467",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a6a1044-59df-44ac-a7a1-11e1272afc81",
        "value": "confirm-id43253.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:07+00:00",
        "timestamp": "1777118467",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e3ddb52-4ffd-466f-9a54-740edadffd12",
        "value": "confirm-id4344.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:07+00:00",
        "timestamp": "1777118467",
        "to_ids": true,
        "type": "domain",
        "uuid": "133a0d80-8e67-473a-9fec-f4d7f13ed64b",
        "value": "confirm-id45356.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:07+00:00",
        "timestamp": "1777118467",
        "to_ids": true,
        "type": "domain",
        "uuid": "802c5252-aa3a-40be-8e89-93a50067f176",
        "value": "confirm-id473893.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:07+00:00",
        "timestamp": "1777118467",
        "to_ids": true,
        "type": "domain",
        "uuid": "362a8e90-e075-49fd-8542-0fc3b113b1b1",
        "value": "confirm-id92344.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:07+00:00",
        "timestamp": "1777118468",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd695472-4fd0-49b3-8d33-6e5395a5a621",
        "value": "confirm-id92345.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:08+00:00",
        "timestamp": "1777118468",
        "to_ids": true,
        "type": "domain",
        "uuid": "1782718a-84d2-4e0c-95ca-02b573f3c238",
        "value": "confirm-id93251.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:08+00:00",
        "timestamp": "1777118468",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad92682c-69d6-42b2-ba4d-15326a99d064",
        "value": "confirm-id953480.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:08+00:00",
        "timestamp": "1777118468",
        "to_ids": true,
        "type": "domain",
        "uuid": "acc1a738-35ef-43a7-80ed-09a425b0ccc4",
        "value": "confirm-id953481.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:08+00:00",
        "timestamp": "1777118468",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb232213-7324-4428-84c2-08a5c074b595",
        "value": "confirm-id953484.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:08+00:00",
        "timestamp": "1777118468",
        "to_ids": true,
        "type": "domain",
        "uuid": "81ee4d2e-d626-4915-b845-ea69e56b25a3",
        "value": "confirm-id953485.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:08+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "83810d29-88de-4a2c-a33e-6a2e6f1741f4",
        "value": "confirm-id99433.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d94f342-fef8-4f31-bcb2-c37592476572",
        "value": "confirm-id9944.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebd4654a-0b2d-447f-b7d5-646316d64eab",
        "value": "confirm-visit.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "08977011-4d8d-4f70-ad1b-e25934defe21",
        "value": "confirm-your-stay.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "b98d38c6-951a-4f22-b2c9-32500bd5b320",
        "value": "confirmat-reservapay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "16f349d5-7be7-47a7-90b0-9d42491f9028",
        "value": "confirmation-id031.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118469",
        "to_ids": true,
        "type": "domain",
        "uuid": "65c65a2f-9421-4d74-97f9-e458e02629f2",
        "value": "confirmation-id032.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:09+00:00",
        "timestamp": "1777118470",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a1382f2-0c55-43cb-814a-afb5e1379110",
        "value": "confirmation-id103.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:10+00:00",
        "timestamp": "1777118470",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0fedd3c-88d2-44ee-9fe9-fc9f067de432",
        "value": "confirmation-id116.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:10+00:00",
        "timestamp": "1777118470",
        "to_ids": true,
        "type": "domain",
        "uuid": "204d031a-0dba-4a08-91ba-707c61126026",
        "value": "confirmation-id119.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:10+00:00",
        "timestamp": "1777118470",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d021d80-bbac-4a4a-a787-51c65eb17393",
        "value": "confirmation-id309.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:10+00:00",
        "timestamp": "1777118470",
        "to_ids": true,
        "type": "domain",
        "uuid": "272e0665-c77d-43a1-85aa-f36af61074ec",
        "value": "confirmation-id372.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:10+00:00",
        "timestamp": "1777118470",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab4a233c-8abd-4e04-ab94-0693eb09e24b",
        "value": "confirmation-id43345.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:10+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "305c0873-027d-4512-988c-c3c0b88ef598",
        "value": "confirmation-id43349.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:11+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dc75bcd-a75f-416e-8f9d-100c487bf57b",
        "value": "confirmation-id4374622.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:11+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "888558c0-5f92-485c-9af4-3ef0ab68a7f9",
        "value": "confirmation-id72.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:11+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "6429a5c7-27f4-4358-8458-1db940400988",
        "value": "confirmation-id73.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:11+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb565032-4f84-4210-b630-68433f99a450",
        "value": "confirmation-id799.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:11+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "08dcaba5-3a28-4687-a08f-35f11ee6ee53",
        "value": "confirmation-id85.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:11+00:00",
        "timestamp": "1777118471",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb05b4b7-f570-4a1a-83bc-cccdd4ab8194",
        "value": "confirmation-id85342.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:12+00:00",
        "timestamp": "1777118472",
        "to_ids": true,
        "type": "domain",
        "uuid": "366b7b62-5fb8-432e-b21a-0d2f1bfcd583",
        "value": "confirmation-id86.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:12+00:00",
        "timestamp": "1777118472",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3dff954-7d76-4142-90ea-1ec04a87c70f",
        "value": "confirmation-id87.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:12+00:00",
        "timestamp": "1777118472",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7a29635-718b-4080-90fd-54c1c42915b8",
        "value": "confirmation3490-webhotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:12+00:00",
        "timestamp": "1777118472",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c87a6cf-1ddb-4604-b2a7-0988c9f0a5e6",
        "value": "confirmationrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:12+00:00",
        "timestamp": "1777118472",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4a58e0e-12ba-4584-a4b2-e82609364f31",
        "value": "confirmed-thailand-id5648.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:12+00:00",
        "timestamp": "1777118472",
        "to_ids": true,
        "type": "domain",
        "uuid": "55d380a3-6999-45c6-8242-845c587793e5",
        "value": "confirmid142-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118473",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bc01be7-72db-4475-8a43-6bcde2ddf29d",
        "value": "confirmid152-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118473",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3ac2cd1-1e88-4f8b-ac46-44eaf4297e98",
        "value": "confirmid152-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118473",
        "to_ids": true,
        "type": "domain",
        "uuid": "1deec729-78cf-4d8a-97fe-7ad6cb73ac51",
        "value": "confirmid2-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118473",
        "to_ids": true,
        "type": "domain",
        "uuid": "de1afb0b-4333-4b04-8c17-431c5bc3f127",
        "value": "confirmid224-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118473",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e64a7d8-1b45-4c79-8c88-7481cda67748",
        "value": "confirmid264-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118473",
        "to_ids": true,
        "type": "domain",
        "uuid": "09231b0b-710e-4f84-8438-d19956c9779d",
        "value": "confirmid417-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:13+00:00",
        "timestamp": "1777118474",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe29ef29-bf03-4631-bdc7-b28d30000d31",
        "value": "confirmid42-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:14+00:00",
        "timestamp": "1777118474",
        "to_ids": true,
        "type": "domain",
        "uuid": "94c75421-9124-491a-8dc0-c6b0b5e34e77",
        "value": "confirmid502-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:14+00:00",
        "timestamp": "1777118474",
        "to_ids": true,
        "type": "domain",
        "uuid": "e47adc5c-1940-4b3e-b900-d60158e30940",
        "value": "confirmid519-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:14+00:00",
        "timestamp": "1777118474",
        "to_ids": true,
        "type": "domain",
        "uuid": "600cbf1d-cdcc-481f-bc1a-24d9f2726ecd",
        "value": "confirmid694-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:14+00:00",
        "timestamp": "1777118474",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bd26d66-6538-4aea-aa60-66610c533140",
        "value": "confirmid698-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:14+00:00",
        "timestamp": "1777118474",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c87e861-8701-4a1f-95b0-209c96b040b8",
        "value": "confirmid752-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:14+00:00",
        "timestamp": "1777118475",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ad2bad1-585b-4f17-96b0-f3a0379fc88f",
        "value": "confirmid841-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:15+00:00",
        "timestamp": "1777118475",
        "to_ids": true,
        "type": "domain",
        "uuid": "f003fc56-cea1-471f-a159-2354283b00f1",
        "value": "confirmid943-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:15+00:00",
        "timestamp": "1777118475",
        "to_ids": true,
        "type": "domain",
        "uuid": "4150fdd5-5a6a-4b46-9667-85f8343dfb5a",
        "value": "confirmid976-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:15+00:00",
        "timestamp": "1777118475",
        "to_ids": true,
        "type": "domain",
        "uuid": "f935250b-68d0-4be4-a2d0-fca98e96c673",
        "value": "confirmservice-id273.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:15+00:00",
        "timestamp": "1777118475",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6c5b5a5-c35a-4369-8865-02b07dcf55ae",
        "value": "confirmservice-id560.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:15+00:00",
        "timestamp": "1777118475",
        "to_ids": true,
        "type": "domain",
        "uuid": "94066a71-97a4-4b7d-a5ae-08c2f3f1619e",
        "value": "confirmservice-id563.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:15+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "2199a81e-61d4-4d9e-be9a-7f5652da68a6",
        "value": "connectview.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "d57d3a3f-2e19-42d3-8e69-11991a0184e4",
        "value": "connexion128.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b8748e5-2708-4517-9174-711572b4c242",
        "value": "couldhousecep.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "688b7df4-312a-488a-bf86-b49179e5fc9a",
        "value": "cozycolosseo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "42109765-254c-4301-b92e-fb8dd549b284",
        "value": "cozymilan2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4c04263-65a9-4c1a-ab59-f4ede0b58031",
        "value": "cozyrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118476",
        "to_ids": true,
        "type": "domain",
        "uuid": "24a16b65-0cdc-4e21-a85c-1ccc55c9ca03",
        "value": "cozysecurepay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:16+00:00",
        "timestamp": "1777118477",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff7bb355-f4da-4162-89d1-46c98aa3af63",
        "value": "crims-expd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:17+00:00",
        "timestamp": "1777118477",
        "to_ids": true,
        "type": "domain",
        "uuid": "1111a529-34fd-44f8-958c-fc1e20d328dd",
        "value": "crmpresh666777.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:17+00:00",
        "timestamp": "1777118477",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dd50605-7c88-4ccc-be6d-c8650a4a5671",
        "value": "crossbrowserscreenshot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:17+00:00",
        "timestamp": "1777118477",
        "to_ids": true,
        "type": "domain",
        "uuid": "033ee2a5-de4a-4059-b4db-a262e17c0885",
        "value": "crystal-home.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:17+00:00",
        "timestamp": "1777118477",
        "to_ids": true,
        "type": "domain",
        "uuid": "a67d7481-3814-4e29-b7ae-b90dc4d594fc",
        "value": "cynthiafernandes.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:17+00:00",
        "timestamp": "1777118477",
        "to_ids": true,
        "type": "domain",
        "uuid": "16c1caff-44bd-451a-895f-39ff08d8bd17",
        "value": "details-reservation-id223775.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:17+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "79e72c02-fb02-4302-8fdf-c896fe3465a0",
        "value": "details-reservation-id437692.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cbda520-311f-4d86-9775-ab7876d4e733",
        "value": "details-reservation-id523125.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "190b1b20-8b4d-4afc-857b-ebfef10af8a1",
        "value": "details-reservation-id63015.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0fd4fdc-7405-48f3-b9dd-d76273f8fa02",
        "value": "details-reservation-id756639.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "40a37951-6a8d-4382-a420-26b6fb584326",
        "value": "details-reservation-id783911.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5e47721-ce33-467c-ad24-b07bc7f4a646",
        "value": "details-reservation-id857395.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118478",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e6f135d-0921-42ed-a05d-13ae3dd209eb",
        "value": "details-reservation-id8883459.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:18+00:00",
        "timestamp": "1777118479",
        "to_ids": true,
        "type": "domain",
        "uuid": "e04057cb-00f0-478d-ae2c-286cac8fc965",
        "value": "details-reservation-id988912.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:19+00:00",
        "timestamp": "1777118479",
        "to_ids": true,
        "type": "domain",
        "uuid": "3238e092-a170-44c3-bb1b-66b6123a2aaa",
        "value": "dianchigai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:19+00:00",
        "timestamp": "1777118479",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f2b3613-4e1f-4090-a7b9-7bfa31b8a648",
        "value": "dilhizmetleri.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:19+00:00",
        "timestamp": "1777118479",
        "to_ids": true,
        "type": "domain",
        "uuid": "15d6f3e5-b514-40aa-9556-c17480baf365",
        "value": "dimilano2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:19+00:00",
        "timestamp": "1777118479",
        "to_ids": true,
        "type": "domain",
        "uuid": "4959b0eb-8d3a-4a1d-bb5b-92aadcc5b83b",
        "value": "direct-hotel-acces.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:19+00:00",
        "timestamp": "1777118479",
        "to_ids": true,
        "type": "domain",
        "uuid": "da9b04d0-dbaf-44bf-9817-29af4af425b9",
        "value": "direct-hotel-acess.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:19+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c720881-0012-4209-a653-94e59c41d1c0",
        "value": "directhtl-recepcheckguest1.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ac4d0e1-6115-4b80-abeb-76911af6f4db",
        "value": "direkt-hotel-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "463dfccd-ac9f-4171-9793-34d743745dd7",
        "value": "dogsharing-deutschland.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "23327dc5-3e66-41d4-887d-d9d5d7a163ec",
        "value": "dondepablo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "284022b5-65a2-457f-aaa2-22eafdde2f5b",
        "value": "dormezza.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b3910b-79c6-4833-8a45-2940e9a811f3",
        "value": "downtown-phoenix-hotel.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118480",
        "to_ids": true,
        "type": "domain",
        "uuid": "5391d410-77ec-45c9-afb8-be5b28f1645b",
        "value": "dpd-potvrda.potvrdanarudzbe648242.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:20+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "5749d880-1e77-4c1a-bfab-90d5da5c271f",
        "value": "dt.luxurymilan2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:21+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "08e99884-5631-49fe-b359-8ed6bab2d239",
        "value": "dts-provdis.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:21+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3cf6614-98d5-462c-98eb-570dfd6c96eb",
        "value": "dw.confirm-id953485.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:21+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "c567d556-2c68-4e62-b98c-2c226d21f391",
        "value": "easyguestestay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:21+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab6102b8-e9d9-437d-b6aa-8b866723de55",
        "value": "easyhotelparischarles.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:21+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "5857e2f4-da42-4c0b-9587-e844002df72d",
        "value": "easyparischarlesdegaullevillepinte.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:21+00:00",
        "timestamp": "1777118481",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0ba74c0-c943-4fbc-b1e5-aefecf8dd925",
        "value": "easytrustcard.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118482",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c841e65-b74a-43af-b7b3-069618a51a2e",
        "value": "ecopetexpo.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118482",
        "to_ids": true,
        "type": "domain",
        "uuid": "febfe066-1192-4fe3-8b94-43f71919c783",
        "value": "enesosenergy.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118482",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8442a04-5344-4028-aad0-872788200ecb",
        "value": "ent2025.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118482",
        "to_ids": true,
        "type": "domain",
        "uuid": "8676f9b2-b127-4edd-8010-43cff6d43dc9",
        "value": "evinet-si.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118482",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf099245-aaf2-4ad9-8af0-51f7e4edfa4e",
        "value": "example-8.stdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118482",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe2dd0bd-19d8-4d4e-8774-d1ce8d03c8c1",
        "value": "expderoomse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:22+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfc5d24c-4afd-471b-b6c1-fd4ba8097501",
        "value": "expdia-appis.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "241e7f16-51c2-4f55-8b54-93f5cf224894",
        "value": "expedla-confimations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "40ccf428-1652-4116-a2cb-428b84faa9f1",
        "value": "expedla-payelements.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3c8b40a-2ddf-4639-9579-9117f551a729",
        "value": "expedla-paymentnotions.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "5357a3e7-78a9-4362-a99a-6643155cfb56",
        "value": "expedla-paynow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "63bf3d8d-f97f-410c-8288-4741871d9e4d",
        "value": "expedla-verf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118483",
        "to_ids": true,
        "type": "domain",
        "uuid": "3837d201-8884-4eed-a99a-dfa792fd1057",
        "value": "expedlpayya-inentntfeio.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:23+00:00",
        "timestamp": "1777118484",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0fe95fb-d3e0-46cf-9e25-4dbde0e88413",
        "value": "expedlya-payloventntfeio.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:24+00:00",
        "timestamp": "1777118484",
        "to_ids": true,
        "type": "domain",
        "uuid": "af30508b-b58f-4f73-931b-6dc9e5801c50",
        "value": "extrabokterms.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:24+00:00",
        "timestamp": "1777118484",
        "to_ids": true,
        "type": "domain",
        "uuid": "6332901b-1452-4b48-9048-096914daacb6",
        "value": "extrabookterms.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:24+00:00",
        "timestamp": "1777118484",
        "to_ids": true,
        "type": "domain",
        "uuid": "829a14eb-ef16-4933-a321-f93c1ae85454",
        "value": "f-secure-estore.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:24+00:00",
        "timestamp": "1777118484",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4ca4785-5b20-468a-ad41-2dd19fa04c09",
        "value": "fast-chekin-hotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:24+00:00",
        "timestamp": "1777118484",
        "to_ids": true,
        "type": "domain",
        "uuid": "90165b8d-a27a-4bef-9c3d-0d919594afa0",
        "value": "fast-guest-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:24+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ff6bc63-0261-434a-8af5-100ab4b4e048",
        "value": "fast-hotel-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8ec1910-47a1-4ce4-a14e-1896c3df04e1",
        "value": "fast-room-entery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2093cd2-6c3c-4ca8-a2dc-87f24519a2d6",
        "value": "fast-rooom-entry.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab738cab-681a-45aa-b2a2-bb871701767f",
        "value": "fast-rooom-entryy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "41a40561-b00a-4411-ad07-332241780cec",
        "value": "feyakryma-wzg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e4596e5-adc9-4580-8a75-cedad64e356d",
        "value": "fixy-network-day.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118485",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cea1a00-971d-40a2-b890-f4e34c3b81fc",
        "value": "fjtel-pay.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:25+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "7050d60b-966f-4bf1-a88b-e8e704193ad6",
        "value": "flowaccess340-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:26+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b53a785-107a-4409-b17d-d74e33f5bea0",
        "value": "flowcheck223-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:26+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc9e142f-b9ee-4f57-9cda-36b5d7db3cb2",
        "value": "forplay88.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:26+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "09a1bc78-29af-4a5d-b3be-8d9653263710",
        "value": "francerooms04358.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:26+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e2bfbd6-07ff-4030-85b9-a3e93d4f0ced",
        "value": "francerooms04648.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:26+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3009575-329f-4e21-b8c0-669ad5d85a6e",
        "value": "fredhotelbook.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:26+00:00",
        "timestamp": "1777118486",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa210801-3a99-44fd-bc02-cc80c4ef73ac",
        "value": "free369.one",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118487",
        "to_ids": true,
        "type": "domain",
        "uuid": "651a7bd3-310a-443b-94a9-b3f50cf7d841",
        "value": "fuoturearriv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118487",
        "to_ids": true,
        "type": "domain",
        "uuid": "04c8fbd6-987b-4dc7-943d-1d11e96d6cd3",
        "value": "gdpayappurl44.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118487",
        "to_ids": true,
        "type": "domain",
        "uuid": "da366824-af63-4a75-b146-17ef2a5be12a",
        "value": "gdpayimgurl22.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118487",
        "to_ids": true,
        "type": "domain",
        "uuid": "974ec414-b755-4210-b44d-8758a01b56cd",
        "value": "gdpayjumph5url11.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118487",
        "to_ids": true,
        "type": "domain",
        "uuid": "49719661-9813-4f66-9c44-89fb7408edae",
        "value": "gdpayjumph5url22.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118487",
        "to_ids": true,
        "type": "domain",
        "uuid": "197c9390-141a-4a38-a9ba-b7252c639e14",
        "value": "geilibao.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:27+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cfb6ceb-4ab5-4ec4-abaa-7a7d5ff6c565",
        "value": "genieaibz.dpdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:28+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "e28fed51-f6c6-4545-8fb4-da963e2b651b",
        "value": "gf.reservation-78398.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:28+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc8df52a-91c5-4513-97ab-0be169cd4acc",
        "value": "giftly.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:28+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5b3a83b-886a-47a3-b7ed-5cae9c20ec9e",
        "value": "gn8nt4sx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:28+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "60a50f25-e832-4f02-86c6-bbb06ad46672",
        "value": "goinghman.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:28+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "8712f927-eff0-4364-a0fd-fb9a2867f2ce",
        "value": "goinghstl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:28+00:00",
        "timestamp": "1777118488",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e283f01-2827-447e-8178-9369b93ff832",
        "value": "grandiorpraguehotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118489",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b2a99d5-4950-41da-b2b7-9088c8c9626a",
        "value": "greececheckin34989.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118489",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2a145d7-82d8-41e3-8984-d79e3d3504c3",
        "value": "gtb3ztn4.4snowplowing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118489",
        "to_ids": true,
        "type": "domain",
        "uuid": "79adec27-9296-43bc-9c89-0d6a38b1c4f9",
        "value": "guardcontrol771-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118489",
        "to_ids": true,
        "type": "domain",
        "uuid": "26e5d123-39a3-4796-adc1-df8adf7c2f34",
        "value": "guardstep844-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118489",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b5b1a34-1120-468b-942d-3a0db7ebcb4e",
        "value": "guardunit77-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118489",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab530c5d-5af1-4f60-bae2-074af8cdde8b",
        "value": "guardwire270-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:29+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1e01bd6-0f34-4601-807e-039829eb2419",
        "value": "gues-reservasionhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:30+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "086d2a48-9a6d-48e0-bfa0-3e757ff3ab7b",
        "value": "guest-access-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:30+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb5f694c-b661-4f9f-91d7-06ce51092ffd",
        "value": "guest-br-verify-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:30+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "90c9ac3c-a4de-4808-88a0-b95bebe17e28",
        "value": "guest-br-veriif-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:30+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffab1cf4-e263-404f-bf7e-6ae9fbc1718e",
        "value": "guest-cd-hotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:30+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "14628e9e-4a36-476a-a2d7-b4c32f4bc476",
        "value": "guest-direct-entry.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:30+00:00",
        "timestamp": "1777118490",
        "to_ids": true,
        "type": "domain",
        "uuid": "b51bdec5-c345-4039-9a1a-c100cbc52a1d",
        "value": "guest-entry-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118491",
        "to_ids": true,
        "type": "domain",
        "uuid": "f70284b8-62cb-4616-b6f3-92b568729663",
        "value": "guest-heleket.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118491",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cf3767b-a77c-484d-9549-7a13727e6b2d",
        "value": "guest-hotelverif-br.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118491",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c89809b-e8e8-4490-8771-2ac2a2ae1d19",
        "value": "guest-info-update.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118491",
        "to_ids": true,
        "type": "domain",
        "uuid": "25a0e163-e196-4385-b7cf-5d1a41b10676",
        "value": "guest-payment-confirm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118491",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee8f12fc-f214-46e8-ae3a-58267c38abcf",
        "value": "guest-payment-secure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118491",
        "to_ids": true,
        "type": "domain",
        "uuid": "05df3652-988f-42bf-8797-f98b80002f05",
        "value": "guest-quik-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:31+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb90137c-041b-4bef-8183-906b5f3c7b94",
        "value": "guest-resarvashionhup.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b613db8-285b-47eb-942c-10a63c290965",
        "value": "guest-resarvashionnub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4cfa7c8-6f77-47c9-a113-47910d172ab6",
        "value": "guest-resarvstionhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e4e6719-91ca-454b-849f-cae797923d07",
        "value": "guest-reservashionethub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "d21bc360-ae5b-406e-b09e-1f6c47f6e373",
        "value": "guest-reservashunhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a43e52c-faa4-4bb4-8f75-c0f4ddb2c751",
        "value": "guest-reservasion-gatte.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118492",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2bb0fb3-8c1d-4226-b921-904918758353",
        "value": "guest-reservationhubb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:32+00:00",
        "timestamp": "1777118493",
        "to_ids": true,
        "type": "domain",
        "uuid": "25c289b6-737e-4810-9b04-85a517906594",
        "value": "guest-reservationhubhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:33+00:00",
        "timestamp": "1777118493",
        "to_ids": true,
        "type": "domain",
        "uuid": "26ac21e8-5557-4813-9a76-fd32c1438526",
        "value": "guest-reservatoin-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:33+00:00",
        "timestamp": "1777118493",
        "to_ids": true,
        "type": "domain",
        "uuid": "54eae757-9cf7-45d4-98cd-6b59a8de3865",
        "value": "guest-reservetion-center.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:33+00:00",
        "timestamp": "1777118493",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bff9786-3ce1-4b84-9041-2472339c7919",
        "value": "guest-reservetion-gattee.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:33+00:00",
        "timestamp": "1777118493",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ddfcc33-a64e-49bc-9c89-0d518754f9cc",
        "value": "guest-reservetion-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:33+00:00",
        "timestamp": "1777118493",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7552f5e-2142-4585-a998-b96c75f26422",
        "value": "guest-reservetion-syte.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:33+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf67dd1-7c7b-4e0f-8df1-5d2bb14e233a",
        "value": "guest-reservetoin-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e477a2c-90da-4b02-bbc6-7cb756c739c6",
        "value": "guest-reserwation-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "912edcc3-f673-4674-8687-76951841476b",
        "value": "guest-resrevationhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "91b77a21-8742-4828-ad95-eb4b9f2c9577",
        "value": "guest-resrvaton-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "628c7db1-8d0a-487a-b411-f04b550a8c68",
        "value": "guest-rezervationhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef620359-f665-4933-8738-5445737a5213",
        "value": "guest-room-acess.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118494",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed153b31-1d79-444a-b9cc-9559b696e975",
        "value": "guest-rooom-direct.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:34+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "315f3dd2-417d-4d30-b116-09effc38fade",
        "value": "guest-rservation-gatte.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:35+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "94e1af42-ef03-4f16-83cb-a7f69a9a1b58",
        "value": "guest-stattus-verification.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:35+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "0132b0e8-939a-4239-bf4b-b6fa08046949",
        "value": "guest-staycheck32949.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:35+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "61f30507-2b7b-4e89-8e29-4247dde7413f",
        "value": "guest-ver1fication-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:35+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "2129cb4d-7056-4dc4-a180-3d4f5c175964",
        "value": "guest-verif-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:35+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "db3fe932-caef-4e83-88d2-8b2379757aab",
        "value": "guest-verificacao-br.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:35+00:00",
        "timestamp": "1777118495",
        "to_ids": true,
        "type": "domain",
        "uuid": "de2cd259-007e-4b92-b895-54c9b7a14c00",
        "value": "guest-verification-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118496",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd2d7276-f82d-4886-bff6-bcd333bc0b45",
        "value": "guesta-reserwation-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118496",
        "to_ids": true,
        "type": "domain",
        "uuid": "00f9ff18-2240-48fd-abd4-f329ae111f63",
        "value": "guestapprovmproperty188364.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118496",
        "to_ids": true,
        "type": "domain",
        "uuid": "e094ade3-c639-4492-be82-b4c826f0ff0a",
        "value": "guestarrivalexperience.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118496",
        "to_ids": true,
        "type": "domain",
        "uuid": "60edf747-d24b-4c3e-8b55-c70481dc20d8",
        "value": "guestarrivalmanagementhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118496",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bfc5ad5-0e53-4396-b0cc-75d7e8a772af",
        "value": "guestarrivalwelcomehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118496",
        "to_ids": true,
        "type": "domain",
        "uuid": "92cb790d-be2a-4efe-9895-38640f702eae",
        "value": "guestassistflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:36+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "8caab8c9-f3ed-4c24-a1ce-1b529928f919",
        "value": "guestcardupdateinform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "eba30f19-9612-457c-a0b8-e32e340bae5f",
        "value": "guestcertify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "e04f3f80-1455-4b55-96cf-3326fb4bb2ce",
        "value": "guestcheckinandwelcome.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cfcdfe1-34a4-40ad-aede-7c76b054fd32",
        "value": "guestcheckinconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "169beaf8-61b9-4b49-b498-6ac106d4b0d8",
        "value": "guestcheckinhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cfc336c-bdf2-4c97-873c-83c1797b42a0",
        "value": "guestestay-app.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118497",
        "to_ids": true,
        "type": "domain",
        "uuid": "a97c29a8-a267-4e95-875b-e051000af697",
        "value": "guestflowly.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:37+00:00",
        "timestamp": "1777118498",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f0c791a-deb1-45b8-93c0-f59f54eae6c0",
        "value": "guesthelphub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:38+00:00",
        "timestamp": "1777118498",
        "to_ids": true,
        "type": "domain",
        "uuid": "3902fcd2-e59c-450e-bb5a-a7c7cef81dec",
        "value": "guestonboardingpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:38+00:00",
        "timestamp": "1777118498",
        "to_ids": true,
        "type": "domain",
        "uuid": "45c5208c-059d-4162-82f8-31b947288591",
        "value": "guestpropertcheck88234.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:38+00:00",
        "timestamp": "1777118498",
        "to_ids": true,
        "type": "domain",
        "uuid": "437b1efb-a6a1-4828-92f1-13dd16f78223",
        "value": "guestpropertchecks48492.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:38+00:00",
        "timestamp": "1777118498",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c0ddc53-3271-4f61-9f52-9d6f807aefc9",
        "value": "guestreadyhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:38+00:00",
        "timestamp": "1777118498",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2e4424c-04d5-49df-b80c-9184d30230ea",
        "value": "guestscheck21334.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:38+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "8034bc12-3f21-4cf4-b771-d59736657902",
        "value": "guestscheck28139.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:39+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae0ae607-3003-44e2-a0a6-86ba44c4e383",
        "value": "guestschecks39123.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:39+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5692801-20ed-4345-98ae-ddd774eea1f9",
        "value": "guestslandverif.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:39+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac4f6a13-31c0-46db-8bad-91167f16052a",
        "value": "guestsproperhtcheck89096.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:39+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc934ef5-024d-4c32-91ce-b2156e16027f",
        "value": "guestsptove94293.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:39+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "d84c7230-21d9-40b0-8faf-d59b71700fc1",
        "value": "guestsstay583236.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:39+00:00",
        "timestamp": "1777118499",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4ef3683-da38-41ef-bd9a-380f464967f4",
        "value": "gueststay-check3499.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118500",
        "to_ids": true,
        "type": "domain",
        "uuid": "947618f7-6de5-4363-87a6-3a7fe82b519e",
        "value": "gueststaywelcomeplatform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118500",
        "to_ids": true,
        "type": "domain",
        "uuid": "10fed63a-b368-4e88-bd12-2dd971ab8f0b",
        "value": "gueststigerbook.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118500",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd4c78c-ccb7-486a-b582-22b14c5f7dd8",
        "value": "guestt-verification-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118500",
        "to_ids": true,
        "type": "domain",
        "uuid": "8af9812b-64e2-439b-8411-9ee9a09f80b3",
        "value": "guestupdatedates.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118500",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5894d09-19cc-4c6f-93d4-fc3541e712bd",
        "value": "guestupdateinform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118500",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d8082b0-80b6-434d-b14b-ab9fdd485498",
        "value": "guestverif-hotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:40+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "29bab452-3156-4c72-81b0-8d45b93a3293",
        "value": "guestverif-hotelogix.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:41+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a5e3aa6-4937-44ce-9ac9-237f74f00090",
        "value": "guestverifcation-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:41+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "291a2799-a526-483d-b14b-c39ad0325133",
        "value": "guestveriffication-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:41+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ee05692-82e8-474f-b07e-10551a6acac7",
        "value": "guestverification-br-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:41+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "50b237e1-106e-4034-a15a-b254042b3f77",
        "value": "guestwelcomeconnection.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:41+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "58ba4fa0-9f30-490a-b470-cfd1aa0631ec",
        "value": "guestwelcomeexperiencehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:41+00:00",
        "timestamp": "1777118501",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f2d40c2-6be0-4db0-9ad4-0795f8b242c8",
        "value": "guestwelcomeflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118502",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bbbf190-b1f9-43d0-8089-5a9abc6342c3",
        "value": "guestwelcomesuite.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118502",
        "to_ids": true,
        "type": "domain",
        "uuid": "68e21075-6ccf-47fc-8c24-fec6cd091c10",
        "value": "guestwlcomehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118502",
        "to_ids": true,
        "type": "domain",
        "uuid": "30433de5-5b89-49c0-b68e-1493fcebdf66",
        "value": "gust-reservation-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118502",
        "to_ids": true,
        "type": "domain",
        "uuid": "25e7456d-70ce-4c34-8f8b-a6ffb30ae9e6",
        "value": "gustywebresvn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118502",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8cc2e80-7697-4656-8a74-df5e0f58ca2a",
        "value": "hanguostyle.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118502",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a7ab876-dd7a-4392-ab20-66e124ed2aa8",
        "value": "hanoioler.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:42+00:00",
        "timestamp": "1777118503",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb75a53d-7b59-4ddc-b303-47245d00f1e8",
        "value": "heleket-guest.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:43+00:00",
        "timestamp": "1777118503",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee551f51-a938-4496-aad5-b70744d21545",
        "value": "hepbetspor13.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:43+00:00",
        "timestamp": "1777118503",
        "to_ids": true,
        "type": "domain",
        "uuid": "acbfade4-fe22-4bd6-8521-44dfe046076c",
        "value": "hex-travel.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:43+00:00",
        "timestamp": "1777118503",
        "to_ids": true,
        "type": "domain",
        "uuid": "b702733e-a0f7-4ca0-a406-037daa23c7c1",
        "value": "hmahanoi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:43+00:00",
        "timestamp": "1777118503",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa6de279-58e4-4433-a7f0-d38136f115d3",
        "value": "holder046-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:43+00:00",
        "timestamp": "1777118503",
        "to_ids": true,
        "type": "domain",
        "uuid": "caf6e5f6-634e-482d-9f43-945f1da9fcdf",
        "value": "holder105-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:43+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "c626dd10-8cd5-4455-b4e7-982ec44ece99",
        "value": "holder1133-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "84128f4d-38ee-4c3c-847d-f8ee67f36fc5",
        "value": "holder148-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4cfe760-60bd-48f7-9cc3-8bd2810d26bd",
        "value": "holder156-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "f82f019f-89df-482b-8c14-2990396fa2f0",
        "value": "holder256-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdefe77e-250f-47b0-a61f-9ae599e2df72",
        "value": "holder266-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "cedb70a2-233a-410e-ba4a-47927a526589",
        "value": "holder298-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118504",
        "to_ids": true,
        "type": "domain",
        "uuid": "97fdc60e-f6e0-470a-8e01-123bb51c4413",
        "value": "holder417-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:44+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3d2c5dd-bce8-4569-a037-c3c5bf10fcf4",
        "value": "holder518-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c643952-8910-4e9a-8d17-370314298e9c",
        "value": "holder681-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1a127ce-a149-4449-bdc0-e27a4946562f",
        "value": "holder715-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "47287314-f833-4c05-bba5-62e36e8118e1",
        "value": "holder752-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "2313264d-9da4-483c-a1f8-1d9bb433f37b",
        "value": "holder780-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "12c0d50d-5dad-411f-a1cc-061f77392250",
        "value": "holder901-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118505",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2c94cc4-0fe5-43ec-85c0-1c04edfbe7f8",
        "value": "holder914-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:45+00:00",
        "timestamp": "1777118506",
        "to_ids": true,
        "type": "domain",
        "uuid": "24469124-534b-4f5d-aaec-049094511639",
        "value": "holder917-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:46+00:00",
        "timestamp": "1777118506",
        "to_ids": true,
        "type": "domain",
        "uuid": "6547fbcc-3c83-448c-8975-f52f167acbfc",
        "value": "holeellere.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:46+00:00",
        "timestamp": "1777118506",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf25c2e1-448a-47d4-807e-aa7520a9ef6f",
        "value": "homsarivals.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:46+00:00",
        "timestamp": "1777118506",
        "to_ids": true,
        "type": "domain",
        "uuid": "f09433c6-520a-4ea6-a466-6f06deca0f1e",
        "value": "horemgstbe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:46+00:00",
        "timestamp": "1777118506",
        "to_ids": true,
        "type": "domain",
        "uuid": "5438e72e-efea-44ae-ab58-9d406feb52ee",
        "value": "host-507901.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:46+00:00",
        "timestamp": "1777118506",
        "to_ids": true,
        "type": "domain",
        "uuid": "c05da7ad-b347-4ae7-bfea-12f974328928",
        "value": "hostguestwelcomehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:46+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e86f810-e45f-4d18-93e0-207c1e593a5b",
        "value": "hostmontaigne.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f22ff73-95e5-4972-9b5d-667e49f2ceb3",
        "value": "hotel-520102.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b7079c4-3540-42f2-a14d-c4b70ae65c09",
        "value": "hotel-acces-link.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "23b6c113-5386-4c27-94f7-9d16bfeb65fe",
        "value": "hotel-access-portel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "28a562e3-4d62-4c98-b5f0-c198a4b11033",
        "value": "hotel-approve01910831.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4fdf5c9-8aa3-4b27-b3f3-43234b6336c2",
        "value": "hotel-approve21241692.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118507",
        "to_ids": true,
        "type": "domain",
        "uuid": "11a1707d-1d2d-4cb3-9b96-a489617d8282",
        "value": "hotel-approve4929321.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:47+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "9555808d-320c-4304-ae09-0e2a308f9b4c",
        "value": "hotel-approve870291.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b37ee06-6d81-4438-b9ba-dc9767c47650",
        "value": "hotel-assist-online.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "88586ac9-37a5-4ece-ae25-c124008e40da",
        "value": "hotel-checkin-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "d023adea-0fff-46ad-8cc9-bf994d2c5bae",
        "value": "hotel-checkin-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "345e0dd6-ed9d-4ca1-bc39-e6a207858381",
        "value": "hotel-checkin-br-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "05b05b1a-9790-4a6c-aee7-a0674ff5e650",
        "value": "hotel-chekin-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118508",
        "to_ids": true,
        "type": "domain",
        "uuid": "433c589f-a4b1-4422-8d22-bdb02715e1c0",
        "value": "hotel-details-now.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:48+00:00",
        "timestamp": "1777118509",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5463552-d516-4272-918c-c72bedd7a60b",
        "value": "hotel-entry-portl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:49+00:00",
        "timestamp": "1777118509",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f583b42-664f-42a5-a244-da3bf9cda8ec",
        "value": "hotel-guest-veriffy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:49+00:00",
        "timestamp": "1777118509",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8fd678b-f8f6-475d-8e5e-247bb0c82550",
        "value": "hotel-guestverification-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:49+00:00",
        "timestamp": "1777118509",
        "to_ids": true,
        "type": "domain",
        "uuid": "07d56a03-577d-4122-aa1a-1bc0abefe404",
        "value": "hotel-gwk.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:49+00:00",
        "timestamp": "1777118509",
        "to_ids": true,
        "type": "domain",
        "uuid": "88a49556-bcff-4f75-904e-b8c0c8a20958",
        "value": "hotel-payment-secure-br.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:49+00:00",
        "timestamp": "1777118509",
        "to_ids": true,
        "type": "domain",
        "uuid": "db456e1f-dbd7-477a-b399-be0de900fde0",
        "value": "hotel-portal-direct.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:49+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "d246fa60-2964-4316-8f12-1c4b01652e3d",
        "value": "hotel-reservation-5483.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "9671802a-ada6-4007-9ed2-b435c5329d53",
        "value": "hotel-reservationverif-sys.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "5af67847-9671-4300-9da7-7521e4d43813",
        "value": "hotel-room-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad4895fe-67c4-4a54-b48c-9ec199ed9c6f",
        "value": "hotel-secure-enteryy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e13fe58-2005-45f3-9478-c2d62aeb8438",
        "value": "hotel-service-desk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "08de80f6-845d-4443-a204-3025cd2c2fd9",
        "value": "hotel-stay039201.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118510",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c4e254-6d24-487b-9dd4-cb5abdd4408c",
        "value": "hotel-stay320813.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:50+00:00",
        "timestamp": "1777118511",
        "to_ids": true,
        "type": "domain",
        "uuid": "31051bcc-3331-4de0-acc5-6e921093aa58",
        "value": "hotel-stay33223.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:51+00:00",
        "timestamp": "1777118511",
        "to_ids": true,
        "type": "domain",
        "uuid": "62d11d20-d42c-43c6-9bf1-dc03f481173c",
        "value": "hotel-stay3489.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:51+00:00",
        "timestamp": "1777118511",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb604113-26d9-4c1e-8173-9d771e06d7e1",
        "value": "hotel-stay573902.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:51+00:00",
        "timestamp": "1777118511",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cf617d4-7825-4dd0-be2d-da99d5754514",
        "value": "hotel-stay92164.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:51+00:00",
        "timestamp": "1777118511",
        "to_ids": true,
        "type": "domain",
        "uuid": "b06115f0-d6bc-42b1-bc43-4cf90deebe8a",
        "value": "hotelbookingauthority.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:51+00:00",
        "timestamp": "1777118511",
        "to_ids": true,
        "type": "domain",
        "uuid": "10a7585f-08cf-4b29-af5f-d7e0bbaf8850",
        "value": "hotelbookingproof.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:51+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "83cdc49e-52aa-4396-90e6-8f1473107770",
        "value": "hotelboutiquecasadecolon.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "44ae23ad-206f-43b2-92e9-7e7d51532c2f",
        "value": "hotelconfirmationrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4de5373-4916-481e-8297-ec96a7e22b9e",
        "value": "hoteleo-subbmit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e934855-70a5-40f3-8023-aebac54f9798",
        "value": "hotellerocroy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d159794-c8b6-450b-a7a1-40d916451148",
        "value": "hotelmilano2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "be1d85c7-e5d5-43db-9cb3-a66e8102f271",
        "value": "hotelpaxopera-id72548.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118512",
        "to_ids": true,
        "type": "domain",
        "uuid": "9281b7cf-a3d9-40bf-bf1c-2d4ce0f29a5f",
        "value": "hotelreservation-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:52+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf691c1-95d7-46e8-af91-c09097d2af7b",
        "value": "hotelreserve31984.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:53+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b197bdd-a4ad-495c-9172-2a8aa7bfa1d8",
        "value": "hotelreservecheck89375-april.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:53+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "86b7701d-7538-4c15-8b2e-6a0a5550cc2a",
        "value": "hotels-chat.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:53+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cb61531-d5fd-4075-a17d-bae402555409",
        "value": "hotels-vison.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:53+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "b470a6b3-33b8-4054-a32b-78c1c457b78f",
        "value": "hotelstay8140.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:53+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b95228f-2971-444d-9659-fa7dd6533ac4",
        "value": "hotelupd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:53+00:00",
        "timestamp": "1777118513",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb42e2bf-6793-4da3-8e22-3b072cc6f3e6",
        "value": "hotelverifspain.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118514",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ca59f9c-b754-4ae0-b5a9-354ff480c168",
        "value": "hotelverrification.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118514",
        "to_ids": true,
        "type": "domain",
        "uuid": "634d2bb2-3857-40a8-9c83-73f816597c23",
        "value": "hotsquaredanvers.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118514",
        "to_ids": true,
        "type": "domain",
        "uuid": "86ceb221-ca42-44b4-8172-91fe61b65443",
        "value": "hottel-guest-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118514",
        "to_ids": true,
        "type": "domain",
        "uuid": "80c03e06-e26c-4d6d-8123-4e0e1e63d681",
        "value": "houosromsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118514",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1330400-a999-4812-91c3-44a973d06422",
        "value": "house-jpcont.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118514",
        "to_ids": true,
        "type": "domain",
        "uuid": "72779765-3e1f-4c19-8a97-25ff86c4c956",
        "value": "howthefuckisvehiclestillalive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:54+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7091b13-5384-4db4-8946-992fa4c3f61a",
        "value": "hublocationstain.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "885530de-c107-4e25-b480-74e0c9d48219",
        "value": "hubstainn-532456.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "14614f5a-06b6-481d-a7a4-f26061e4d27e",
        "value": "hubstayitpge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7c3ef0b-41c1-4fce-ab9c-2ac39a59852f",
        "value": "humromrs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f2b825d-6c65-4ed0-b4f0-6858d84923fe",
        "value": "humsarrival.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "e48c58de-ba67-45f8-a2b6-d28eab0a9fc6",
        "value": "idcontrol302-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118515",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b0a75f-3df6-42e8-afb4-d52ae8491968",
        "value": "imap.bestwestern-id-ng57ash.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:55+00:00",
        "timestamp": "1777118516",
        "to_ids": true,
        "type": "domain",
        "uuid": "388928e8-2a71-4859-8dbd-70b2892a13c1",
        "value": "inattv1296.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:56+00:00",
        "timestamp": "1777118516",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfdc3b6e-74d3-42d6-aaa9-91125e126140",
        "value": "inattv1297.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:56+00:00",
        "timestamp": "1777118516",
        "to_ids": true,
        "type": "domain",
        "uuid": "286f5b80-5f52-4b5e-b9ea-4fd684cfe01d",
        "value": "inattv1300.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:56+00:00",
        "timestamp": "1777118516",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d1e7f1f-8603-434c-9863-c464d93f0088",
        "value": "inattv1303.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:56+00:00",
        "timestamp": "1777118516",
        "to_ids": true,
        "type": "domain",
        "uuid": "373275eb-c06b-4273-b242-e8fa6a166f96",
        "value": "inattv1310.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:56+00:00",
        "timestamp": "1777118516",
        "to_ids": true,
        "type": "domain",
        "uuid": "f47d8c59-e9e6-4327-b268-31809e949857",
        "value": "inattv1312.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:56+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1d1e7fe-c8c4-43e4-a721-e300a68196a3",
        "value": "inattv1313.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "e41dc322-c24f-4984-ad20-4e4ba1736544",
        "value": "inattv1314.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4f936c1-ccb9-4150-b9f2-454ac6d2263e",
        "value": "inattv1319.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba3310c1-f55b-4257-a0fe-50558da925c8",
        "value": "inattv1320.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "28054715-a25c-4694-947c-0fb712e3d13a",
        "value": "inattv1321.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3c01b11-bd14-4c62-9c63-35dc4a5987d2",
        "value": "inattv1322.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118517",
        "to_ids": true,
        "type": "domain",
        "uuid": "906ec457-20bc-4d11-b9bd-2acdf620b359",
        "value": "inattv1323.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:57+00:00",
        "timestamp": "1777118518",
        "to_ids": true,
        "type": "domain",
        "uuid": "04b51aba-fa7b-4fe0-8a6e-34d726beeac1",
        "value": "inattv1325.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:58+00:00",
        "timestamp": "1777118518",
        "to_ids": true,
        "type": "domain",
        "uuid": "7994501c-d7e4-4d5e-bbe5-7bcadae71d17",
        "value": "inattv1327.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:58+00:00",
        "timestamp": "1777118518",
        "to_ids": true,
        "type": "domain",
        "uuid": "0aebd013-62cb-407f-bef0-a202167d2996",
        "value": "inattv1329.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:58+00:00",
        "timestamp": "1777118518",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b85f236-e384-43cc-8fd0-ced1cdbd414d",
        "value": "inchekgsts384282.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:58+00:00",
        "timestamp": "1777118518",
        "to_ids": true,
        "type": "domain",
        "uuid": "38c01417-f63f-493f-b2fe-55aa5db0f6b1",
        "value": "incruises-home.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:58+00:00",
        "timestamp": "1777118518",
        "to_ids": true,
        "type": "domain",
        "uuid": "c448be90-4175-4abc-9f16-8524c149a92d",
        "value": "info193910304.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:58+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5f878cc-77f0-46bb-8e93-c843cefc2021",
        "value": "infonumfnone.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:59+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "f635b122-b356-4f46-9f51-94484d92d519",
        "value": "informed-home.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:59+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a14b60a-d756-4f4a-9328-6739d747bc0d",
        "value": "informguesti.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:59+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0366e56-5c4f-4af7-b6e1-1f22050ca9c7",
        "value": "infoyour-stay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:59+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f2082ee-769d-47d6-b202-5f0ab2003164",
        "value": "innreviehubstat.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:59+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3db6ddc-6f06-451a-af31-f03e85942bb0",
        "value": "inouqadg.4snowplowing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:01:59+00:00",
        "timestamp": "1777118519",
        "to_ids": true,
        "type": "domain",
        "uuid": "de7f9e1b-0894-4369-ab40-f3b09089d5b5",
        "value": "instant-chekin-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118520",
        "to_ids": true,
        "type": "domain",
        "uuid": "4253ef6a-a208-4da9-8088-a86c472c77d4",
        "value": "instant-room-enrty.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118520",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc421992-25c5-4dbc-843d-54cbe3fe0f0c",
        "value": "integ.temn.ivilla.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118520",
        "to_ids": true,
        "type": "domain",
        "uuid": "9474083f-96d3-4700-94c4-b8644a13f6d2",
        "value": "ipdateresit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118520",
        "to_ids": true,
        "type": "domain",
        "uuid": "7aca744a-85d4-4dd8-a044-c45a0b6a1753",
        "value": "ipstresser.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118520",
        "to_ids": true,
        "type": "domain",
        "uuid": "268d6b1b-b142-4a8b-a76c-fb0f79edf2c0",
        "value": "iselve.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118520",
        "to_ids": true,
        "type": "domain",
        "uuid": "11c0d521-046f-43a1-81cd-1ee3c0e4eb30",
        "value": "it-pgehubstain.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:00+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "66d1bae3-555e-4fae-a290-88518e15210d",
        "value": "ital-stayhub8438.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "390ede17-b790-4937-85e1-9e76caf29b49",
        "value": "itlaplacestay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "429f0cee-0755-41fa-b2a3-8b0365941001",
        "value": "itpages-stayinhubi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "245b0595-4322-4a7f-beb9-17b7840c0940",
        "value": "itpageshubinn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6605486-5bde-40c3-8182-6e824991280b",
        "value": "itpaghubreview.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "a54635ff-56cd-4f35-86d1-673a8742984a",
        "value": "itreservstyin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118521",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba841faf-9793-456d-839c-c8af5cc8b32f",
        "value": "itsty-itpages.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:01+00:00",
        "timestamp": "1777118522",
        "to_ids": true,
        "type": "domain",
        "uuid": "578d480a-919e-4696-905e-ccd7f7954122",
        "value": "iu.hotelromelive2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:02+00:00",
        "timestamp": "1777118522",
        "to_ids": true,
        "type": "domain",
        "uuid": "481a17a9-68bd-48ff-83f3-b2294ddf0fd4",
        "value": "k8s.lace.ivilla.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:02+00:00",
        "timestamp": "1777118522",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b849617-0c7c-44b0-bb96-69aedb7d7bb9",
        "value": "kd5.cggqe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:02+00:00",
        "timestamp": "1777118522",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d4bf623-b325-4886-b80d-c9a90cf4b2ef",
        "value": "kenthotelgwangalli.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:02+00:00",
        "timestamp": "1777118522",
        "to_ids": true,
        "type": "domain",
        "uuid": "e92c552e-c4e0-4c07-bd1c-26c2a3639d85",
        "value": "keycontrol743-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:02+00:00",
        "timestamp": "1777118522",
        "to_ids": true,
        "type": "domain",
        "uuid": "095dd3bd-8a3c-4284-bf8a-e2a943cba538",
        "value": "khdex.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:02+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "684701f2-226d-4d8b-be75-586b4070e3a3",
        "value": "klyrelvung.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "06607599-b990-4ebc-97c3-bac925b99d4a",
        "value": "kynlorai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7146b39-fc8d-481e-892d-d4027de8427c",
        "value": "l4.confirmation-id116.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d57449c-8bb4-4406-88ee-5956ccaf9f66",
        "value": "l7.confirmation-id119.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "684fd675-ca53-4c6a-81f4-d8de7ed9721f",
        "value": "lantanssy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc7cb0ed-c9b9-45be-8719-aabdebe09244",
        "value": "lascasasqc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118523",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcaa655d-f116-4415-a3e9-acba1d6155e2",
        "value": "lavillasaintdespres.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:03+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "70f75d1a-bf72-481f-a2cb-5d856b8b3c9a",
        "value": "ledgerdiagnosing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:04+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "70880fc0-70f6-4cb3-af99-7736bd4b88c7",
        "value": "leeipay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:04+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "81e3c53a-8057-4e59-a66b-c2c4039f9876",
        "value": "lifestaygood.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:04+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "72d02923-380a-4c8c-a2fe-5a92682ba992",
        "value": "live1xbet.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:04+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "65cfa94c-4cb4-488c-8477-c7a1403202d1",
        "value": "lodgstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:04+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e84213a-24af-49fd-8c5c-8e9abaffb7c2",
        "value": "loft-houser.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:04+00:00",
        "timestamp": "1777118524",
        "to_ids": true,
        "type": "domain",
        "uuid": "69daaba3-bcad-4cd4-b1ff-6e9e10ed7be6",
        "value": "loginpass551-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118525",
        "to_ids": true,
        "type": "domain",
        "uuid": "56baed8b-f5d1-4d39-b2dc-acb95b211527",
        "value": "lotto26.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118525",
        "to_ids": true,
        "type": "domain",
        "uuid": "707aad02-6cac-414a-9dac-9a311f32d989",
        "value": "ltyygz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118525",
        "to_ids": true,
        "type": "domain",
        "uuid": "d79bf18e-ed4d-4daf-bf1a-e63b2b167193",
        "value": "luleqh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118525",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e92ca98-16e4-4eb5-968b-a484209df63b",
        "value": "luxurylocations2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118525",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9248646-f05f-434b-a9f8-7a335c8aa029",
        "value": "luxurymilan2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118525",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a47bc99-a49a-4c2f-bf15-32b89ea9c139",
        "value": "lyread.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:05+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "9de2fe82-8133-4820-ac1c-bf9a4b391d36",
        "value": "m.aesbon.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "49d25fc4-aba1-4b31-a226-9ba865657102",
        "value": "mail.request-verification.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbd37423-0797-45be-a5f7-478825090445",
        "value": "marissalbydorobe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "416756da-43e0-4306-8764-8ac4f4757fd7",
        "value": "matcha-latte.vin",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "af0f89a8-9ee8-4ef9-9f8c-838d38960bdc",
        "value": "medilatin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "10a0db25-22f5-4e46-8a4b-314a86b04747",
        "value": "meravigliosomilano.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118526",
        "to_ids": true,
        "type": "domain",
        "uuid": "c391fe40-4822-40f9-98ed-9521196a557a",
        "value": "merchant-shopify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:06+00:00",
        "timestamp": "1777118527",
        "to_ids": true,
        "type": "domain",
        "uuid": "af4e3177-ef3b-46d2-b57c-d7f9b92335de",
        "value": "mershopay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:07+00:00",
        "timestamp": "1777118527",
        "to_ids": true,
        "type": "domain",
        "uuid": "771f0228-d1df-400b-966f-113f8361c240",
        "value": "minicheckguststay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:07+00:00",
        "timestamp": "1777118527",
        "to_ids": true,
        "type": "domain",
        "uuid": "4232af2b-4920-4f02-8af5-081737b49b46",
        "value": "molt.bestwestern-id-ib73vbp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:07+00:00",
        "timestamp": "1777118527",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba1df3e9-c6d5-4510-a54e-716b07eecd73",
        "value": "montaignehot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:07+00:00",
        "timestamp": "1777118527",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aae88f5-c222-4222-b952-5459ead5dac3",
        "value": "mounte-roomser.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:07+00:00",
        "timestamp": "1777118527",
        "to_ids": true,
        "type": "domain",
        "uuid": "1161bd12-9203-4e3a-af3f-58dc4267e036",
        "value": "mtreservations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:07+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc9f4110-67c3-4307-9214-1e2031499782",
        "value": "mukuldutt.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4ec1093-78d1-45b7-9dc6-182b488733c4",
        "value": "my-hotel-dashboard.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "54645fe1-e6a3-4ba4-a6aa-b0cbb4a07ed8",
        "value": "mydirect-hotel-chek.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a40a38f-4e2b-4ea9-9f31-fd2849a4079c",
        "value": "myguestarrivalhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "208699d2-f1b8-4a2c-9fe0-e744639ae533",
        "value": "myguestesportal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce3a5808-7884-48ba-ad0b-58558a9fe180",
        "value": "myguestswelcomehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118528",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9c0dedf-692a-4114-ac67-f2d3fff7f70b",
        "value": "mystayassist.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:08+00:00",
        "timestamp": "1777118529",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dc20e3b-6e08-4b9a-b976-aea03280a675",
        "value": "mystayguesthub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:09+00:00",
        "timestamp": "1777118529",
        "to_ids": true,
        "type": "domain",
        "uuid": "238c6aa3-17f7-45f6-827f-ff1cb0fb6d43",
        "value": "mystayportall.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:09+00:00",
        "timestamp": "1777118529",
        "to_ids": true,
        "type": "domain",
        "uuid": "092e7938-c696-44c0-a4ff-aebb9f407b58",
        "value": "mystaywelcomehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:09+00:00",
        "timestamp": "1777118529",
        "to_ids": true,
        "type": "domain",
        "uuid": "80218bd0-6723-48d1-b3e7-9ad00dd5e6d9",
        "value": "mystaywlecome.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:09+00:00",
        "timestamp": "1777118529",
        "to_ids": true,
        "type": "domain",
        "uuid": "c68250f2-1a6f-4dd5-9f87-668cd8160844",
        "value": "n7.reservation-id480923.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:09+00:00",
        "timestamp": "1777118529",
        "to_ids": true,
        "type": "domain",
        "uuid": "803b08ca-fb12-4026-80d8-045d3a960190",
        "value": "nah.xxx",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:09+00:00",
        "timestamp": "1777118530",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7ae7168-fe67-48a3-a559-da7de1e5c47c",
        "value": "ne.reservation-id995046.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:10+00:00",
        "timestamp": "1777118530",
        "to_ids": true,
        "type": "domain",
        "uuid": "531747b3-4bc9-41aa-9726-0fa6b8e3e415",
        "value": "nerjaclubbydorobe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:10+00:00",
        "timestamp": "1777118530",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1418591-2e6a-4ac8-a453-c1baa8c59695",
        "value": "netqiyun.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:10+00:00",
        "timestamp": "1777118530",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c7efb69-dc38-4237-9d0c-5ffe0430660c",
        "value": "nomadbecrs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:10+00:00",
        "timestamp": "1777118530",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8d73c88-3941-4ccc-92d7-a7dfa0f67b8c",
        "value": "norvanta.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:10+00:00",
        "timestamp": "1777118530",
        "to_ids": true,
        "type": "domain",
        "uuid": "c54accf4-ff1a-47f4-a4b4-c42b5fd44287",
        "value": "now-reserv-statusl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:10+00:00",
        "timestamp": "1777118531",
        "to_ids": true,
        "type": "domain",
        "uuid": "62b0360f-2960-4379-afbe-d7b889c8b783",
        "value": "ns.cynthiafernandes.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:11+00:00",
        "timestamp": "1777118531",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a400bb-f4b1-4d4a-b3e0-90554224d3dd",
        "value": "oletravelhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:11+00:00",
        "timestamp": "1777118531",
        "to_ids": true,
        "type": "domain",
        "uuid": "069dbe9a-926f-42e4-b611-88d1dffe91a4",
        "value": "one-step-reserve.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:11+00:00",
        "timestamp": "1777118531",
        "to_ids": true,
        "type": "domain",
        "uuid": "09992320-59a5-41c1-b6b7-12af85db9ff6",
        "value": "onlineroomreservations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:11+00:00",
        "timestamp": "1777118531",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c94c7d5-3a9f-4f6d-b34a-aa37a75474c5",
        "value": "openaccstd.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:11+00:00",
        "timestamp": "1777118531",
        "to_ids": true,
        "type": "domain",
        "uuid": "9db1e52b-b2f0-4bd5-bf03-100646b69798",
        "value": "opens-index.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:11+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "04243ab0-7400-4176-9cc2-b04bcad5f9c8",
        "value": "opentab-verifsinfos4719.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "e29f5e16-20d4-4b6c-a10a-f5f7e057579c",
        "value": "order-bedsg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "b41b5d99-78c0-45e5-9d7f-6dc12f16f730",
        "value": "order-check1n.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2a10db9-34c4-43ce-98cf-0b6cdbbff92a",
        "value": "order-reservat1on.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3e96838-01f1-4cd1-98ba-19152045f965",
        "value": "order-statusflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb3765ac-b198-4314-9fa4-c18e4ebd4b5b",
        "value": "orders-ro0ms.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118532",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e36c4df-d210-4f7b-b2aa-0a2a0d933f49",
        "value": "orderstep447-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:12+00:00",
        "timestamp": "1777118533",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef40d63f-610e-4739-a817-b48360ee9870",
        "value": "ouraring-card.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:13+00:00",
        "timestamp": "1777118533",
        "to_ids": true,
        "type": "domain",
        "uuid": "305801d3-a588-4f64-87fb-2383c01345de",
        "value": "ouraring-pay.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:13+00:00",
        "timestamp": "1777118533",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ea8c354-bd8f-412d-9013-2a97f7fa29ca",
        "value": "ourgueststay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:13+00:00",
        "timestamp": "1777118533",
        "to_ids": true,
        "type": "domain",
        "uuid": "20019ca4-2940-4f9b-a480-bdf4d38b5499",
        "value": "ozoarenaamsterdam.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:13+00:00",
        "timestamp": "1777118533",
        "to_ids": true,
        "type": "domain",
        "uuid": "d59b565c-6665-4875-b54e-e99d0c28e66c",
        "value": "p6.adkvw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:13+00:00",
        "timestamp": "1777118533",
        "to_ids": true,
        "type": "domain",
        "uuid": "792cf48e-cefc-4d87-882e-3ef72773cac2",
        "value": "pagehubinctayin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:13+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "aed60e1d-4884-4e3d-bdec-406e958ed97b",
        "value": "pages-infovisitconfirm1893.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:14+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "38ce5012-621e-43b0-b0c8-1638133a953a",
        "value": "pages-infovisitconfirm4389.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:14+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "876dcdc4-fdeb-4727-91a4-20b3981fe5a2",
        "value": "pagesinfo-verifid6719.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:14+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f558f41-e5b2-4c11-96e3-d1feaefa5f65",
        "value": "palm-housere.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:14+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e5a5f55-368d-4d7c-8bd7-a47e10b2283c",
        "value": "partclod.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:14+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "89ae03dd-1788-4d3e-b92a-a53d5e167acf",
        "value": "parthrrs-verf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:14+00:00",
        "timestamp": "1777118534",
        "to_ids": true,
        "type": "domain",
        "uuid": "192a70e7-a08f-443e-b5c3-69136e27c116",
        "value": "patron22.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118535",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7cd1581-4ae1-4853-883a-fe732cd387e2",
        "value": "patron23.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118535",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3332500-bb4f-4d6b-bc0d-5d68d84b1395",
        "value": "patron25.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118535",
        "to_ids": true,
        "type": "domain",
        "uuid": "fba6bd3d-766b-4c2e-97c8-7931b767bf77",
        "value": "patron27.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118535",
        "to_ids": true,
        "type": "domain",
        "uuid": "96abbb45-29ea-4fc7-846f-148f5bdd1227",
        "value": "patron28.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118535",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2a62ce3-a332-467c-a914-a7a56b35366e",
        "value": "patron29.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118535",
        "to_ids": true,
        "type": "domain",
        "uuid": "f90c5c06-382e-40ee-9eee-30172ccbba18",
        "value": "patron30.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:15+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ec4f191-f80e-465d-b686-610c59bf975a",
        "value": "patron31.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:16+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a6aaf05-e56e-4d53-a7fb-cb4aedb9a901",
        "value": "patron33.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:16+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eceb0f5-7d7c-4e8a-8c24-3a7f32e25e32",
        "value": "patron34.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:16+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e77467a-54dd-427d-8095-bcfe23afc73e",
        "value": "patron36.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:16+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbe57b1d-cf47-4f75-89f4-e5df4082f9cc",
        "value": "patron38.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:16+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "56ce9115-5c03-4082-b820-02fddf229802",
        "value": "patron40.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:16+00:00",
        "timestamp": "1777118536",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1c212fa-6403-45ec-9f7c-09dec4afb9e8",
        "value": "patron41.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118537",
        "to_ids": true,
        "type": "domain",
        "uuid": "e523f952-1688-4a1f-a040-e28f34e6eed1",
        "value": "patron43.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118537",
        "to_ids": true,
        "type": "domain",
        "uuid": "8681d525-bac2-4ba7-9c23-24d66d413668",
        "value": "patron44.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118537",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9a66217-dac8-4496-bb3c-593a3990b696",
        "value": "patron46.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118537",
        "to_ids": true,
        "type": "domain",
        "uuid": "d835d22e-858b-4981-ba90-566453682e88",
        "value": "patron48.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118537",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f297286-231e-4915-9cde-ee7de3987ebb",
        "value": "patron49.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118537",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a546c79-fdd2-4ee1-bd79-4288ef997457",
        "value": "patronfutbol20.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:17+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5c240a7-a074-4e30-909d-cc7d9bd9fe8a",
        "value": "patronfutbol21.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:18+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "fac25716-3c52-4e33-b6c3-25fdbee5ddb0",
        "value": "patronfutbol23.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:18+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "352ca22f-be82-44ba-9f54-fcb9afb4b0c5",
        "value": "patronfutbol24.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:18+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "439b330f-5fd6-471a-b4aa-72aa4dc3945b",
        "value": "patronfutbol25.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:18+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "b72418ce-f599-4309-bb93-0b06c505cdfa",
        "value": "patronfutbol26.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:18+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "a35a0c01-3f6b-43d0-9fba-07e671af4a46",
        "value": "patronfutbol27.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:18+00:00",
        "timestamp": "1777118538",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cb21146-6869-434a-970a-dd2f20a6febc",
        "value": "patronfutbol30.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118539",
        "to_ids": true,
        "type": "domain",
        "uuid": "345838aa-0191-4228-820b-865980e51a12",
        "value": "patronfutbol32.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118539",
        "to_ids": true,
        "type": "domain",
        "uuid": "962b8847-4b57-4a27-9a83-c72413f9b393",
        "value": "patronfutbol33.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118539",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4e9006e-4353-4e6d-b468-30202038f462",
        "value": "patronfutbol35.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118539",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec86bb87-1080-4a67-a913-c1464ba75776",
        "value": "patronfutbol37.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118539",
        "to_ids": true,
        "type": "domain",
        "uuid": "b115150c-a995-423a-8a0e-5acb9bcdc7be",
        "value": "patronfutbol38.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118539",
        "to_ids": true,
        "type": "domain",
        "uuid": "200be068-e7b6-4524-a535-9ed85740c436",
        "value": "patronfutbol40.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:19+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e29e325-afde-496d-8114-c2e3e2fd53eb",
        "value": "patrongol16.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:20+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "11a7df2c-e158-4b76-a7ff-c344e1b106b8",
        "value": "patrongol18.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:20+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdc0f538-6926-462d-874e-70bd34fb3aa9",
        "value": "patrongol23.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:20+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "769712da-8770-447e-8235-dc1d3c1f80c8",
        "value": "patrongol24.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:20+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c23380a-20f9-4437-a165-cb8f544eaca2",
        "value": "patrongol30.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:20+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6265238-62a3-45c7-8931-f7d59ca317cc",
        "value": "patrongol31.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:20+00:00",
        "timestamp": "1777118540",
        "to_ids": true,
        "type": "domain",
        "uuid": "233a4a39-7c12-43aa-9ba6-53e7af5e7434",
        "value": "patrongol32.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118541",
        "to_ids": true,
        "type": "domain",
        "uuid": "65a823fa-7917-42c2-8b15-ca02b39b8f1c",
        "value": "patrongol33.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118541",
        "to_ids": true,
        "type": "domain",
        "uuid": "05619adc-b2ea-4a2c-aa43-67899ac21a6c",
        "value": "patrongol34.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118541",
        "to_ids": true,
        "type": "domain",
        "uuid": "08acae4e-24a8-4122-9665-78602117adb8",
        "value": "patrongol36.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118541",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcfaa71c-0df1-49b6-b700-a98b9b0175e1",
        "value": "patrongol38.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118541",
        "to_ids": true,
        "type": "domain",
        "uuid": "387ac646-a324-4053-a54e-2cee3d6cb004",
        "value": "patrongol40.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118541",
        "to_ids": true,
        "type": "domain",
        "uuid": "9722ec5d-4a31-4ffd-9f7d-5ca5c59b16bf",
        "value": "patrongol41.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:21+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e7f6108-afba-4134-9997-3f67ddf0dc19",
        "value": "patrongol42.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:22+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "23cad0f4-08e1-4516-af66-26e62df52241",
        "value": "patrongol43.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:22+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "68e9e73f-c9e3-43b0-a9b0-cd830404dd4d",
        "value": "patrongol44.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:22+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "33c75c66-0fa7-4442-bfd8-4fbe935b2c12",
        "value": "patrongol45.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:22+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "a22f80c9-341d-4ab7-9088-7cda260c297d",
        "value": "patrongol47.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:22+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "85fede86-9b94-443c-a9e6-814e91061a49",
        "value": "patrongol48.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:22+00:00",
        "timestamp": "1777118542",
        "to_ids": true,
        "type": "domain",
        "uuid": "e542f11c-4e6a-43b8-85ed-c49d61ecc71d",
        "value": "patrongol49.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118543",
        "to_ids": true,
        "type": "domain",
        "uuid": "c79f27e4-eb73-4f98-a1a9-b5caeaa9429d",
        "value": "patronhd10.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118543",
        "to_ids": true,
        "type": "domain",
        "uuid": "4476be6a-643d-4940-95bd-dc6997acbae9",
        "value": "patronhd11.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118543",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5556fe2-9aab-4e3a-af52-fc6d561aec33",
        "value": "patronhd12.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118543",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce18e725-639b-4ce6-9030-ea7f0d542a65",
        "value": "patronhd16.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118543",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b02753a-9126-4725-b613-6144c305ef07",
        "value": "patronhd18.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118543",
        "to_ids": true,
        "type": "domain",
        "uuid": "d55dd0a6-5bd2-4164-bf20-58e438123a09",
        "value": "patronhd19.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:23+00:00",
        "timestamp": "1777118544",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5951c20-2c1b-4b1f-a5ec-8574e9496489",
        "value": "patronhd3.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:24+00:00",
        "timestamp": "1777118544",
        "to_ids": true,
        "type": "domain",
        "uuid": "50af2a23-a9de-4b16-a5d0-21e9b9e9abb8",
        "value": "patronhd4.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:24+00:00",
        "timestamp": "1777118544",
        "to_ids": true,
        "type": "domain",
        "uuid": "49068a61-e685-46ea-8613-e463ce020471",
        "value": "patronhd6.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:24+00:00",
        "timestamp": "1777118544",
        "to_ids": true,
        "type": "domain",
        "uuid": "68c1b739-4d71-4e9e-ac0b-f790615f89ca",
        "value": "patronhd7.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:24+00:00",
        "timestamp": "1777118544",
        "to_ids": true,
        "type": "domain",
        "uuid": "17cee7bd-8cd3-4f52-baea-4cbd77d7ba5c",
        "value": "patronizle41.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:24+00:00",
        "timestamp": "1777118544",
        "to_ids": true,
        "type": "domain",
        "uuid": "28cd53cf-f76d-41fd-9a2f-6c54d9c689f1",
        "value": "patronizle42.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:24+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "277a93be-5be1-4443-9e06-dbfa23096fb1",
        "value": "patronizle43.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "f983e90d-06e5-4d24-880f-84b0c44de540",
        "value": "patronizle45.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf62433c-8459-49b9-bb3e-4d79c7485522",
        "value": "patronizle47.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d0650fc-e9a4-49c8-9416-4abb69cfaaf9",
        "value": "patronizle49.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "69563edb-e158-4017-b2a4-16659cb6fae1",
        "value": "patronizle50.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b99a442-5320-43d7-a4d0-16dd09fa3b59",
        "value": "patronizle51.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118545",
        "to_ids": true,
        "type": "domain",
        "uuid": "185156d8-407a-4cbe-9eff-a993e8235174",
        "value": "patronizle52.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:25+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ce28087-c0e4-449b-9ff8-51cfac768e17",
        "value": "patronizle53.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:26+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "f435f3d5-c75c-4aa0-abf4-67766403734b",
        "value": "patronizle55.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:26+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fc58581-e619-45d0-b999-df651aa4c487",
        "value": "patronizle56.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:26+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "26785ca3-4263-4b81-b723-de08c2ab73e6",
        "value": "patronizle57.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:26+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2950a03-03ce-4bef-9829-07a92137cc5c",
        "value": "patronizle58.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:26+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "c01e31f8-e1df-41e8-9fd5-646501afeb05",
        "value": "patronizle59.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:26+00:00",
        "timestamp": "1777118546",
        "to_ids": true,
        "type": "domain",
        "uuid": "17cbc1c1-5ace-4ed4-a579-c045c133ab97",
        "value": "patronizle60.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118547",
        "to_ids": true,
        "type": "domain",
        "uuid": "d818481e-945a-413e-b89b-382e31f51883",
        "value": "patronlig1.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118547",
        "to_ids": true,
        "type": "domain",
        "uuid": "e79d5a19-0b33-4ae6-b2f4-9f60362d0a16",
        "value": "patronlig12.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118547",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a6ab412-4a72-44da-9d19-d5caafdee9aa",
        "value": "patronlig13.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118547",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbaf60cf-2626-4279-bec8-e4d91a6cda4e",
        "value": "patronlig14.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118547",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c8b0ae4-ccd0-4fed-90bb-b3458e452444",
        "value": "patronlig16.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118547",
        "to_ids": true,
        "type": "domain",
        "uuid": "a058a99f-2467-40ee-a8ad-e85b245b015a",
        "value": "patronlig18.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:27+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "287008f3-1777-4ea5-88be-2f69861468a0",
        "value": "patronlig2.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:28+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e1f7caf-ba96-4624-9c6b-89cdfa429021",
        "value": "patronlig20.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:28+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb5de52-d820-4ffc-85b1-256e7c9bc3f4",
        "value": "patronlig3.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:28+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2128d53-0131-4ecd-bf7a-97a5fdf098ad",
        "value": "patronlig4.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:28+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f884bde-cb6b-4153-b610-5cac911dfc36",
        "value": "patronlig7.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:28+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "72443d5d-c2b4-454a-ab45-b93df083f5a5",
        "value": "patronlig8.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:28+00:00",
        "timestamp": "1777118548",
        "to_ids": true,
        "type": "domain",
        "uuid": "52866bbe-f7d6-4908-89ed-9200425b3e9f",
        "value": "patronlig9.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118549",
        "to_ids": true,
        "type": "domain",
        "uuid": "73e1f60f-e3ab-4152-b1a8-b97486b98d01",
        "value": "patronlive17.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118549",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac1fceab-ea31-4a25-bee6-34e7c05ef5a9",
        "value": "patronlive20.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118549",
        "to_ids": true,
        "type": "domain",
        "uuid": "0839f304-16b4-48b4-ba1c-c399b670f2cc",
        "value": "patronlive21.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118549",
        "to_ids": true,
        "type": "domain",
        "uuid": "743ab412-b76e-45e4-9fd0-95a349d60b23",
        "value": "patronlive22.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118549",
        "to_ids": true,
        "type": "domain",
        "uuid": "358110c6-9e2a-4fb9-9023-5892254f3c98",
        "value": "patronlive23.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118549",
        "to_ids": true,
        "type": "domain",
        "uuid": "0af12285-d458-48f2-9eb1-c4472d9bf24a",
        "value": "patronlive26.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:29+00:00",
        "timestamp": "1777118550",
        "to_ids": true,
        "type": "domain",
        "uuid": "1038ffeb-5ba3-4f4e-a156-c35eb7ce52c7",
        "value": "patronlive27.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:30+00:00",
        "timestamp": "1777118550",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cdb8c7d-220b-439e-9557-50cebb8ea371",
        "value": "patronlive29.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:30+00:00",
        "timestamp": "1777118550",
        "to_ids": true,
        "type": "domain",
        "uuid": "d881b573-7b54-4f49-9daa-9b7df5211cc9",
        "value": "patronlive32.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:30+00:00",
        "timestamp": "1777118550",
        "to_ids": true,
        "type": "domain",
        "uuid": "d35e3b2d-95c3-4365-861d-cb42075eb62f",
        "value": "patronlive34.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:30+00:00",
        "timestamp": "1777118550",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaba8671-e9b8-43a7-957e-33a361411a45",
        "value": "patronlive36.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:30+00:00",
        "timestamp": "1777118550",
        "to_ids": true,
        "type": "domain",
        "uuid": "f18523ef-ba33-4bb8-a9be-04033db5d0dd",
        "value": "patronlive38.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:30+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bcbf79b-4ff8-4c4b-a318-bab8696088a0",
        "value": "patronlive40.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:31+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "866a4c91-c20c-49a6-8d69-caa4821815dc",
        "value": "patronmac100.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:31+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e15e20a-be1a-4339-aafa-3ead9408247a",
        "value": "patronmac71.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:31+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "19189043-89d4-40e3-b2b6-5af1cd6eb586",
        "value": "patronmac72.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:31+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "c89df9f0-5ee7-428e-bec1-195d5919c79e",
        "value": "patronmac73.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:31+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "1286e384-0141-4d9e-9b87-dc022f7e2da9",
        "value": "patronmac74.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:31+00:00",
        "timestamp": "1777118551",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f888ac5-fb9b-4fd2-9476-b91da2f60c05",
        "value": "patronmac75.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118552",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e673a7-989a-42d8-a878-a478c9fd3f04",
        "value": "patronmac76.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118552",
        "to_ids": true,
        "type": "domain",
        "uuid": "67f85616-bdc9-4f01-b07a-a1beaaad9365",
        "value": "patronmac78.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118552",
        "to_ids": true,
        "type": "domain",
        "uuid": "a57f1e43-048e-4a1f-8fa7-a6615b1c3c1c",
        "value": "patronmac79.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118552",
        "to_ids": true,
        "type": "domain",
        "uuid": "358ba106-810c-44f0-82b8-650db090abb5",
        "value": "patronmac80.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118552",
        "to_ids": true,
        "type": "domain",
        "uuid": "47dcacbc-3cf8-481e-8364-8bb7a65171f0",
        "value": "patronmac81.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118552",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fd5b88b-36cc-4bdd-ab50-9b48b7839d59",
        "value": "patronmac83.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:32+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "64948923-0a39-4358-bc7e-7a90b154d196",
        "value": "patronmac86.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:33+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7660095-5b52-4f2d-bcaa-64d010430df8",
        "value": "patronmac89.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:33+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "4163e000-1cbc-4a89-8169-239687107f8e",
        "value": "patronmac90.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:33+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "288944e4-67aa-4b28-87f9-4227f03a57d0",
        "value": "patronmac91.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:33+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "81e1e546-fe50-454f-8fb8-7d587cad0dfe",
        "value": "patronmac93.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:33+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff36dd16-bcf7-4200-93a9-f95c892577c9",
        "value": "patronmac95.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:33+00:00",
        "timestamp": "1777118553",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dff7aae-ad11-4980-92ee-4443fce14f74",
        "value": "patronmac96.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118554",
        "to_ids": true,
        "type": "domain",
        "uuid": "7500430a-01a1-48e6-8a0b-d38dd2460754",
        "value": "patronmac97.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118554",
        "to_ids": true,
        "type": "domain",
        "uuid": "56fab237-223e-4cb8-986c-655bb7748be7",
        "value": "patronspor0252art262dsvwes.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118554",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6af2cd8-01a0-47b6-8ea9-d6c423e1c592",
        "value": "patrontv53.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118554",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae751b9d-fcfc-4ea5-9688-3532c9c08a79",
        "value": "patrontv54.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118554",
        "to_ids": true,
        "type": "domain",
        "uuid": "24517890-35c8-41ee-8c33-3507faf8fee2",
        "value": "patrontv55.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118554",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c885bad-6ee4-40c9-bc97-9b48df64fdc4",
        "value": "patrontv57.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:34+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "b93a55f5-702f-488b-aedb-039c9ece0d39",
        "value": "patrontv59.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:35+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd4d5614-076c-42a5-9940-28c411d4b2a9",
        "value": "patrontv60.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:35+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "c221d0f7-fdbf-4f4c-9661-520ebadf6e45",
        "value": "patronvip14.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:35+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "10224310-953c-46b9-a9b2-665630d734a4",
        "value": "patronvip20.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:35+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b64b14-3349-44ef-9f4f-e921c08e4c9a",
        "value": "patronvip21.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:35+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "2762c3b2-0ce3-40d5-bbce-8f944f95c59d",
        "value": "patronvip24.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:35+00:00",
        "timestamp": "1777118555",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5ce0985-ebcc-4744-9939-d7b0855ab1b8",
        "value": "patronvip30.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118556",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed4aa55b-5892-477d-ab26-3a92e35f9af2",
        "value": "patronyayin19.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118556",
        "to_ids": true,
        "type": "domain",
        "uuid": "491c3a7d-20eb-4ef2-8622-59b604932332",
        "value": "patronyayin21.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118556",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b4e8bc7-88d0-4446-9d40-c47f2abe87cd",
        "value": "patronyayin22.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118556",
        "to_ids": true,
        "type": "domain",
        "uuid": "88dd8661-724b-44c3-b4cb-5d3d5e990035",
        "value": "patronyayin23.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118556",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bd07d5e-9dfa-48ae-b68c-457fa61806a0",
        "value": "patronyayin25.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118556",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3752903-bae0-4afc-ac0c-6a332fe32264",
        "value": "patronyayin26.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:36+00:00",
        "timestamp": "1777118557",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec64d8a0-bbed-4155-aa04-1b6f030c2c64",
        "value": "patronyayin27.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:37+00:00",
        "timestamp": "1777118557",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbd0fed6-c6ad-4695-9450-5cf55d767cd7",
        "value": "patronyayin28.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:37+00:00",
        "timestamp": "1777118557",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef476c61-e4cb-4418-8bc6-764aaf503721",
        "value": "patronyayin29.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:37+00:00",
        "timestamp": "1777118557",
        "to_ids": true,
        "type": "domain",
        "uuid": "d90c9ff2-6c76-4210-a36a-2bdb4e371640",
        "value": "patronyayin30.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:37+00:00",
        "timestamp": "1777118557",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7dbdcd2-b0d5-46a1-8d97-9d171dbc905c",
        "value": "pay2paymapi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:37+00:00",
        "timestamp": "1777118557",
        "to_ids": true,
        "type": "domain",
        "uuid": "da1d4ed0-9d58-4088-8c9d-09b10161da0b",
        "value": "paybokres-mystay012.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:37+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6ff9dfb-d8f1-4ae1-b47f-957ceaefc7fb",
        "value": "payment-card.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4af3c5a-fdd0-48bb-8da5-12cc17e15bb9",
        "value": "payment-reservation6222.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2815ea0-b5e5-4ae3-8459-29adcc2d80f1",
        "value": "payment-reservation6482.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4ef9d78-c5eb-4d4b-b039-3fb365b3f594",
        "value": "payment-verification-id6388.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f1e4273-46bf-4d23-99dc-043a10e785b1",
        "value": "payment-vignetten.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4dff83d-2079-409a-b0f5-cff2e39a5716",
        "value": "paymntaprvschks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118558",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2f5c106-d948-4d50-88e0-46b5554a1afe",
        "value": "payprotect437183.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:38+00:00",
        "timestamp": "1777118559",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a25026c-bc70-46bb-85e8-ab96002f910b",
        "value": "payprotect527384.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:39+00:00",
        "timestamp": "1777118559",
        "to_ids": true,
        "type": "domain",
        "uuid": "1382f856-5f81-4407-83dc-8a945bf304ac",
        "value": "payprotect637283.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:39+00:00",
        "timestamp": "1777118559",
        "to_ids": true,
        "type": "domain",
        "uuid": "a26c8d2c-6219-45a7-929a-59a9021e1ca1",
        "value": "payprotect728438.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:39+00:00",
        "timestamp": "1777118559",
        "to_ids": true,
        "type": "domain",
        "uuid": "49c664d6-a3c4-4f6e-b801-52842af3850b",
        "value": "paysout-gate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:39+00:00",
        "timestamp": "1777118559",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddb5c524-9712-493f-867f-64387227f884",
        "value": "paysreserve-check.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:39+00:00",
        "timestamp": "1777118559",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b365f41-7fae-428e-8f32-ddfcb088ce0e",
        "value": "pemountain.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:39+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d04704f-613f-4817-b89c-51ca0c4f4a8a",
        "value": "pendin-guestcheck329492.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "132e8d48-b045-4792-b9c6-437c7c2729d8",
        "value": "pending-bwh02.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5b4118a-fd49-49e9-a5e7-4ee448b7bd25",
        "value": "pending-bwh03.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "40f2ed5e-f978-4078-859e-788b3a5ac3d1",
        "value": "pending-bwh04.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e75bfdc-1e39-43ee-993b-743392da7243",
        "value": "pending-bwh06.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "724f7f29-6a7f-4681-a3c2-35acd44f4b1d",
        "value": "pending-guest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118560",
        "to_ids": true,
        "type": "domain",
        "uuid": "dca4c6c9-4e5b-47c9-b8e2-e265d6940a0f",
        "value": "pending-stayguest93249.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:40+00:00",
        "timestamp": "1777118561",
        "to_ids": true,
        "type": "domain",
        "uuid": "2df89d86-bfb4-4dce-a534-0baf022f8c12",
        "value": "pendprove93249.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:41+00:00",
        "timestamp": "1777118561",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aaaad3d-41cc-4d69-b0c4-b258ca3561e8",
        "value": "pendstayin32949.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:41+00:00",
        "timestamp": "1777118561",
        "to_ids": true,
        "type": "domain",
        "uuid": "33f82813-af1b-4228-80f5-1549fdfe32e4",
        "value": "pendstayin329493.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:41+00:00",
        "timestamp": "1777118561",
        "to_ids": true,
        "type": "domain",
        "uuid": "a40b7e26-f4af-4f92-ba2c-0c4efa4e43f6",
        "value": "perdelik.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:41+00:00",
        "timestamp": "1777118561",
        "to_ids": true,
        "type": "domain",
        "uuid": "5564c8a5-03b3-419c-8f2a-ee5bdd5be298",
        "value": "pgegubitlstayin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:41+00:00",
        "timestamp": "1777118561",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc58e108-f3d1-46be-8d85-797b74ad6896",
        "value": "plaid-exped.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:41+00:00",
        "timestamp": "1777118562",
        "to_ids": true,
        "type": "domain",
        "uuid": "292654eb-2c8c-4696-9979-d95b71cbe151",
        "value": "play-your-own-thing.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:42+00:00",
        "timestamp": "1777118562",
        "to_ids": true,
        "type": "domain",
        "uuid": "5071fecc-5111-4819-a049-ed37b86221cd",
        "value": "pointflow884-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:42+00:00",
        "timestamp": "1777118562",
        "to_ids": true,
        "type": "domain",
        "uuid": "33177969-06f3-4433-a537-b8aa3d1d7f56",
        "value": "pointstep684-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:42+00:00",
        "timestamp": "1777118562",
        "to_ids": true,
        "type": "domain",
        "uuid": "05cafccb-2d4b-4aa9-99e1-81df207637b4",
        "value": "polyanalytik.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:42+00:00",
        "timestamp": "1777118562",
        "to_ids": true,
        "type": "domain",
        "uuid": "79e50d3f-7e06-41f5-9743-65fec5ca417d",
        "value": "portal-dasfinancas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:42+00:00",
        "timestamp": "1777118562",
        "to_ids": true,
        "type": "domain",
        "uuid": "47efcf37-33b2-49f5-8968-035e6ee8abcf",
        "value": "portalunit705-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:42+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "98053145-0930-496f-b765-34626a576c97",
        "value": "postfamilyresort-infoguestpay2.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e79a1be-00e2-4327-ba07-e34b621cf8b2",
        "value": "pprovestyin-986430.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "35b86202-a39e-42ff-bb35-c1214a59ff62",
        "value": "pre-registation-booking21331342.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "5620565e-2b68-4989-8c27-311dda1dcd3e",
        "value": "pre-registation-booking265.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "84964848-fb82-4179-8a7e-34a95edb3188",
        "value": "pre-registation-booking493182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "47f04ccf-856c-4049-9e7e-5a7122d7876d",
        "value": "pre-registation-booking6153.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118563",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba0aff0f-7f49-4d8d-8e1e-b759b8ba5ad5",
        "value": "pre-registation-booking61794.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:43+00:00",
        "timestamp": "1777118564",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b4bee5-916f-4cb1-aba6-03fb13d0f7c2",
        "value": "pre-registation-booking627.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:44+00:00",
        "timestamp": "1777118564",
        "to_ids": true,
        "type": "domain",
        "uuid": "86e09bf7-f470-4206-97b5-60f8d35f737e",
        "value": "pre-registation-expedia26331362.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:44+00:00",
        "timestamp": "1777118564",
        "to_ids": true,
        "type": "domain",
        "uuid": "b19948cc-a110-42da-84fe-1a82b9958c83",
        "value": "pre-registation-expedia291842.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:44+00:00",
        "timestamp": "1777118564",
        "to_ids": true,
        "type": "domain",
        "uuid": "edb163b1-5895-4ede-a747-29c9d56ad392",
        "value": "pre-registation-expedia291882.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:44+00:00",
        "timestamp": "1777118564",
        "to_ids": true,
        "type": "domain",
        "uuid": "f08cc227-441c-493f-9176-2eb14b21387e",
        "value": "pre-registation-expedia293882.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:44+00:00",
        "timestamp": "1777118564",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a669cf9-bd18-4d1b-a3a8-dfe653eb1be0",
        "value": "pre-registation-expedia7493182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:44+00:00",
        "timestamp": "1777118565",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c5172fe-ea15-4b62-8612-92b58b62b385",
        "value": "pre-registation-expedia9593182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:45+00:00",
        "timestamp": "1777118565",
        "to_ids": true,
        "type": "domain",
        "uuid": "7eaf2667-98dc-4901-b384-97ea55cd7361",
        "value": "pre-registation-hotel4593182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:45+00:00",
        "timestamp": "1777118565",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8fe3630-2731-4b9a-8335-0858462343e9",
        "value": "pre-registation-hotel4693182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:45+00:00",
        "timestamp": "1777118565",
        "to_ids": true,
        "type": "domain",
        "uuid": "577154cc-433c-4333-a6af-29c4f82479f3",
        "value": "pre-registration13429.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:45+00:00",
        "timestamp": "1777118565",
        "to_ids": true,
        "type": "domain",
        "uuid": "61ab692c-0b19-4001-a35a-53b00ae478f4",
        "value": "pre-registration17429.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:45+00:00",
        "timestamp": "1777118565",
        "to_ids": true,
        "type": "domain",
        "uuid": "72676307-b980-43e3-a3e7-72bc4711ba14",
        "value": "pre-registration18421.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:45+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "33286ae9-1061-4240-9fb7-b7bc48def539",
        "value": "pre-registration19921.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "421d4cda-86aa-41b2-8f18-ce738bae256e",
        "value": "pre-registration23429.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa30eed8-4dca-44ef-8eca-80ef109f8d8a",
        "value": "pre-registration28301.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "799fdd5d-c70c-4e6d-8b9e-3b32479cd356",
        "value": "pre-registration28311.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "eafeaab5-44d1-48d5-ac53-480a53ea6dc3",
        "value": "pre-registration29501.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d11ab9c-b032-4919-8bd9-642423fe37ad",
        "value": "pre-registration31952.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118566",
        "to_ids": true,
        "type": "domain",
        "uuid": "a29fcd1f-53b3-46f6-b0cf-d755af3af0d0",
        "value": "pre-registration49196.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:46+00:00",
        "timestamp": "1777118567",
        "to_ids": true,
        "type": "domain",
        "uuid": "a91e1732-097e-41b9-827d-071fda69a23c",
        "value": "pre-registration52834.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:47+00:00",
        "timestamp": "1777118567",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5d1d7ac-b5fd-4159-911c-14761eda63a6",
        "value": "pre-registration59834.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:47+00:00",
        "timestamp": "1777118567",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e53ab71-ee95-4bd7-b3a3-c26e3b20e5f7",
        "value": "pre-registration64182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:47+00:00",
        "timestamp": "1777118567",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff829adf-de99-428b-a159-c5ae29868c45",
        "value": "pre-registration67183.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:47+00:00",
        "timestamp": "1777118567",
        "to_ids": true,
        "type": "domain",
        "uuid": "2336c887-68ac-4e7e-9005-b5317fbf46d4",
        "value": "pre-registration71912.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:47+00:00",
        "timestamp": "1777118567",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f9b56e7-4e5c-4ba7-a7cd-9fd721f77ef9",
        "value": "pre-registration74941.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:47+00:00",
        "timestamp": "1777118568",
        "to_ids": true,
        "type": "domain",
        "uuid": "ece8a154-7c0d-4838-84de-e24ceb15acdb",
        "value": "pre-registration77834.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:48+00:00",
        "timestamp": "1777118568",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6c2641b-5b65-4102-8650-aaf163c1a4bd",
        "value": "pre-registration83819.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:48+00:00",
        "timestamp": "1777118568",
        "to_ids": true,
        "type": "domain",
        "uuid": "c38d4812-e745-47f4-a65c-ca21c344821e",
        "value": "pre-registration83919.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:48+00:00",
        "timestamp": "1777118568",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa1e4d20-e037-495e-b332-4ce4b9e25868",
        "value": "pre-registration92810.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:48+00:00",
        "timestamp": "1777118568",
        "to_ids": true,
        "type": "domain",
        "uuid": "83d4cf09-af7e-418f-af4c-43b3550235b6",
        "value": "pre-registration93671.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:48+00:00",
        "timestamp": "1777118568",
        "to_ids": true,
        "type": "domain",
        "uuid": "47816d53-a58b-45c2-af19-064fa18ef35c",
        "value": "pre-registration99501.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:48+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "51d7328a-5b52-4f7a-a3db-d82b03873301",
        "value": "prearivalchekin-guest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a20e70-210f-4bc7-ac09-6c480fd9b379",
        "value": "predicts.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "815ea9ad-4bd3-435c-ac3e-708b32ae4836",
        "value": "premier-stay-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f36786a-5bce-4e09-ba43-da656bae7217",
        "value": "preregistration12421.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "799f8989-853b-408f-bdde-4bb59dbf3651",
        "value": "presonalstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5b6c03a-a44c-4a93-b73b-7ebd514eff6a",
        "value": "process-reserve-id.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118569",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8eb601e-8559-433a-9129-301b3ffd2baa",
        "value": "promotions.nationalrail.co.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:49+00:00",
        "timestamp": "1777118570",
        "to_ids": true,
        "type": "domain",
        "uuid": "58a84d84-d3a0-4a23-8fb3-b95321b08ec5",
        "value": "property-checking-reserv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:50+00:00",
        "timestamp": "1777118570",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee8b12d3-d102-43d6-a0df-418ce9e49fe6",
        "value": "property-house5.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:50+00:00",
        "timestamp": "1777118570",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcdff5f6-30dc-4ab9-b4b6-aa5619957453",
        "value": "property-reservation-confirm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:50+00:00",
        "timestamp": "1777118570",
        "to_ids": true,
        "type": "domain",
        "uuid": "d45be735-4141-4dd3-8baf-7be18f95a516",
        "value": "property-reservation-update.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:50+00:00",
        "timestamp": "1777118570",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae8a0f89-f619-4105-9b5d-78cccdf79b48",
        "value": "property-stay-confirmation.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:50+00:00",
        "timestamp": "1777118570",
        "to_ids": true,
        "type": "domain",
        "uuid": "82f52b77-6d29-4598-9754-a970c25ac244",
        "value": "quartimo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:50+00:00",
        "timestamp": "1777118571",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b535ac7-3edb-46a0-810b-ad5f48f8d0a1",
        "value": "quick-hotel-entry.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:51+00:00",
        "timestamp": "1777118571",
        "to_ids": true,
        "type": "domain",
        "uuid": "32a08adf-69aa-4962-a007-2709231e88ea",
        "value": "quickverify72-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:51+00:00",
        "timestamp": "1777118571",
        "to_ids": true,
        "type": "domain",
        "uuid": "45a727ac-d27e-4293-9f67-a8a6938b1b64",
        "value": "r.altercpa.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:51+00:00",
        "timestamp": "1777118571",
        "to_ids": true,
        "type": "domain",
        "uuid": "1020ad1f-e424-4b47-b59b-160a835e6858",
        "value": "r.websunrise.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:51+00:00",
        "timestamp": "1777118571",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ae456d9-dad0-49be-a920-60c7f3fcce19",
        "value": "r0mms-order.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:51+00:00",
        "timestamp": "1777118571",
        "to_ids": true,
        "type": "domain",
        "uuid": "58ccd941-4ff6-44a1-8842-7a2de80fe44b",
        "value": "r4.confirmation-id43345.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:51+00:00",
        "timestamp": "1777118572",
        "to_ids": true,
        "type": "domain",
        "uuid": "52247987-7eb7-4880-a858-e5b7f8cf9328",
        "value": "readyguesthub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:52+00:00",
        "timestamp": "1777118572",
        "to_ids": true,
        "type": "domain",
        "uuid": "769316e1-4e3e-4e4f-af45-ee31dd2f54c8",
        "value": "reconfguests-infovisits.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:52+00:00",
        "timestamp": "1777118572",
        "to_ids": true,
        "type": "domain",
        "uuid": "704e94f4-e397-4dc5-ad8c-cbab4a65ed02",
        "value": "repetition-cloud.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:52+00:00",
        "timestamp": "1777118572",
        "to_ids": true,
        "type": "domain",
        "uuid": "8db6e9ab-09c8-4e66-93f8-c5f4f8fc764f",
        "value": "repuorvf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:52+00:00",
        "timestamp": "1777118572",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d199bc5-b992-4022-8d69-b6090075093e",
        "value": "reqies-romser.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:52+00:00",
        "timestamp": "1777118572",
        "to_ids": true,
        "type": "domain",
        "uuid": "239f0517-5cc1-4fb6-8f02-14d8875dd03d",
        "value": "request-verification.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:52+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "e21e22a0-dcc1-4936-8ff5-8b8f3f7bfe23",
        "value": "reseravtion-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "715ed438-3c19-4114-bd13-132dd4686f36",
        "value": "reserrvation-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e51b304-bcad-4c93-bcab-80f6dd4cd381",
        "value": "reserstatcheck.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "070a932b-9616-4f2b-91a6-8abc0243e089",
        "value": "reservarecep-checkconfirm3.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "714bfc93-6b4f-4955-9872-10e024229407",
        "value": "reservashionstatusnowchecks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "3aeefde6-9a9c-434b-a67b-30bc7f53d1ae",
        "value": "reservat1on-guest-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118573",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad5054fb-9765-4a98-907e-36322d30993a",
        "value": "reservati0on-flow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:53+00:00",
        "timestamp": "1777118574",
        "to_ids": true,
        "type": "domain",
        "uuid": "7146b756-433b-42e8-8702-ed34bfb450c1",
        "value": "reservation-confirm.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:54+00:00",
        "timestamp": "1777118574",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bbe081c-8100-4e14-bd20-bcd7eb1cac56",
        "value": "reservation-help-today.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:54+00:00",
        "timestamp": "1777118574",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3888513-0f48-4fea-8d36-de3d8e48444d",
        "value": "reservation-id4771290.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:54+00:00",
        "timestamp": "1777118574",
        "to_ids": true,
        "type": "domain",
        "uuid": "f23dc11a-9ce6-4cae-a713-d41c63e0b219",
        "value": "reservation-id480923.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:54+00:00",
        "timestamp": "1777118574",
        "to_ids": true,
        "type": "domain",
        "uuid": "1452362a-71a6-455a-9b2e-d43ed2b76947",
        "value": "reservation-id5127710.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:54+00:00",
        "timestamp": "1777118574",
        "to_ids": true,
        "type": "domain",
        "uuid": "158ac28a-1b41-406c-97cc-e0b3bf45456e",
        "value": "reservation-id692018.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:54+00:00",
        "timestamp": "1777118575",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6420ee5-e220-47ba-b785-b67c7e1f1d26",
        "value": "reservation-id7124920.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:55+00:00",
        "timestamp": "1777118575",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f5d5195-7778-4c51-bff0-bb97efa672cd",
        "value": "reservation-id984182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:55+00:00",
        "timestamp": "1777118575",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6a1ad78-3052-4d88-9745-4dd0f4400f4d",
        "value": "reservation-id995046.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:55+00:00",
        "timestamp": "1777118575",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ea86b38-ae05-4096-b360-212967987bc9",
        "value": "reservation-pay-id59645709.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:55+00:00",
        "timestamp": "1777118575",
        "to_ids": true,
        "type": "domain",
        "uuid": "85b2b9c5-b64a-45da-966c-5301db6ae011",
        "value": "reservation-pay-id59691709.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:55+00:00",
        "timestamp": "1777118575",
        "to_ids": true,
        "type": "domain",
        "uuid": "52b17336-52cf-4afa-86a8-305f6e0d77fc",
        "value": "reservation-portal-easy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:55+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "f432ae6f-6e34-41e9-9c6d-8a3bef655cde",
        "value": "reservation-stone-hotels.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "e09149d9-fd6c-4e51-a0b1-e67026e6726f",
        "value": "reservationmanager-id284913.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "c34663c0-2fcd-42dd-b3b9-3c43b2258339",
        "value": "reservationsidroma.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "458cf6b7-47a1-40ae-9a4f-0536fb451f7d",
        "value": "reserve-arrival-eur.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae424569-fe68-40fd-a5ee-2a0ce65427af",
        "value": "reserve-cloude.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "760b0100-b89d-418c-b103-73e7a944adfa",
        "value": "reserve-domen.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118576",
        "to_ids": true,
        "type": "domain",
        "uuid": "c94bb220-3b6a-4961-9efc-32fc787f3343",
        "value": "reservstataprovalcheck.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:56+00:00",
        "timestamp": "1777118577",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4c4c021-f144-4556-9469-a01b31004e8c",
        "value": "reservt-urgently.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:57+00:00",
        "timestamp": "1777118577",
        "to_ids": true,
        "type": "domain",
        "uuid": "f12787b4-a6b9-401d-a8b4-530ad10c5f1a",
        "value": "resorstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:57+00:00",
        "timestamp": "1777118577",
        "to_ids": true,
        "type": "domain",
        "uuid": "781efef1-8ecd-4803-afca-54b3687fa5c9",
        "value": "resorvfinderstatus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:57+00:00",
        "timestamp": "1777118577",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b868244-58ee-4bdb-95dc-eb6ab7241288",
        "value": "restelstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:57+00:00",
        "timestamp": "1777118577",
        "to_ids": true,
        "type": "domain",
        "uuid": "d410e037-9abd-4a54-b92b-d1efdd4ce5af",
        "value": "rewad-biance.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:57+00:00",
        "timestamp": "1777118577",
        "to_ids": true,
        "type": "domain",
        "uuid": "62eb4d98-8318-4acd-af35-a05c8a8ef85e",
        "value": "risquechicks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:57+00:00",
        "timestamp": "1777118578",
        "to_ids": true,
        "type": "domain",
        "uuid": "018b99e2-9f5c-4b16-b1cc-0147d775a007",
        "value": "rloeyecr.4snowplowing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:58+00:00",
        "timestamp": "1777118578",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcca5f35-7c43-4c34-9160-0ab5a122740b",
        "value": "rms-pendin394845.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:58+00:00",
        "timestamp": "1777118578",
        "to_ids": true,
        "type": "domain",
        "uuid": "22662ec4-ed9c-4f8c-96d2-a4cf8d8119b1",
        "value": "romecolosseum2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:58+00:00",
        "timestamp": "1777118578",
        "to_ids": true,
        "type": "domain",
        "uuid": "713b8b2d-8af1-4608-a96c-38f4cda6376f",
        "value": "romsarrivall.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:58+00:00",
        "timestamp": "1777118578",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e40321e-be88-4b18-b0c5-120614a0e7ce",
        "value": "romsdestay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:58+00:00",
        "timestamp": "1777118578",
        "to_ids": true,
        "type": "domain",
        "uuid": "aafa22b5-f755-46c5-930b-8a8587972750",
        "value": "room-direct-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:58+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "bef5feb5-39a4-40d1-aa39-977f35ded13b",
        "value": "room-entry-hubb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "517398fd-d03f-4c4a-b8de-dab236915877",
        "value": "room-key-digital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "60a9a390-1c88-4836-b44e-57b7ede6c87b",
        "value": "room-pendin0934.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "e257119a-265d-4249-ac09-a54d4f289395",
        "value": "roomquickentryy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1d6ea45-e460-40e0-b77f-990979f3e9f9",
        "value": "roomsgoinghum.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5c7503b-756e-477d-b725-74074b31dba7",
        "value": "router.schaarschmidt.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118579",
        "to_ids": true,
        "type": "domain",
        "uuid": "69b9e677-9855-419f-b24d-b037a957e970",
        "value": "rv.guest-hotelverif-br.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:02:59+00:00",
        "timestamp": "1777118580",
        "to_ids": true,
        "type": "domain",
        "uuid": "e91a06ca-3452-4665-bae1-f8552c47e811",
        "value": "rxgkhvel.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:00+00:00",
        "timestamp": "1777118580",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4371c5d-0192-44d0-8037-67bf46f23462",
        "value": "sa-tdform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:00+00:00",
        "timestamp": "1777118580",
        "to_ids": true,
        "type": "domain",
        "uuid": "76564e66-5975-4180-ba69-8093ac0a7998",
        "value": "sadfsdfdsf.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:00+00:00",
        "timestamp": "1777118580",
        "to_ids": true,
        "type": "domain",
        "uuid": "a980324d-7857-4761-9fc9-e89796cde9e0",
        "value": "safeid911-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:00+00:00",
        "timestamp": "1777118580",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dee9f2c-8b54-459f-9434-858e3dcdaaf5",
        "value": "safetynode846-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:00+00:00",
        "timestamp": "1777118580",
        "to_ids": true,
        "type": "domain",
        "uuid": "190bb879-6454-473b-a7c4-681752e7e848",
        "value": "safeunit054-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:01+00:00",
        "timestamp": "1777118581",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c23469a-0e2d-46c4-b8a8-b3edc1e29b05",
        "value": "safeunit394-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:01+00:00",
        "timestamp": "1777118581",
        "to_ids": true,
        "type": "domain",
        "uuid": "706dd596-3f3b-416d-8743-a0a8e8128fb5",
        "value": "safeunit619-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:01+00:00",
        "timestamp": "1777118581",
        "to_ids": true,
        "type": "domain",
        "uuid": "b72a5ada-5108-43c8-be71-b4d715e23d48",
        "value": "safeunit749-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:01+00:00",
        "timestamp": "1777118581",
        "to_ids": true,
        "type": "domain",
        "uuid": "13124837-a9b0-4f1e-994b-0a56d95afac8",
        "value": "safeunit781-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:01+00:00",
        "timestamp": "1777118581",
        "to_ids": true,
        "type": "domain",
        "uuid": "d97f5357-3e01-4954-80d3-b104238a95f9",
        "value": "safeunit905-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:01+00:00",
        "timestamp": "1777118581",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0bf2a46-c832-499b-b150-44ca1faa8d99",
        "value": "safeunit925-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118582",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0f997e6-0515-492c-83db-ef950f68f61e",
        "value": "safeunit952-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118582",
        "to_ids": true,
        "type": "domain",
        "uuid": "2917d283-d5dd-4b47-9084-dd1622684514",
        "value": "safeunit991-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118582",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec1499c9-76b8-4174-a7a6-44eb2a4951c0",
        "value": "sant-ebansker.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118582",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6251930-5c76-4982-ac05-38debbba81e0",
        "value": "sarohus-guests.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118582",
        "to_ids": true,
        "type": "domain",
        "uuid": "8345cb62-2794-4552-b429-e76d110318d4",
        "value": "schaarschmidt.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118582",
        "to_ids": true,
        "type": "domain",
        "uuid": "febf621f-3c15-47ef-98ef-782277113ac1",
        "value": "sdlkfm2lsfdfdf.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:02+00:00",
        "timestamp": "1777118583",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1eae9bb-b206-4ecc-a040-e29655cfde34",
        "value": "se.reservationsidroma.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:03+00:00",
        "timestamp": "1777118583",
        "to_ids": true,
        "type": "domain",
        "uuid": "c61e69b4-f2ed-4e8d-81ee-664de0c1bcba",
        "value": "secur-hotel-guestt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:03+00:00",
        "timestamp": "1777118583",
        "to_ids": true,
        "type": "domain",
        "uuid": "647f52d5-8c65-42d8-a865-91e085cc95e9",
        "value": "securegate883-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:03+00:00",
        "timestamp": "1777118583",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f69470f-267c-458c-8aa3-f91fba5935d0",
        "value": "secustays.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:03+00:00",
        "timestamp": "1777118583",
        "to_ids": true,
        "type": "domain",
        "uuid": "d35ad97c-b2a9-41d4-9b03-1ebe93fc2176",
        "value": "sessionhold810-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:03+00:00",
        "timestamp": "1777118583",
        "to_ids": true,
        "type": "domain",
        "uuid": "2070e80f-57c8-4191-a726-951d512f4960",
        "value": "slothitz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:03+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9b7918d-b484-4da2-82a9-b1ac243e9043",
        "value": "slowsuitestay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:04+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "065c42e7-2d24-4246-8dec-06392dedd083",
        "value": "smalltownnerds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:04+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4c3efec-33d8-4f89-8d62-88ab40806a89",
        "value": "smartguestwelcomehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:04+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "31c67b4b-5ad8-452e-a25b-db982845dad5",
        "value": "sn-hotels.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:04+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a498d6d-9304-40f9-a6eb-2554446e3da2",
        "value": "sno-approval.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:04+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "18bef350-09b1-4996-b4cc-6077fc670aef",
        "value": "sonters.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:04+00:00",
        "timestamp": "1777118584",
        "to_ids": true,
        "type": "domain",
        "uuid": "895852b3-2cdd-478e-8219-efbd54765f6f",
        "value": "soulianchuang.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118585",
        "to_ids": true,
        "type": "domain",
        "uuid": "16f1ebb0-83a1-40e1-9d35-8e2c4ce1de29",
        "value": "sourcify.tech",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118585",
        "to_ids": true,
        "type": "domain",
        "uuid": "1561ddf7-091e-4cd3-8d1b-9180c20f6e78",
        "value": "spainhotelcofirme.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118585",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf326cd6-a424-43f1-8ad2-54c8dcd2aa03",
        "value": "sq.pixely.group",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118585",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bb0a641-b55c-448e-89a6-2ba74daac1cf",
        "value": "squaredanvers.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118585",
        "to_ids": true,
        "type": "domain",
        "uuid": "13f64437-15d9-4fa3-bc07-4912e00a10b0",
        "value": "sst.justdone.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118585",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f30e050-8da1-40fd-a7d6-0c8b9bc63bfc",
        "value": "statisapptodaycheck.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:05+00:00",
        "timestamp": "1777118586",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c322ae1-c028-495f-9a45-4e4d194def77",
        "value": "status-reservat1ion.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:06+00:00",
        "timestamp": "1777118586",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc16b8bc-095c-44cf-87fa-9786c5657857",
        "value": "status-reservat1on.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:06+00:00",
        "timestamp": "1777118586",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebdd04be-1113-4b3c-b0ba-7ab222772ec7",
        "value": "statusunit19-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:06+00:00",
        "timestamp": "1777118586",
        "to_ids": true,
        "type": "domain",
        "uuid": "2413d0ec-d0ea-405c-b2db-6e993fd72f30",
        "value": "stay-booking-confirm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:06+00:00",
        "timestamp": "1777118586",
        "to_ids": true,
        "type": "domain",
        "uuid": "52e8a42b-aa5a-4b16-8405-8befdee55267",
        "value": "stay-checkrms.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:06+00:00",
        "timestamp": "1777118586",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b7f981c-5d55-4bd7-9293-030499ad7d55",
        "value": "stay-confirm.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:06+00:00",
        "timestamp": "1777118587",
        "to_ids": true,
        "type": "domain",
        "uuid": "194e79e4-15de-4c91-bab7-cf413542d51f",
        "value": "stay-confirmations.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:07+00:00",
        "timestamp": "1777118587",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed1d5896-5e7b-4039-b08c-22bfc6009adc",
        "value": "stay-department.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:07+00:00",
        "timestamp": "1777118587",
        "to_ids": true,
        "type": "domain",
        "uuid": "90702a32-0bb9-4dfa-af4b-1662b6d9b1cf",
        "value": "stay-experience-manager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:07+00:00",
        "timestamp": "1777118587",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e5cdc8b-8069-4269-9025-68109943e7c0",
        "value": "stay-guest-notification.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:07+00:00",
        "timestamp": "1777118587",
        "to_ids": true,
        "type": "domain",
        "uuid": "c24c37ed-0e06-49ba-9b1c-a5f6493ef4c1",
        "value": "stay-pending203.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:07+00:00",
        "timestamp": "1777118587",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f07a4d4-c195-4cc1-a320-2a6e9d39bf54",
        "value": "staybookingvalidation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:07+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "d449d834-5b07-49b1-87eb-be824ff968e0",
        "value": "stayconfirmcenter.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:08+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c90096f-6821-42e1-9399-1224b0286f18",
        "value": "stayexperiencee.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:08+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "babacb96-9457-4cfa-9556-29120c888ae0",
        "value": "stayflowportal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:08+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c2c3e0d-136c-4654-a510-83c92d3d1b97",
        "value": "stayhelperly.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:08+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bde7403-2993-4660-a818-6d17758b97eb",
        "value": "stayherenoww.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:08+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "252010f6-a1c6-4570-9bda-14da7c1fc03d",
        "value": "staykelm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:08+00:00",
        "timestamp": "1777118588",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd3e9222-7880-4d11-b8c9-37f01aa17824",
        "value": "stayreadyhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118589",
        "to_ids": true,
        "type": "domain",
        "uuid": "21bca025-26cc-4e2c-b268-ce36e6c266dc",
        "value": "staysiol.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118589",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d32bf19-a5f2-4c82-b6df-fe1e8846377d",
        "value": "stayvrood.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118589",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d5af1ea-2d4b-439c-9931-582679099bec",
        "value": "stdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118589",
        "to_ids": true,
        "type": "domain",
        "uuid": "1597da81-6559-420b-9889-5e27d63f8345",
        "value": "sujemars.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118589",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4b2b817-96fc-42f7-bb8c-9dc29afbb29f",
        "value": "support-tech.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118589",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd8257a5-a7e6-4de9-b619-aecbdaf34566",
        "value": "t1d7.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:09+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f66ec06-9854-4d29-8ad8-402ee4bb5149",
        "value": "tabsinf-idpages8172.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:10+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb49fc3f-b7af-4491-b128-1a87aa6d5f0d",
        "value": "tabverifis-infoid618.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:10+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "28b0eb56-c9c5-417f-a14f-67087979c8a9",
        "value": "takesreservations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:10+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "1012cb43-56ae-4d70-8628-b4a41dd7bbac",
        "value": "taraftarium1051.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:10+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "81969ccb-604f-4694-a5c3-45ad23dacc5c",
        "value": "taraftarium1052.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:10+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba6a8672-fa7f-4c36-ab20-527026364440",
        "value": "taraftarium1055.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:10+00:00",
        "timestamp": "1777118590",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3afffac-ab8e-4e9c-9db2-1e432947430a",
        "value": "taraftarium1056.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:11+00:00",
        "timestamp": "1777118591",
        "to_ids": true,
        "type": "domain",
        "uuid": "0752f98f-3192-4618-a7b2-9a4c870b0c69",
        "value": "tarrich.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:11+00:00",
        "timestamp": "1777118591",
        "to_ids": true,
        "type": "domain",
        "uuid": "1607a641-ebee-4c62-86e8-9acb883e86ab",
        "value": "taxai-one.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:11+00:00",
        "timestamp": "1777118591",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2f2e55a-680a-4f95-b964-40fe4f722554",
        "value": "tdsenior.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:11+00:00",
        "timestamp": "1777118591",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc2a5b4a-0134-4494-93cf-9772c55ab73e",
        "value": "tharrinaws.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:11+00:00",
        "timestamp": "1777118591",
        "to_ids": true,
        "type": "domain",
        "uuid": "b53bb415-1c13-47f0-a57e-16b5aa96ba9c",
        "value": "the-guests-visit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:11+00:00",
        "timestamp": "1777118591",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9d4e21e-5852-4224-8fd6-0dc9b08407a6",
        "value": "the-guests-visiting.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118592",
        "to_ids": true,
        "type": "domain",
        "uuid": "1411ed13-b710-4912-b447-ec7b6668a871",
        "value": "the-hotel-stays.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118592",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7cc0020-95ff-4abf-89c6-136695783ad0",
        "value": "the-hotel-updates.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118592",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c66667d-bf00-4ddd-ae83-772800c8a15a",
        "value": "the-hotels-stay.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118592",
        "to_ids": true,
        "type": "domain",
        "uuid": "b01a5fdb-09be-4671-9e68-579b8df84911",
        "value": "the-property-stay.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118592",
        "to_ids": true,
        "type": "domain",
        "uuid": "f008cdc0-2f95-4c60-8aef-70546b2c0aed",
        "value": "the-stay-confirm.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118592",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6154e90-b41d-440c-84f7-b057a187ddb9",
        "value": "the-stays-update.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:12+00:00",
        "timestamp": "1777118593",
        "to_ids": true,
        "type": "domain",
        "uuid": "9681151b-7cf1-4e08-b803-634812e9feac",
        "value": "theme27.dotname.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:13+00:00",
        "timestamp": "1777118593",
        "to_ids": true,
        "type": "domain",
        "uuid": "343c0b60-2bba-4f50-9e92-d3bb74fe673c",
        "value": "tk90663.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:13+00:00",
        "timestamp": "1777118593",
        "to_ids": true,
        "type": "domain",
        "uuid": "7903ddac-a85a-43d8-81d8-8f694bc0a750",
        "value": "tktube.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:13+00:00",
        "timestamp": "1777118593",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf416575-0b24-458e-901c-791ddedf1ffd",
        "value": "tokyo988.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:13+00:00",
        "timestamp": "1777118593",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d2dc599-0c5e-4dd4-9e49-4cedf159c64e",
        "value": "tp.com-cancel-operation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:13+00:00",
        "timestamp": "1777118593",
        "to_ids": true,
        "type": "domain",
        "uuid": "31bb59ff-5741-4e05-83f8-d9de82c5d2d5",
        "value": "trailerkings.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:13+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "af316889-bf16-41cb-8332-39b04714b364",
        "value": "travelops.bdcecs.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "6eb32b10-cbad-4f6a-bc0f-b934dc718957",
        "value": "treepressur.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "116f12a6-6364-4f17-9c7a-c480e5e4a12e",
        "value": "tripid097-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "b50748d7-f908-45a4-9f47-e973a28a9e67",
        "value": "trpstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "eedbbc0c-6fcf-4104-a901-1587bb717657",
        "value": "trustcontrol157-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "a932ffe4-176e-4738-98bb-5f9d70fe5e8f",
        "value": "trustcontrol248-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118594",
        "to_ids": true,
        "type": "domain",
        "uuid": "327cbdb5-de40-4efe-b479-1d19b7ae7d98",
        "value": "trustcontrol371-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:14+00:00",
        "timestamp": "1777118595",
        "to_ids": true,
        "type": "domain",
        "uuid": "4181171e-120c-40f8-8b65-0710a44cb39f",
        "value": "trustcontrol516-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:15+00:00",
        "timestamp": "1777118595",
        "to_ids": true,
        "type": "domain",
        "uuid": "daa6375e-8bf1-4138-80bd-6952ef09dd7a",
        "value": "trustcontrol604-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:15+00:00",
        "timestamp": "1777118595",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b08bbcf-aef7-41f8-8b7d-c014c20cd41f",
        "value": "trustcontrol705-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:15+00:00",
        "timestamp": "1777118595",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcae2c79-4336-4a3d-ab64-d9ca8c6cf819",
        "value": "trustcontrol849-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:15+00:00",
        "timestamp": "1777118595",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e212b51-be96-4a31-8f2b-488b5e7d296a",
        "value": "trustcontrol850-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:15+00:00",
        "timestamp": "1777118595",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e5dd13e-8147-44e0-89d6-90aecc4902ea",
        "value": "trustgate012-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:15+00:00",
        "timestamp": "1777118596",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a9e135-ed54-447b-af99-5456898bd9a2",
        "value": "trustgate106-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:16+00:00",
        "timestamp": "1777118596",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa5ccd81-bcb1-44c9-a6fa-1f15bd1e9078",
        "value": "trustgate127-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:16+00:00",
        "timestamp": "1777118596",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcf1df6a-a75a-486c-ae7f-f3c5b9630e21",
        "value": "trustgate129-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:16+00:00",
        "timestamp": "1777118596",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2ff979c-c1e9-457e-8519-47c207efd1ef",
        "value": "trustgate141-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:16+00:00",
        "timestamp": "1777118596",
        "to_ids": true,
        "type": "domain",
        "uuid": "414d7063-1ecd-49e8-aa74-93528fa605b5",
        "value": "trustgate219-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:16+00:00",
        "timestamp": "1777118596",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cd501f2-c92e-4671-93b4-235059e52465",
        "value": "trustgate289-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:16+00:00",
        "timestamp": "1777118597",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3f632ca-a48a-46a5-b360-c18a9a7166a0",
        "value": "trustgate375-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:17+00:00",
        "timestamp": "1777118597",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc5a6007-0189-4409-a28f-24768080a19c",
        "value": "trustgate408-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:17+00:00",
        "timestamp": "1777118597",
        "to_ids": true,
        "type": "domain",
        "uuid": "282b34d7-f8f5-4bdb-89e0-601d28a02d80",
        "value": "trustgate455-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:17+00:00",
        "timestamp": "1777118597",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1de70f0-2d38-4b34-9efc-1eed5420a748",
        "value": "trustgate582-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:17+00:00",
        "timestamp": "1777118597",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc8db201-d898-4795-8e49-956ea2e6edfe",
        "value": "trustgate587-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:17+00:00",
        "timestamp": "1777118597",
        "to_ids": true,
        "type": "domain",
        "uuid": "847bde20-5ec2-4063-b693-fa6a5f4f1a4f",
        "value": "trustgate672-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:17+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "e13163ce-14d8-4ab0-bbc7-7234b3f0ee98",
        "value": "trustgate715-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "b238bf58-b008-4650-99ee-f57cd2c7f16a",
        "value": "trustgate731-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "db2ec11f-857e-4bf3-b6f8-c8a22e7d61a9",
        "value": "trustgate739-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "b774aa43-c89c-40be-b999-7cd68f701bbf",
        "value": "trustgate826-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f694402-4c89-4982-9657-c6fc2a91a31c",
        "value": "trustgate894-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb3cc1b-ac3b-4587-9080-d83dd761313d",
        "value": "trustgate906-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118598",
        "to_ids": true,
        "type": "domain",
        "uuid": "28c62c0c-ab5b-4174-8ad6-8975e3b3c0f3",
        "value": "trustgate927-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:18+00:00",
        "timestamp": "1777118599",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e2fcfdc-0155-44d0-8ac2-210f7d9c4a42",
        "value": "trustgate927-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:19+00:00",
        "timestamp": "1777118599",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b7e414d-7b4f-4493-bc5e-b412007ce221",
        "value": "trustpoint904-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:19+00:00",
        "timestamp": "1777118599",
        "to_ids": true,
        "type": "domain",
        "uuid": "81eecd56-551a-4f74-a8e6-528a049e5b90",
        "value": "ttfwopiz.4snowplowing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:19+00:00",
        "timestamp": "1777118599",
        "to_ids": true,
        "type": "domain",
        "uuid": "31a14a97-bd78-41f9-812e-2501c159df5e",
        "value": "tutorgesucht.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:19+00:00",
        "timestamp": "1777118599",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fff1d34-3aea-432f-bf9a-08abf4a1a907",
        "value": "uae-business-directory.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:19+00:00",
        "timestamp": "1777118599",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8bc48ad-771f-42eb-b522-076ee222fe94",
        "value": "undocancel-room.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:19+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "43cac46b-5f1d-4b1e-8e1c-fbd57f2745e8",
        "value": "unitaccess552-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:20+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "193b1b09-c02a-41e0-94fb-de118eeaf89b",
        "value": "update-arrival-dtls.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:20+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "91e8a924-d0a7-426c-954e-4ae73bf7d029",
        "value": "update-bookinfo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:20+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "e899ac4b-31f6-4a69-9366-7a98a7c616af",
        "value": "updateguestinfo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:20+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aa5e714-26e4-4820-b9c8-fffdc4095c74",
        "value": "updateinformationguest.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:20+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d63218c-9c73-4fe3-ba87-8ceef7682d15",
        "value": "updatereservinfo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:20+00:00",
        "timestamp": "1777118600",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a402dfe-c54d-479e-9f43-d6df5aae38cd",
        "value": "updateresinfo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:21+00:00",
        "timestamp": "1777118601",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa738815-bec8-41d1-96b8-2865c85cb7fa",
        "value": "updatesmarch.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:21+00:00",
        "timestamp": "1777118601",
        "to_ids": true,
        "type": "domain",
        "uuid": "729b2a0a-61c9-4bc0-baa7-0aa14548d243",
        "value": "uyqxwnxmkqwjeq1211413.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:21+00:00",
        "timestamp": "1777118601",
        "to_ids": true,
        "type": "domain",
        "uuid": "08359049-0410-4043-8f15-4d9ca468f2a9",
        "value": "uyqxwnxmkqwjeq1211513.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:21+00:00",
        "timestamp": "1777118601",
        "to_ids": true,
        "type": "domain",
        "uuid": "66504d47-4168-41f2-8d7f-1a9a26122e0a",
        "value": "veifyholderhotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:21+00:00",
        "timestamp": "1777118601",
        "to_ids": true,
        "type": "domain",
        "uuid": "49115be8-af19-447d-bbd7-8e5ca4fc1a03",
        "value": "verfi-cheksin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:21+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "be3002a3-7cab-4313-be3e-b9f600324b10",
        "value": "verifguest.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "484c658a-bbfa-42fa-ab4a-b1de0ba51bb6",
        "value": "verificari-ro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "e378dcdc-82ae-45f8-8cd5-e536af50afda",
        "value": "verifinfos-pageid4819.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "105d0cee-35e4-4a0e-9491-f534117ae01e",
        "value": "verifyflow915-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5cff20d-2035-4778-a2cb-fed21c63da91",
        "value": "verifygate392-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ea1c0ff-1bd4-4872-b983-57ddecf05073",
        "value": "verlfication-guestbook.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118602",
        "to_ids": true,
        "type": "domain",
        "uuid": "cca1f6c8-7616-4e81-a7a9-48d0825e891d",
        "value": "verycozyapartment2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:22+00:00",
        "timestamp": "1777118603",
        "to_ids": true,
        "type": "domain",
        "uuid": "75c50f59-0190-4a15-a03d-2b6acb50d928",
        "value": "violguesthot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:23+00:00",
        "timestamp": "1777118603",
        "to_ids": true,
        "type": "domain",
        "uuid": "326634d0-4802-4c80-a667-af169244e326",
        "value": "visitor-rms932.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:23+00:00",
        "timestamp": "1777118603",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbb2969f-9f0d-4106-8427-495c5c2e0bc0",
        "value": "visitorroom-pending.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:23+00:00",
        "timestamp": "1777118603",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7263d11-6c8c-4941-b1fc-c30578c3b866",
        "value": "visitroom-infconfirms7182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:23+00:00",
        "timestamp": "1777118603",
        "to_ids": true,
        "type": "domain",
        "uuid": "48ab2ae8-c854-49f3-b67c-baed44986ad3",
        "value": "vkratce.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:23+00:00",
        "timestamp": "1777118603",
        "to_ids": true,
        "type": "domain",
        "uuid": "50c28918-741d-47fd-92b4-cafe1eb0918c",
        "value": "voyageprive-verifguestinfo26.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:23+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fb4192d-9cec-4538-83e2-fc7d3dee1e2c",
        "value": "vulgarchicks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:24+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7641c69-b498-4ba9-9d71-1a477480cbdf",
        "value": "vy.verycozyapartment2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:24+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "07f92ef4-5536-49f0-b9b8-7cd39e67405f",
        "value": "warhol-retrospektive-berlin.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:24+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "49fbd82e-85f6-4542-837c-8b75651bfe30",
        "value": "web-directory-reservations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:24+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "a77de247-31ad-4c71-b4f8-a537e08f9592",
        "value": "web-process-one.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:24+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "5146cb6f-dd31-47a5-9896-0af93d5d891d",
        "value": "web-reserving.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:24+00:00",
        "timestamp": "1777118604",
        "to_ids": true,
        "type": "domain",
        "uuid": "78d278e8-d542-4bb5-b8df-b4a3a2f33cd9",
        "value": "webrsrvapplicatlion.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:25+00:00",
        "timestamp": "1777118605",
        "to_ids": true,
        "type": "domain",
        "uuid": "55424776-0976-4f8c-9b7a-da78a918bf0b",
        "value": "websunrise.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:25+00:00",
        "timestamp": "1777118605",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc9dc203-0e90-450e-9ba1-eed4ed8d3bb6",
        "value": "welcomeguesthub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:25+00:00",
        "timestamp": "1777118605",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b236a36-e77a-4b34-8fc1-b3f7ab22f90b",
        "value": "welcomeguestportal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:25+00:00",
        "timestamp": "1777118605",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb54e439-ec49-4426-a7d0-5f919fcad8c4",
        "value": "welcomestayer.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:25+00:00",
        "timestamp": "1777118605",
        "to_ids": true,
        "type": "domain",
        "uuid": "25df6175-5dbc-479c-9a0a-c0e6949b2abe",
        "value": "welcomestayportal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:25+00:00",
        "timestamp": "1777118605",
        "to_ids": true,
        "type": "domain",
        "uuid": "23870fe8-6778-46df-9a45-e06a404a0170",
        "value": "welocomestayhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118606",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0638bc6-ea5c-41df-b836-d6c27839b5eb",
        "value": "westerncarltonhotel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118606",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fde546a-9c27-4acf-999a-6d4be5710233",
        "value": "who.int.aether.bumiayu.biz.id",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118606",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdcdee52-f738-4a7a-b070-a8063afd22f1",
        "value": "xc.bestwestern-id-el20mbt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118606",
        "to_ids": true,
        "type": "domain",
        "uuid": "385776f6-c411-4192-bb94-88df60966cf8",
        "value": "xi.bestwestern-id-mk39igh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118606",
        "to_ids": true,
        "type": "domain",
        "uuid": "89b97b03-18e6-4da1-bfe0-439746fa044b",
        "value": "xiakeh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118606",
        "to_ids": true,
        "type": "domain",
        "uuid": "32d52de8-f6ac-43ed-a54f-2624ea9ee732",
        "value": "xj.bestwestern-id-ib73vbp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:26+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "352538c0-93ff-4e73-9c6a-95520ed1931e",
        "value": "xj.bestwestern-id-ke43nse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:27+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "89605e81-fee7-4299-9da1-a0820e1656cb",
        "value": "xmatik.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:27+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "f031aa06-fcb0-4bf1-ba31-5070f8ecb45c",
        "value": "xn.bestwestern-id-it39foc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:27+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "d43dbc49-02f8-4aa8-a009-cacb2b27ebb2",
        "value": "xpedia-verlfguest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:27+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "32269530-50ae-4695-bb87-39fa4c718466",
        "value": "xv.bestwestern-id-oe14vya.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:27+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "aba49579-9b06-4f60-bfe2-2d9f1c6b6560",
        "value": "y0.bestwestern-id-of46swe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:27+00:00",
        "timestamp": "1777118607",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a829dd4-74ec-4ed1-9769-77b8be390c3b",
        "value": "y8.bestwestern-id-py83vdh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118608",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdf18362-4a7c-4051-8c64-a58b6db8fe1d",
        "value": "yl.bestwestern-id-gu41vsy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118608",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a27f67b-76f2-41f1-aa9e-dbbf16ec4153",
        "value": "younhand.club",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118608",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ab576f1-4952-4acc-8bb4-6936d6815447",
        "value": "your-bwh02.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118608",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d3cee8b-3be2-4896-b2a8-5dec8604d513",
        "value": "your-bwh03.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118608",
        "to_ids": true,
        "type": "domain",
        "uuid": "c38d2a99-9513-4362-af1f-5484da6efe1d",
        "value": "your-bwh06.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118608",
        "to_ids": true,
        "type": "domain",
        "uuid": "8936e30b-f1c1-416f-b003-611213d98004",
        "value": "your-bwh07.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:28+00:00",
        "timestamp": "1777118609",
        "to_ids": true,
        "type": "domain",
        "uuid": "964dd596-f604-4cb1-954a-a6da6817ab72",
        "value": "your-bwh09.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:29+00:00",
        "timestamp": "1777118609",
        "to_ids": true,
        "type": "domain",
        "uuid": "a462f3f6-f93b-419c-bd8d-7cb076684e10",
        "value": "your-bwh10.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:29+00:00",
        "timestamp": "1777118609",
        "to_ids": true,
        "type": "domain",
        "uuid": "13108ccd-4242-4d62-bdcd-ca702ef018b3",
        "value": "your-bwh12.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:29+00:00",
        "timestamp": "1777118609",
        "to_ids": true,
        "type": "domain",
        "uuid": "5590084e-9da3-40cc-9a55-c73807df6c61",
        "value": "your-bwh13.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:29+00:00",
        "timestamp": "1777118609",
        "to_ids": true,
        "type": "domain",
        "uuid": "df25e3bc-d8b9-4818-8d52-5e1f1d936a87",
        "value": "your-bwh16.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:29+00:00",
        "timestamp": "1777118609",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbf14dbb-a0fa-44fc-a9cd-3af69f7a305b",
        "value": "your-bwh17.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:29+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "20fc32a3-1ecc-4e29-970d-0a5f00d33c0e",
        "value": "your-bwh20.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f2866d6-e94a-492c-9ded-6cb96c9cd69e",
        "value": "your-bwh21.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8bd5e2a-c61d-4e48-acf4-5dcef7de27b1",
        "value": "your-bwh23.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bf31d46-034a-406e-99ee-4e3ce8286c5c",
        "value": "your-bwh26.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "27b6c8c7-3dc2-4906-9320-a067629d50b3",
        "value": "your-bwh28.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "42d9b1ce-1e88-45e8-a5bd-cc9f3390c645",
        "value": "your-hotel-service.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118610",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1dac87c-0159-4e95-ae33-b7be14a641b5",
        "value": "your-reservation-desk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:30+00:00",
        "timestamp": "1777118611",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f431c26-0c6a-4fed-a8b0-dd71244c23be",
        "value": "your-stay-manager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:31+00:00",
        "timestamp": "1777118611",
        "to_ids": true,
        "type": "domain",
        "uuid": "32374691-b5d2-44c4-94e3-b69dde6502d0",
        "value": "yu.bestwestern-id-yv57hvs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:31+00:00",
        "timestamp": "1777118611",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a96c435-82e0-4af5-9b32-1ec5cc4aea83",
        "value": "zsfilrtk.2polloslocos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:31+00:00",
        "timestamp": "1777118611",
        "to_ids": false,
        "type": "url",
        "uuid": "a98f6dba-89b1-4ba7-bf82-46f6d0912290",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2206583e6c5160152741c23c9ec59b19cb5ae281",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118612",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "dc762314-e107-422a-8e9d-16ce675d2f0b",
        "value": "45.227.254.10",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118612",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8fe38df-e3e3-48d2-a944-4bd122ea0a3e",
        "value": "acgomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118612",
        "to_ids": true,
        "type": "domain",
        "uuid": "722bd247-cd5f-4bf0-81da-211da487a7e7",
        "value": "acgrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118612",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fc1be88-db42-45f1-8eba-a91cfb54f5a8",
        "value": "asgomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118612",
        "to_ids": true,
        "type": "domain",
        "uuid": "25da02df-484f-41fc-b7ff-1fb30897b81d",
        "value": "asgrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118612",
        "to_ids": true,
        "type": "domain",
        "uuid": "73b51c7a-dd18-446d-8e5f-b9390e381b33",
        "value": "bksju.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:32+00:00",
        "timestamp": "1777118613",
        "to_ids": true,
        "type": "domain",
        "uuid": "be3bdd53-497c-4ae8-ad23-d10edf827bea",
        "value": "bksnb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:33+00:00",
        "timestamp": "1777118613",
        "to_ids": true,
        "type": "domain",
        "uuid": "72d2000a-e0d4-4f41-b1bf-e8ca7afac68e",
        "value": "decrmd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:33+00:00",
        "timestamp": "1777118613",
        "to_ids": true,
        "type": "domain",
        "uuid": "e64711a3-97db-4668-9260-dd5cea1f114d",
        "value": "decrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:33+00:00",
        "timestamp": "1777118613",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e9dd28f-0703-443f-b199-02a350c437ee",
        "value": "jpgomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:33+00:00",
        "timestamp": "1777118613",
        "to_ids": true,
        "type": "domain",
        "uuid": "c21283cd-b208-4607-a402-908fef186e77",
        "value": "jpgrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:33+00:00",
        "timestamp": "1777118613",
        "to_ids": true,
        "type": "domain",
        "uuid": "d85bbb87-600d-4f9d-9214-0c5a64d162bd",
        "value": "nogomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118614",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c56b039-74e0-4eec-abfd-22209ef731a1",
        "value": "nogrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118614",
        "to_ids": true,
        "type": "domain",
        "uuid": "607f9ddd-159b-40b1-b9d9-88afb3b79a92",
        "value": "ot.bksnb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118614",
        "to_ids": true,
        "type": "domain",
        "uuid": "85aa5bf4-9de4-41c3-9a0d-aaa2f8a7dbce",
        "value": "p8.bksju.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118614",
        "to_ids": true,
        "type": "domain",
        "uuid": "576c265b-9083-44c3-97b4-4d1c744cc69a",
        "value": "rc.acgomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118614",
        "to_ids": true,
        "type": "domain",
        "uuid": "37ffdfb0-6b5f-4bf0-9435-78ff39746177",
        "value": "rg.decrmd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118614",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d9eb48e-161e-45ba-854e-d992a4a7075d",
        "value": "rs.asgomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:34+00:00",
        "timestamp": "1777118615",
        "to_ids": true,
        "type": "domain",
        "uuid": "53278cc5-f95d-4370-8654-cba67aca00be",
        "value": "ry.jpgomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:35+00:00",
        "timestamp": "1777118615",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a0b7e87-54bb-4c65-9c41-728adc3a421d",
        "value": "s1.nogomd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:35+00:00",
        "timestamp": "1777118615",
        "to_ids": true,
        "type": "domain",
        "uuid": "d831351b-4a44-48ad-9803-07285b2e07ee",
        "value": "s3.acgrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:35+00:00",
        "timestamp": "1777118615",
        "to_ids": true,
        "type": "domain",
        "uuid": "e78832c0-1717-4862-9aa0-e31eb9de94b2",
        "value": "s4.decrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:35+00:00",
        "timestamp": "1777118615",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f61b76c-15f5-40d5-960b-68dcad76423c",
        "value": "sj.asgrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:35+00:00",
        "timestamp": "1777118615",
        "to_ids": true,
        "type": "domain",
        "uuid": "8feff367-c2d0-4c58-a90b-e65f43fbaab6",
        "value": "sp.jpgrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:35+00:00",
        "timestamp": "1777118616",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cc89338-1dd4-4f07-a648-371531640528",
        "value": "ss.nogrsv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:36+00:00",
        "timestamp": "1777118616",
        "to_ids": false,
        "type": "url",
        "uuid": "bca69d8d-c286-4d4d-98a1-68cf4a7d9776",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6110a513c26856d3e094bc9f1b51f2cc455a227d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:36+00:00",
        "timestamp": "1777118616",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b78a023-103e-4131-8585-e461c634eeb4",
        "value": "klarinkonten.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:36+00:00",
        "timestamp": "1777118616",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0bfae1d-5e9e-4d46-9c99-10716918b71f",
        "value": "meiszahlenup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:36+00:00",
        "timestamp": "1777118616",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed70a193-d1e7-4bb3-9a6d-a84f87e64ae7",
        "value": "ulmenbilora.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:36+00:00",
        "timestamp": "1777118617",
        "to_ids": false,
        "type": "url",
        "uuid": "d18974b6-6edb-466a-8392-fb9b6d39e49e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0b38fdc3509e2b7c13bb7eb9e524730367c29d76",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:37+00:00",
        "timestamp": "1777118617",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bc268f9-5a31-4006-a42b-24a3ec021d0e",
        "value": "granddsd.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T12:03:37+00:00",
        "timestamp": "1777118617",
        "to_ids": true,
        "type": "domain",
        "uuid": "08bebbc7-207c-47dc-ac69-c3214400c8d4",
        "value": "perfecpl.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:03+00:00",
        "timestamp": "1777140004",
        "to_ids": false,
        "type": "url",
        "uuid": "107c7916-ffbd-4d41-a3b2-564044681b04",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b57ee670f8e07df98db14da34f3fd62bcc7e44d1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:04+00:00",
        "timestamp": "1777140005",
        "to_ids": true,
        "type": "domain",
        "uuid": "66836063-af8a-48ae-a80e-a4fd5538abae",
        "value": "0dszydja.wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:05+00:00",
        "timestamp": "1777140005",
        "to_ids": true,
        "type": "domain",
        "uuid": "17d1bef1-9984-41a4-8a60-7791c49edbed",
        "value": "0jw813sl.qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:05+00:00",
        "timestamp": "1777140005",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8589967-3479-4e08-ab8d-a7061226589d",
        "value": "0liwtqxp.deser8othic.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:06+00:00",
        "timestamp": "1777140006",
        "to_ids": true,
        "type": "domain",
        "uuid": "425d9198-629f-4b26-b77d-8ce553fa23be",
        "value": "0n6rt.ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:06+00:00",
        "timestamp": "1777140006",
        "to_ids": true,
        "type": "domain",
        "uuid": "c69c26a4-9bb3-4c1d-9844-1f560a6e0be2",
        "value": "0tt37-graph.mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:06+00:00",
        "timestamp": "1777140006",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcf63c02-eec1-48a6-9454-b56f2bcea798",
        "value": "0udhnpx.po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:06+00:00",
        "timestamp": "1777140006",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb7be20e-3d48-437a-8a5e-c520b81781a0",
        "value": "1aqmr.junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:06+00:00",
        "timestamp": "1777140007",
        "to_ids": true,
        "type": "domain",
        "uuid": "21cecf0f-e008-465b-98bc-f1b499088d9a",
        "value": "1ayo-port.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:07+00:00",
        "timestamp": "1777140007",
        "to_ids": true,
        "type": "domain",
        "uuid": "b17817bf-c16b-468f-b57d-ef67f51b5d86",
        "value": "1ich-track.wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:07+00:00",
        "timestamp": "1777140007",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ff784ef-73a5-4362-b6de-9348e03d6358",
        "value": "1sdw0.obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:07+00:00",
        "timestamp": "1777140007",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ef873f6-892e-48b5-b347-6d2b3332730a",
        "value": "1yqev.kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:07+00:00",
        "timestamp": "1777140007",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e7ba316-0286-444b-a0d5-791aaab5720f",
        "value": "1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:07+00:00",
        "timestamp": "1777140008",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa122ee9-49fc-41db-bdee-d36e5a712031",
        "value": "25eap9f.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:08+00:00",
        "timestamp": "1777140008",
        "to_ids": true,
        "type": "domain",
        "uuid": "c595e448-2cb7-487b-9068-d028e43115b2",
        "value": "277lk6.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:08+00:00",
        "timestamp": "1777140008",
        "to_ids": true,
        "type": "domain",
        "uuid": "517f3cb8-ca79-48ef-9c15-b280a69bcd01",
        "value": "27ny0.de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:08+00:00",
        "timestamp": "1777140008",
        "to_ids": true,
        "type": "domain",
        "uuid": "161b8f27-2b7a-47a1-b176-7a7c8edb0bec",
        "value": "2yxdgkw7.kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:08+00:00",
        "timestamp": "1777140008",
        "to_ids": true,
        "type": "domain",
        "uuid": "85d6bb74-327f-4e7a-8842-14b2148fc54d",
        "value": "2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:08+00:00",
        "timestamp": "1777140009",
        "to_ids": true,
        "type": "domain",
        "uuid": "efba1e34-de2c-42be-bf4a-df674a881842",
        "value": "30jp.zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:09+00:00",
        "timestamp": "1777140009",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f57eebc-cc70-49b8-a2c2-d0236b03837d",
        "value": "33prnco.de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:09+00:00",
        "timestamp": "1777140009",
        "to_ids": true,
        "type": "domain",
        "uuid": "9806a5fa-a99b-4b7b-9666-39ee0b475909",
        "value": "383aosc.dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:09+00:00",
        "timestamp": "1777140009",
        "to_ids": true,
        "type": "domain",
        "uuid": "799bc30b-a262-43c9-9fb9-1d2689116e2c",
        "value": "3df7.clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:09+00:00",
        "timestamp": "1777140009",
        "to_ids": true,
        "type": "domain",
        "uuid": "9109b349-f459-4df6-9768-2157d40b1145",
        "value": "3fgrll.nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:09+00:00",
        "timestamp": "1777140009",
        "to_ids": true,
        "type": "domain",
        "uuid": "c30b4e29-ee78-46f7-9549-106d91b209bb",
        "value": "3jms0.protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:09+00:00",
        "timestamp": "1777140010",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ec2bbd0-d5ff-428c-ae66-cad7338aa365",
        "value": "3nzy-layer.qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:10+00:00",
        "timestamp": "1777140010",
        "to_ids": true,
        "type": "domain",
        "uuid": "398d5648-e3d3-4107-a01b-386cf1eaf365",
        "value": "3zoraxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:10+00:00",
        "timestamp": "1777140010",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccf7c555-8266-4113-b993-144d8cf9188d",
        "value": "42qq.po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:10+00:00",
        "timestamp": "1777140010",
        "to_ids": true,
        "type": "domain",
        "uuid": "54c307d9-9056-43ad-a774-4657b09fb387",
        "value": "4mbe-wave.junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:10+00:00",
        "timestamp": "1777140010",
        "to_ids": true,
        "type": "domain",
        "uuid": "e82494e4-bd8e-402c-8afd-014033262d34",
        "value": "4mber2-flow.mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:11+00:00",
        "timestamp": "1777140011",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1ad5670-d30e-4bfe-b667-4de762d56b8b",
        "value": "4sset3-node.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:11+00:00",
        "timestamp": "1777140011",
        "to_ids": true,
        "type": "domain",
        "uuid": "b64c5f92-52df-40b1-905f-5a2e2e401572",
        "value": "4t0mi-core.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:11+00:00",
        "timestamp": "1777140011",
        "to_ids": true,
        "type": "domain",
        "uuid": "46c325a6-d4c0-4439-8c3c-2420a3ed5843",
        "value": "4wjh4hoo.qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:11+00:00",
        "timestamp": "1777140011",
        "to_ids": true,
        "type": "domain",
        "uuid": "153654b3-61a7-4033-b065-43e476a76460",
        "value": "4zorexil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:11+00:00",
        "timestamp": "1777140011",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a528bcf-b8a2-4570-a4af-b3c843d345d8",
        "value": "51lent-route.pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:11+00:00",
        "timestamp": "1777140012",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b635784-c29f-40d2-8b3a-b46977fd16ba",
        "value": "525x6rn.plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:12+00:00",
        "timestamp": "1777140012",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a0a7bb1-4689-4b31-89ff-3a9190bfdc12",
        "value": "5565wep5.sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:12+00:00",
        "timestamp": "1777140012",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dfd0d73-391f-4fed-b1a7-406418a476bf",
        "value": "5ap-mesh.sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:12+00:00",
        "timestamp": "1777140012",
        "to_ids": true,
        "type": "domain",
        "uuid": "538ffe87-07b7-4b59-849a-84830c78b8ad",
        "value": "5he1l-sheet.ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:12+00:00",
        "timestamp": "1777140012",
        "to_ids": true,
        "type": "domain",
        "uuid": "de4684a9-902d-45fd-bddb-064d48e3e449",
        "value": "5pru4-mark.ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:12+00:00",
        "timestamp": "1777140012",
        "to_ids": true,
        "type": "domain",
        "uuid": "24ac5262-b8e4-488b-9536-655fad7331f4",
        "value": "5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:13+00:00",
        "timestamp": "1777140013",
        "to_ids": true,
        "type": "domain",
        "uuid": "23ef3929-0ad1-48ed-a686-f21393d9555b",
        "value": "61ok.ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:13+00:00",
        "timestamp": "1777140013",
        "to_ids": true,
        "type": "domain",
        "uuid": "233577e6-7c12-4345-931a-1c752dcddee5",
        "value": "6347.junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:13+00:00",
        "timestamp": "1777140013",
        "to_ids": true,
        "type": "domain",
        "uuid": "878d79c2-15c2-4093-95a0-5cea3d0c2af4",
        "value": "63teisp.to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:13+00:00",
        "timestamp": "1777140013",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f92c6d8-f4f4-4841-96ac-a2250b0d0b65",
        "value": "655f.pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:13+00:00",
        "timestamp": "1777140013",
        "to_ids": true,
        "type": "domain",
        "uuid": "61665534-b923-4302-8fe3-73f1c1915df8",
        "value": "6sfy.boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:13+00:00",
        "timestamp": "1777140014",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb4297ba-61c2-47e8-856c-667f81b44141",
        "value": "6tn0i.cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:14+00:00",
        "timestamp": "1777140014",
        "to_ids": true,
        "type": "domain",
        "uuid": "dda32546-014b-4ac8-b155-9aa8aa1b9ff1",
        "value": "6xsj.wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:14+00:00",
        "timestamp": "1777140014",
        "to_ids": true,
        "type": "domain",
        "uuid": "65473353-9df0-4b85-b4af-fa3fb7109d00",
        "value": "6z3dyra.qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:14+00:00",
        "timestamp": "1777140014",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d97afbd-597a-43b1-83bf-2053289fd8b1",
        "value": "6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:14+00:00",
        "timestamp": "1777140015",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8b90705-d6d6-4a09-99cf-bbdc2f6c304f",
        "value": "717mupv.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:15+00:00",
        "timestamp": "1777140015",
        "to_ids": true,
        "type": "domain",
        "uuid": "e375b2a5-2f7d-44a9-a179-ede1a09c8fdf",
        "value": "72z5.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:15+00:00",
        "timestamp": "1777140015",
        "to_ids": true,
        "type": "domain",
        "uuid": "4714fb54-7b85-4c2b-84ec-27081588aabd",
        "value": "730e.po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:15+00:00",
        "timestamp": "1777140015",
        "to_ids": true,
        "type": "domain",
        "uuid": "4159b10b-0bde-41c4-9480-2df1e60000f2",
        "value": "753s.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:15+00:00",
        "timestamp": "1777140015",
        "to_ids": true,
        "type": "domain",
        "uuid": "818095be-0eb6-4501-a1b0-ad0aa09ab8bd",
        "value": "777am.po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:15+00:00",
        "timestamp": "1777140016",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddf030c8-c4d4-4d1c-8130-f463f0f971e5",
        "value": "7afu.mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:16+00:00",
        "timestamp": "1777140016",
        "to_ids": true,
        "type": "domain",
        "uuid": "1856eecc-f5f6-4fd6-92ab-1257a28512a1",
        "value": "7fsk.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:16+00:00",
        "timestamp": "1777140016",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f5f2003-e837-47f8-bcf1-2786e84fe45d",
        "value": "7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:16+00:00",
        "timestamp": "1777140016",
        "to_ids": true,
        "type": "domain",
        "uuid": "a99f2663-d425-4d60-8513-a5b435a4c5fc",
        "value": "80njj90.sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:16+00:00",
        "timestamp": "1777140016",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6237e12-5c60-4c16-9f69-ad95448c1423",
        "value": "80qqgwqb.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:16+00:00",
        "timestamp": "1777140016",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3c33173-f3e1-4dca-aaf8-4bfd3ba09c10",
        "value": "84gxvrtf.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:16+00:00",
        "timestamp": "1777140017",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d092364-5403-47ac-8116-e1e3790ca667",
        "value": "8cq295yx.acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:17+00:00",
        "timestamp": "1777140017",
        "to_ids": true,
        "type": "domain",
        "uuid": "e34b8811-19a0-4461-a7c5-df4fa902a934",
        "value": "8gdool6w.degassing-mould.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:17+00:00",
        "timestamp": "1777140017",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e495259-b9ed-49fa-bf01-808af022f7bd",
        "value": "8rxhman.sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:17+00:00",
        "timestamp": "1777140017",
        "to_ids": true,
        "type": "domain",
        "uuid": "e434cf01-46da-4728-b6d7-8916857625e8",
        "value": "974xwaj.de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:17+00:00",
        "timestamp": "1777140017",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8412922-5f91-4931-b1a7-9de3187ba6ec",
        "value": "9871mi.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:17+00:00",
        "timestamp": "1777140018",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3c99186-1e0f-4fc7-905a-31131fa11cb1",
        "value": "9rg153d.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:18+00:00",
        "timestamp": "1777140018",
        "to_ids": true,
        "type": "domain",
        "uuid": "09401914-5aab-42cb-a7af-48598c6c8c75",
        "value": "9sy22gk.po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:18+00:00",
        "timestamp": "1777140018",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb8a51a1-629c-415b-896b-6f4658fbf6cd",
        "value": "9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:18+00:00",
        "timestamp": "1777140018",
        "to_ids": true,
        "type": "domain",
        "uuid": "a75d7771-109b-43c5-b4ef-8633c3699129",
        "value": "a0uq.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:18+00:00",
        "timestamp": "1777140018",
        "to_ids": true,
        "type": "domain",
        "uuid": "20c0453d-d215-4b70-ba2b-37e10962c256",
        "value": "abl3zv.through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:18+00:00",
        "timestamp": "1777140019",
        "to_ids": true,
        "type": "domain",
        "uuid": "df49aee9-3639-4840-9e84-5cc4581d4b55",
        "value": "accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:19+00:00",
        "timestamp": "1777140019",
        "to_ids": true,
        "type": "domain",
        "uuid": "b53b8483-0a50-4608-9e9b-0fcc420ad457",
        "value": "acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:19+00:00",
        "timestamp": "1777140019",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e0a72b3-598d-4c8f-bb88-5e94c4038c15",
        "value": "activeserver.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:19+00:00",
        "timestamp": "1777140019",
        "to_ids": true,
        "type": "domain",
        "uuid": "241131e3-d586-41f4-a75d-6a82ec67d0f3",
        "value": "adapt1-line.sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:19+00:00",
        "timestamp": "1777140019",
        "to_ids": true,
        "type": "domain",
        "uuid": "17a4a15d-26e4-4e88-9fa9-66d5cded4cdf",
        "value": "advertprob1emat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:19+00:00",
        "timestamp": "1777140019",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dacdeb7-9cd3-46d7-b699-ef3c37cb05c1",
        "value": "after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:19+00:00",
        "timestamp": "1777140020",
        "to_ids": true,
        "type": "domain",
        "uuid": "85110571-5836-44b8-aabf-a6527d1612c9",
        "value": "agentdel.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:20+00:00",
        "timestamp": "1777140020",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f881619-391d-446b-84cf-af282cc24cd7",
        "value": "airwayequity.dark-hypnosis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:20+00:00",
        "timestamp": "1777140020",
        "to_ids": true,
        "type": "domain",
        "uuid": "e535d15f-abaa-4ff7-b800-69e9b3aac883",
        "value": "ajvo1s.po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:20+00:00",
        "timestamp": "1777140020",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cfe6e9b-3c55-4522-97e4-f9d8c4855076",
        "value": "ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:20+00:00",
        "timestamp": "1777140021",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dd70cf9-6e20-4ba9-944c-1dd6139f90cd",
        "value": "alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:21+00:00",
        "timestamp": "1777140021",
        "to_ids": true,
        "type": "domain",
        "uuid": "6db20d75-74db-4101-97cf-a1825d8335c0",
        "value": "alt-1llu.mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:21+00:00",
        "timestamp": "1777140021",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2c9659c-c64c-4399-8d7b-bcab8cc42f9f",
        "value": "alt-c4pita.matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:21+00:00",
        "timestamp": "1777140021",
        "to_ids": true,
        "type": "domain",
        "uuid": "8988067f-c770-4400-86f1-5efc1726b069",
        "value": "alt-f1eet.1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:21+00:00",
        "timestamp": "1777140021",
        "to_ids": true,
        "type": "domain",
        "uuid": "1583f7d1-c076-43e8-9672-ff485cc107a7",
        "value": "alt-r3bat.dark-hypnosis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:21+00:00",
        "timestamp": "1777140022",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9b3138f-bdaf-45e8-a5bc-cdecc3ae14d5",
        "value": "ambe1-point.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:22+00:00",
        "timestamp": "1777140022",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2fb1214-85e9-4619-887b-9a8a2c53d908",
        "value": "amber-mon.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:22+00:00",
        "timestamp": "1777140022",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f7fdbc1-d127-4a05-b324-5989c7b9b67c",
        "value": "ancien0-path.light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:22+00:00",
        "timestamp": "1777140022",
        "to_ids": true,
        "type": "domain",
        "uuid": "4967959b-03a4-4d16-a48b-a9f05edc31fc",
        "value": "anciesto.boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:22+00:00",
        "timestamp": "1777140022",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bd4c439-345e-4678-acdb-8fbc6596bee6",
        "value": "ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:22+00:00",
        "timestamp": "1777140022",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b8d0647-f3ab-4996-b8ad-a22a82db4a41",
        "value": "aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:22+00:00",
        "timestamp": "1777140023",
        "to_ids": true,
        "type": "domain",
        "uuid": "07f82ddc-71ec-42af-9c2d-add26a00b976",
        "value": "arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:23+00:00",
        "timestamp": "1777140023",
        "to_ids": true,
        "type": "domain",
        "uuid": "61124983-9fa2-4301-9296-6a70533ee4cd",
        "value": "archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:23+00:00",
        "timestamp": "1777140023",
        "to_ids": true,
        "type": "domain",
        "uuid": "98533d74-3259-42b6-bdcf-7e84fdd4b420",
        "value": "arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:23+00:00",
        "timestamp": "1777140023",
        "to_ids": true,
        "type": "domain",
        "uuid": "6018ac3b-74ee-43ba-9a06-ae350130a58d",
        "value": "argrs.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:23+00:00",
        "timestamp": "1777140023",
        "to_ids": true,
        "type": "domain",
        "uuid": "35f22cba-d2c3-4ffb-9e44-e93d375bb209",
        "value": "ark-forgeon.ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:23+00:00",
        "timestamp": "1777140024",
        "to_ids": true,
        "type": "domain",
        "uuid": "61de06a0-2880-439c-b4db-7bb83f0a3665",
        "value": "arkdraa6.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:24+00:00",
        "timestamp": "1777140024",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f030923-b943-4f15-8139-6028ab1558ce",
        "value": "arkdraos4.histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:24+00:00",
        "timestamp": "1777140024",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc2664d6-88ce-4f98-83f4-20fc9f2408d5",
        "value": "arkmark8um.over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:24+00:00",
        "timestamp": "1777140024",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f7f8899-c4c7-462e-886f-5a02bcc99048",
        "value": "arknex6or.kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:24+00:00",
        "timestamp": "1777140024",
        "to_ids": true,
        "type": "domain",
        "uuid": "edc6da31-9655-4e9c-a521-2576df7938c1",
        "value": "arktidear7.sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:24+00:00",
        "timestamp": "1777140025",
        "to_ids": true,
        "type": "domain",
        "uuid": "5866d1e9-806f-42ba-9be3-32e00821e9c9",
        "value": "arkvale6os.foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:25+00:00",
        "timestamp": "1777140025",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad55f80b-f305-4cda-9eeb-0cfbacce9633",
        "value": "ash-leaf.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:25+00:00",
        "timestamp": "1777140025",
        "to_ids": true,
        "type": "domain",
        "uuid": "a522bc55-202b-4c20-a1e8-203b0f5e7726",
        "value": "atom1-span.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:25+00:00",
        "timestamp": "1777140025",
        "to_ids": true,
        "type": "domain",
        "uuid": "0508ad76-37f2-4d25-a7a0-70c756591591",
        "value": "atomicextract.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:25+00:00",
        "timestamp": "1777140025",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe094b7c-621d-40ec-bc3c-6582e2014268",
        "value": "audittiny.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:25+00:00",
        "timestamp": "1777140026",
        "to_ids": true,
        "type": "domain",
        "uuid": "8519788e-4f3a-4d2e-a2f3-6255bf8e3b8f",
        "value": "autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:26+00:00",
        "timestamp": "1777140026",
        "to_ids": true,
        "type": "domain",
        "uuid": "957ede15-76f1-4924-a723-6e1400210b9f",
        "value": "autumnpul.capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:26+00:00",
        "timestamp": "1777140026",
        "to_ids": true,
        "type": "domain",
        "uuid": "92b7f939-4ead-4b31-9885-da116283adf6",
        "value": "ays2jm.protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:26+00:00",
        "timestamp": "1777140026",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ec8df28-05e5-4a31-9b1c-81aca1409155",
        "value": "azqr2vav.capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:26+00:00",
        "timestamp": "1777140026",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fe554b6-1661-4cea-9dcd-ff283bea8a33",
        "value": "azure-sharp.1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:26+00:00",
        "timestamp": "1777140027",
        "to_ids": true,
        "type": "domain",
        "uuid": "94def639-be5d-459f-b6c0-80db8e7a64ed",
        "value": "azureaud.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:27+00:00",
        "timestamp": "1777140027",
        "to_ids": true,
        "type": "domain",
        "uuid": "e917e543-a11c-4454-99b7-6ad128cd6113",
        "value": "b4nd-signal.ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:27+00:00",
        "timestamp": "1777140027",
        "to_ids": true,
        "type": "domain",
        "uuid": "99fcd53a-1558-4d75-b166-bb28ec34c27f",
        "value": "ba5ic0-spark.sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:27+00:00",
        "timestamp": "1777140027",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bf5edca-95e6-4ae6-8248-a976bfe9c484",
        "value": "backy-ard5.cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:27+00:00",
        "timestamp": "1777140027",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceb55e10-0e02-4c72-b4a8-178ab7d47a79",
        "value": "backy-ard5.po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:27+00:00",
        "timestamp": "1777140027",
        "to_ids": true,
        "type": "domain",
        "uuid": "f51ee907-fc34-4a72-bb01-945365f2fdfd",
        "value": "backyard5.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:27+00:00",
        "timestamp": "1777140028",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac6cbc0c-fe23-4388-9520-79f33063a057",
        "value": "bag-senior.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:28+00:00",
        "timestamp": "1777140028",
        "to_ids": true,
        "type": "domain",
        "uuid": "96363062-769b-4998-90ed-6e6934e6e30c",
        "value": "balcg.1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:28+00:00",
        "timestamp": "1777140028",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb7a3fe4-6926-4d37-84e6-a65b339e6e91",
        "value": "bangwdpy.ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:28+00:00",
        "timestamp": "1777140028",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bf1a0c2-d2f8-4dfa-a53a-fd41c3e7b2e6",
        "value": "bark-line.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:28+00:00",
        "timestamp": "1777140028",
        "to_ids": true,
        "type": "domain",
        "uuid": "028056ae-39d7-41ad-b88f-201d54c52a0b",
        "value": "bark8-grid.po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:28+00:00",
        "timestamp": "1777140029",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dc41700-fd6f-4dec-971f-c1ba951d52f4",
        "value": "basicret.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:29+00:00",
        "timestamp": "1777140029",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b11a8fb-212e-479f-a853-25aaf377a7cd",
        "value": "basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:29+00:00",
        "timestamp": "1777140029",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6a21cd8-089a-401d-bdbb-d78aca902674",
        "value": "baum-1s.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:29+00:00",
        "timestamp": "1777140029",
        "to_ids": true,
        "type": "domain",
        "uuid": "8861c661-39a3-4f5c-a0b1-77594e4de6c8",
        "value": "baum-w1.accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:29+00:00",
        "timestamp": "1777140029",
        "to_ids": true,
        "type": "domain",
        "uuid": "d02ca24c-0bff-4302-b04a-a99b45e5cf67",
        "value": "baum-z9.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:29+00:00",
        "timestamp": "1777140029",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e50d85e-0fa3-4514-9fee-ec4024ed6bcb",
        "value": "berg-4k.after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:30+00:00",
        "timestamp": "1777140030",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ec613c0-8410-4d5d-856b-32c919aa06ff",
        "value": "berg-5.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:30+00:00",
        "timestamp": "1777140030",
        "to_ids": true,
        "type": "domain",
        "uuid": "43abd971-e3fd-46f0-b9fb-6159225009ca",
        "value": "berg-5x.dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:30+00:00",
        "timestamp": "1777140030",
        "to_ids": true,
        "type": "domain",
        "uuid": "09e90756-8d3d-408a-8145-83a2f4ac4a59",
        "value": "berg-8.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:30+00:00",
        "timestamp": "1777140030",
        "to_ids": true,
        "type": "domain",
        "uuid": "beb3164a-a182-4ddc-bed7-d56d7b78bb4d",
        "value": "berg-9z.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:30+00:00",
        "timestamp": "1777140030",
        "to_ids": true,
        "type": "domain",
        "uuid": "777caf74-d622-460e-8349-ad42405fb90b",
        "value": "best-lo-ok6.arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:30+00:00",
        "timestamp": "1777140030",
        "to_ids": true,
        "type": "domain",
        "uuid": "57966756-b48c-40eb-bcd0-1a6565e0e6fb",
        "value": "best-lo-ok6.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:31+00:00",
        "timestamp": "1777140031",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5c5a324-e4e4-4403-a6eb-36a8e4c7d055",
        "value": "best-look6.bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:31+00:00",
        "timestamp": "1777140031",
        "to_ids": true,
        "type": "domain",
        "uuid": "460d2e09-6de7-45b6-b70f-3aa5a7426255",
        "value": "best-style6.rus5icabreast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:31+00:00",
        "timestamp": "1777140031",
        "to_ids": true,
        "type": "domain",
        "uuid": "593444c4-be8b-4eec-ae33-3ae5d7a55e81",
        "value": "best-ti-me2.eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:31+00:00",
        "timestamp": "1777140031",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f684f9f-5ae7-44ed-8cfd-db9bb524b77c",
        "value": "best-ti-me2.kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:31+00:00",
        "timestamp": "1777140031",
        "to_ids": true,
        "type": "domain",
        "uuid": "aff27010-ffbe-4332-8b43-078e9ce535e4",
        "value": "best-time2.wi3sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:32+00:00",
        "timestamp": "1777140032",
        "to_ids": true,
        "type": "domain",
        "uuid": "b284b66b-0e0d-4d7a-8193-cfe7c2f81805",
        "value": "bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:32+00:00",
        "timestamp": "1777140032",
        "to_ids": true,
        "type": "domain",
        "uuid": "456f9c6d-6fdd-44ef-9fd0-07cd4928c6ad",
        "value": "bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:32+00:00",
        "timestamp": "1777140032",
        "to_ids": true,
        "type": "domain",
        "uuid": "bac321ce-6459-4e50-bcce-7a507edece85",
        "value": "big2mychild.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:32+00:00",
        "timestamp": "1777140032",
        "to_ids": true,
        "type": "domain",
        "uuid": "253c1209-0f4b-43cb-ace2-233ae43a4714",
        "value": "bigjump3.ra1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:32+00:00",
        "timestamp": "1777140033",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fdbf810-0f7b-4771-bf92-47865288a35d",
        "value": "bigwall3.aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:33+00:00",
        "timestamp": "1777140033",
        "to_ids": true,
        "type": "domain",
        "uuid": "3eb42085-7a47-4eba-bd68-0f5fc4ebdbf9",
        "value": "bigwall5.ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:33+00:00",
        "timestamp": "1777140033",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f36f4c4-e8ca-4137-8e6b-aff68b96a524",
        "value": "bigwall5.to1varin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:33+00:00",
        "timestamp": "1777140033",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ea081ed-be72-473e-bdc2-099f97e87ec3",
        "value": "binaryboost.histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:34+00:00",
        "timestamp": "1777140034",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7239057-b898-4ee4-b6af-54b331301244",
        "value": "bircmed.alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:34+00:00",
        "timestamp": "1777140034",
        "to_ids": true,
        "type": "domain",
        "uuid": "abe294ee-94c4-49ca-8a91-1a4f228f9b61",
        "value": "black-h-at1.arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:34+00:00",
        "timestamp": "1777140034",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3178cef-de62-400d-b0c8-d00e99b402a3",
        "value": "black-hat1.bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:34+00:00",
        "timestamp": "1777140035",
        "to_ids": true,
        "type": "domain",
        "uuid": "0be13897-2eb6-4bda-a917-ac4ce5e780c4",
        "value": "blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:35+00:00",
        "timestamp": "1777140035",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c1e5af1-2212-47b0-9ee4-cb51422aa6d9",
        "value": "blackhat1.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:35+00:00",
        "timestamp": "1777140035",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3c85a6d-8e3a-4be1-b852-5d7b331bc417",
        "value": "blasph-nimalo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:35+00:00",
        "timestamp": "1777140035",
        "to_ids": true,
        "type": "domain",
        "uuid": "90b9ec37-387d-49f6-a3bc-454b0cdfd9ed",
        "value": "bleu-1.archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:35+00:00",
        "timestamp": "1777140035",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c572157-a13c-46eb-be26-619809170da4",
        "value": "bleu-1p.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:35+00:00",
        "timestamp": "1777140035",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ae51c9e-3138-4179-9ccf-ab5c52e55c44",
        "value": "bleu-2.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:36+00:00",
        "timestamp": "1777140036",
        "to_ids": true,
        "type": "domain",
        "uuid": "67dc2c12-0c00-476b-a637-5198df5efc1f",
        "value": "bleu-2x.godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:36+00:00",
        "timestamp": "1777140036",
        "to_ids": true,
        "type": "domain",
        "uuid": "80dc6821-1a6c-4088-a581-acf3e6a8fc57",
        "value": "bleu-4.cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:36+00:00",
        "timestamp": "1777140036",
        "to_ids": true,
        "type": "domain",
        "uuid": "c23161c7-39e1-4e9c-9628-753666cca4b7",
        "value": "bleu-5.dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:36+00:00",
        "timestamp": "1777140036",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5e707f1-2566-4cbe-80fd-7dec85d3e022",
        "value": "bleu-5.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:36+00:00",
        "timestamp": "1777140036",
        "to_ids": true,
        "type": "domain",
        "uuid": "1097cdf1-bc44-432f-a3cd-81d0c116aeb8",
        "value": "bleu-7.dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:36+00:00",
        "timestamp": "1777140036",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c30d323-a0d7-4a2c-8b69-95d3318c63c8",
        "value": "bleu-8k.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:37+00:00",
        "timestamp": "1777140037",
        "to_ids": true,
        "type": "domain",
        "uuid": "0026af94-df28-4976-897c-0bbac537419c",
        "value": "bleu-holz-5c.after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:37+00:00",
        "timestamp": "1777140037",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca358382-285c-4271-bf98-a2ba18131dc2",
        "value": "bleu-land-1v.ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:37+00:00",
        "timestamp": "1777140037",
        "to_ids": true,
        "type": "domain",
        "uuid": "eedd6476-70e3-41bc-a08d-5e1a8d806c40",
        "value": "blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:37+00:00",
        "timestamp": "1777140037",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b192707-40c0-491a-a30f-ecb49230524d",
        "value": "blu-etable1.9zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:37+00:00",
        "timestamp": "1777140037",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fda7217-91b6-4949-9dee-e84d01074cef",
        "value": "blue-6.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:37+00:00",
        "timestamp": "1777140038",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a0f9c0d-905b-45cc-a74c-b2ec6c6031a7",
        "value": "blue-7.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:38+00:00",
        "timestamp": "1777140038",
        "to_ids": true,
        "type": "domain",
        "uuid": "302e5f54-fb7e-45f5-9242-738ceae52f38",
        "value": "blue-box1.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:38+00:00",
        "timestamp": "1777140038",
        "to_ids": true,
        "type": "domain",
        "uuid": "839f7be3-cead-4d36-af6a-6bfc013152fb",
        "value": "blue-fire-8x.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:38+00:00",
        "timestamp": "1777140038",
        "to_ids": true,
        "type": "domain",
        "uuid": "be20a4c0-f894-46e0-9b56-1d39e48c3fd8",
        "value": "blue-holz-8.jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:38+00:00",
        "timestamp": "1777140038",
        "to_ids": true,
        "type": "domain",
        "uuid": "28f72e06-3c9b-4641-8166-2a578c02f383",
        "value": "blue-mond-1m.dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:38+00:00",
        "timestamp": "1777140038",
        "to_ids": true,
        "type": "domain",
        "uuid": "e743ec3a-0bb5-44f5-a869-cef6f5cd15b5",
        "value": "blue-silk3.rus5icabreast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:38+00:00",
        "timestamp": "1777140039",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1ee11c1-7e88-4810-8c04-3f8308740e19",
        "value": "blue-sky2.to6vamil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:39+00:00",
        "timestamp": "1777140039",
        "to_ids": true,
        "type": "domain",
        "uuid": "20640814-c135-4733-b2b6-00a8942b7445",
        "value": "blue-star-2m.ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:39+00:00",
        "timestamp": "1777140039",
        "to_ids": true,
        "type": "domain",
        "uuid": "7099d51e-1a3e-4f05-8da6-b77ef0667435",
        "value": "blzlet.5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:39+00:00",
        "timestamp": "1777140039",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f1ecf04-3d24-4e69-98dd-a4663643a706",
        "value": "boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:39+00:00",
        "timestamp": "1777140040",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a4bd4b6-a9c4-4ec8-8a12-02a606f33ecf",
        "value": "boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:40+00:00",
        "timestamp": "1777140040",
        "to_ids": true,
        "type": "domain",
        "uuid": "eef73f4f-8fdc-4b85-b87b-2f337dc2a2ab",
        "value": "boo5-scope.light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:40+00:00",
        "timestamp": "1777140040",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8358dbd-5caa-4846-aac6-ccc6859aa5a3",
        "value": "boostmanifest.qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:40+00:00",
        "timestamp": "1777140040",
        "to_ids": true,
        "type": "domain",
        "uuid": "b36c58fe-4109-438c-8468-f149830d3317",
        "value": "bovla1ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:40+00:00",
        "timestamp": "1777140040",
        "to_ids": true,
        "type": "domain",
        "uuid": "40dddafc-8670-4f78-ab0d-24a80aae895b",
        "value": "bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:40+00:00",
        "timestamp": "1777140040",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f26954d-9ed7-4895-a232-8d8632efdfbc",
        "value": "bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:40+00:00",
        "timestamp": "1777140041",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f6127d7-fdcb-42a9-bf12-b92776ad45ae",
        "value": "bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:41+00:00",
        "timestamp": "1777140041",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c58bf3c-8853-4429-91cf-a7e1456b8c5c",
        "value": "bovla8xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:41+00:00",
        "timestamp": "1777140041",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0da0e6e-b3ae-4750-a013-db3d26a78531",
        "value": "bpja3y.to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:41+00:00",
        "timestamp": "1777140041",
        "to_ids": true,
        "type": "domain",
        "uuid": "150be98c-1aab-4f1d-b1e4-9f394a36a47d",
        "value": "bright-glow5.deser8othic.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:41+00:00",
        "timestamp": "1777140041",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f436df6-e945-4acb-a67f-8c90e9d57d33",
        "value": "bright-hall3.hai1owhiten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:41+00:00",
        "timestamp": "1777140041",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c3c0f3b-b33b-4fa7-95d0-b0d19f70aa94",
        "value": "bright-sk-y1.basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:42+00:00",
        "timestamp": "1777140042",
        "to_ids": true,
        "type": "domain",
        "uuid": "1335390e-8f77-4e55-a185-b8f226a6bf13",
        "value": "bright-sky1.to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:45+00:00",
        "timestamp": "1777140045",
        "to_ids": true,
        "type": "domain",
        "uuid": "1eff27a8-0a66-462c-b268-ee5a5e8792e9",
        "value": "brightsky1.po3vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:45+00:00",
        "timestamp": "1777140046",
        "to_ids": true,
        "type": "domain",
        "uuid": "22461eb3-3ca5-43e7-9630-08214c6db116",
        "value": "broad4-grid.boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:46+00:00",
        "timestamp": "1777140046",
        "to_ids": true,
        "type": "domain",
        "uuid": "22953da5-3329-4b77-9320-958b342ea6aa",
        "value": "brookprime.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:46+00:00",
        "timestamp": "1777140046",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4241e13-344a-49ed-a8c5-d83ba0a9d91d",
        "value": "buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:46+00:00",
        "timestamp": "1777140046",
        "to_ids": true,
        "type": "domain",
        "uuid": "303b3d20-0237-42a8-83c0-229478a38a04",
        "value": "bui73.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:46+00:00",
        "timestamp": "1777140046",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dff88b4-30cf-497c-9cdc-60fb4a57f532",
        "value": "build-bio.po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:46+00:00",
        "timestamp": "1777140047",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a3bad5a-b2fe-467e-9dbc-0f6ffe3a9fe1",
        "value": "bundldaw.dark-hypnosis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:47+00:00",
        "timestamp": "1777140047",
        "to_ids": true,
        "type": "domain",
        "uuid": "240bb0fa-82da-48ff-8764-c7946026a420",
        "value": "bundle-sheet.nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:47+00:00",
        "timestamp": "1777140047",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1da7bc5-ba29-4ef3-b10b-9fa384a819a3",
        "value": "bundleform.bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:47+00:00",
        "timestamp": "1777140047",
        "to_ids": true,
        "type": "domain",
        "uuid": "17420626-7a6b-4f34-97d6-0c3b99d901b3",
        "value": "bytefore.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:47+00:00",
        "timestamp": "1777140047",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8887583-45af-4403-838e-dbe59261852e",
        "value": "bytehard.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:47+00:00",
        "timestamp": "1777140047",
        "to_ids": true,
        "type": "domain",
        "uuid": "92a595ed-5654-44b9-b2dd-5d0d588d3128",
        "value": "c0mpu7-phase.obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:48+00:00",
        "timestamp": "1777140048",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc6e050f-6c42-4b94-90e0-eb1ed9db5eb6",
        "value": "c0ol6-field.de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:48+00:00",
        "timestamp": "1777140048",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe5992fb-a3f2-4330-bd9b-d474544e6a8b",
        "value": "c1ini-phase.5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:48+00:00",
        "timestamp": "1777140048",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf8f3897-22b8-4fbf-870f-a41c3e16e632",
        "value": "c1inic-crest.bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:48+00:00",
        "timestamp": "1777140048",
        "to_ids": true,
        "type": "domain",
        "uuid": "de3c5517-1219-497f-8808-30c51b2764c0",
        "value": "c4st-layer.1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:48+00:00",
        "timestamp": "1777140048",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0f5689e-fbfc-4d5f-894e-8d9364d5dbbb",
        "value": "ca1rn-mount.rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:48+00:00",
        "timestamp": "1777140049",
        "to_ids": true,
        "type": "domain",
        "uuid": "f39a857c-3516-446a-8e5e-f47ec5fd6481",
        "value": "cach8-stack.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:49+00:00",
        "timestamp": "1777140049",
        "to_ids": true,
        "type": "domain",
        "uuid": "407ef29e-ea94-447f-9c7a-1b8ea6749d06",
        "value": "caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:49+00:00",
        "timestamp": "1777140049",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ebb392b-d322-421c-a3be-ba42621eee34",
        "value": "campa-fla.rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:49+00:00",
        "timestamp": "1777140049",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ae35f0d-1c95-4e39-99b7-acca9495111e",
        "value": "canopystor.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:49+00:00",
        "timestamp": "1777140049",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd769afc-a9bc-4051-8223-ab3860fa9fd5",
        "value": "capita-sla.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:49+00:00",
        "timestamp": "1777140050",
        "to_ids": true,
        "type": "domain",
        "uuid": "044c8d3a-f526-42bb-87a1-32aca8d8052f",
        "value": "capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:50+00:00",
        "timestamp": "1777140050",
        "to_ids": true,
        "type": "domain",
        "uuid": "78700715-06a2-4680-ab62-d833d56f2c4c",
        "value": "cargoisle.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:50+00:00",
        "timestamp": "1777140050",
        "to_ids": true,
        "type": "domain",
        "uuid": "31ea87e0-60d8-4c7d-92d6-38517dc8767c",
        "value": "cascad5-cache.9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:50+00:00",
        "timestamp": "1777140050",
        "to_ids": true,
        "type": "domain",
        "uuid": "5841f126-a29e-4dbb-a8f2-d370b3ae79da",
        "value": "channe1-hold.pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:50+00:00",
        "timestamp": "1777140050",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8265cba-02dc-41f6-a393-be78b6cef973",
        "value": "cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:50+00:00",
        "timestamp": "1777140050",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d77a89c-ef2d-48e7-8c01-730bbf98f6d0",
        "value": "cinemapassive.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:51+00:00",
        "timestamp": "1777140051",
        "to_ids": true,
        "type": "domain",
        "uuid": "d341f76a-2d84-463c-b1df-5a807d5ce631",
        "value": "ciphercas.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:51+00:00",
        "timestamp": "1777140051",
        "to_ids": true,
        "type": "domain",
        "uuid": "20b54b4e-2c42-4983-8b0a-dbdfcaece212",
        "value": "ciphermolecu.plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:51+00:00",
        "timestamp": "1777140051",
        "to_ids": true,
        "type": "domain",
        "uuid": "b17b3f2c-256c-41f5-bad1-0e3c2dd26ca1",
        "value": "city-wa-lk2.cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:51+00:00",
        "timestamp": "1777140051",
        "to_ids": true,
        "type": "domain",
        "uuid": "e496596d-5b6a-409c-8a10-91534e69023c",
        "value": "city-wa-lk2.po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:51+00:00",
        "timestamp": "1777140051",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6786b53-e136-47d0-9d58-a74d6f630369",
        "value": "cityli-fe2.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:51+00:00",
        "timestamp": "1777140051",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e93d3ac-cba9-4b08-9e14-bbf004993657",
        "value": "civi4-forge.po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:52+00:00",
        "timestamp": "1777140052",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5e9c4c3-bea0-4091-b9f8-d269965f6dd0",
        "value": "cl52qlla.to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:52+00:00",
        "timestamp": "1777140052",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebc682fb-cfe4-421c-b949-b4b6eca27d2b",
        "value": "cle-arbox6.mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:52+00:00",
        "timestamp": "1777140052",
        "to_ids": true,
        "type": "domain",
        "uuid": "529ce924-25fd-4b2e-a781-cbbf45c279c4",
        "value": "clear-sky3.sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:52+00:00",
        "timestamp": "1777140052",
        "to_ids": true,
        "type": "domain",
        "uuid": "130a6f68-a985-452e-aaa7-f9b7ce37c591",
        "value": "clear-tint6.deser8othic.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:52+00:00",
        "timestamp": "1777140052",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e135987-6fde-4a13-bafc-6b4f48e44ac1",
        "value": "clearsky3.qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:53+00:00",
        "timestamp": "1777140053",
        "to_ids": true,
        "type": "domain",
        "uuid": "df33f80d-5635-437c-aa65-d2a0598e4684",
        "value": "clearsky3.zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:53+00:00",
        "timestamp": "1777140053",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6108505-ca0e-4bdf-8b88-0ad49fe96270",
        "value": "clearview5.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:53+00:00",
        "timestamp": "1777140053",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bc2d934-a395-41cf-8c59-cb85daa614ea",
        "value": "cliffcrims.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:53+00:00",
        "timestamp": "1777140053",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebbb6abd-524d-4b3d-ba34-fe808bdc349f",
        "value": "clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:53+00:00",
        "timestamp": "1777140053",
        "to_ids": true,
        "type": "domain",
        "uuid": "e654417f-60c6-4556-9751-ffaa4b3370f6",
        "value": "cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:53+00:00",
        "timestamp": "1777140054",
        "to_ids": true,
        "type": "domain",
        "uuid": "e117a5f7-ddd0-483f-b456-64d1d0717b03",
        "value": "closedsun.over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:54+00:00",
        "timestamp": "1777140054",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d9bc4a0-06ad-4c4c-a2bf-1ec8893f4194",
        "value": "clucrawl.sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:54+00:00",
        "timestamp": "1777140054",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b6ae24b-69b3-4e17-91ef-e0edcb98919b",
        "value": "clust1-dock.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:54+00:00",
        "timestamp": "1777140054",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bdcd761-a0d9-4c6b-a14b-d90cbf109f78",
        "value": "co1o-grid.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:54+00:00",
        "timestamp": "1777140054",
        "to_ids": true,
        "type": "domain",
        "uuid": "7133b263-a8dc-4b56-8857-dbaeaef27439",
        "value": "cold-1q.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:54+00:00",
        "timestamp": "1777140054",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea83a713-3efb-4619-938f-b006a7124413",
        "value": "cold-9q.geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:54+00:00",
        "timestamp": "1777140055",
        "to_ids": true,
        "type": "domain",
        "uuid": "44c7962e-5952-46e7-a953-25d5d0934b24",
        "value": "cold-fire-4.there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:55+00:00",
        "timestamp": "1777140055",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd75fb88-ddf2-497a-a6ec-7af3c578932d",
        "value": "cold-sn-ow4.qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:55+00:00",
        "timestamp": "1777140055",
        "to_ids": true,
        "type": "domain",
        "uuid": "79e8ef30-3508-4174-9bdd-5b7d807fbc4b",
        "value": "cold-sn-ow4.sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:55+00:00",
        "timestamp": "1777140055",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfb4ac62-2e67-426f-828d-9508717077d0",
        "value": "cold-snow4.zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:55+00:00",
        "timestamp": "1777140055",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd4bc538-9a8c-49de-bf92-af9cacb4781f",
        "value": "coldwa-ter4.ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:55+00:00",
        "timestamp": "1777140056",
        "to_ids": true,
        "type": "domain",
        "uuid": "71163b27-6e72-49a9-96e5-ad443ec0d0d8",
        "value": "coldwa-ter5.aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:56+00:00",
        "timestamp": "1777140056",
        "to_ids": true,
        "type": "domain",
        "uuid": "425c2d7f-1619-4731-8742-9233c439934d",
        "value": "colocip.bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:56+00:00",
        "timestamp": "1777140056",
        "to_ids": true,
        "type": "domain",
        "uuid": "40701995-c8da-4923-b769-fef7731bfb29",
        "value": "colorcast.qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:56+00:00",
        "timestamp": "1777140056",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a4336b9-56b3-43b2-93b5-d8459dccdcbc",
        "value": "compil0-spark.de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:56+00:00",
        "timestamp": "1777140056",
        "to_ids": true,
        "type": "domain",
        "uuid": "684d189a-d37b-4cb5-9ae8-94a8e5a49247",
        "value": "conv3r5-glow.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:56+00:00",
        "timestamp": "1777140056",
        "to_ids": true,
        "type": "domain",
        "uuid": "1efbd81f-0824-44f2-b2a9-3cce32f1dc78",
        "value": "cool-mi-lk5.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:56+00:00",
        "timestamp": "1777140057",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f10faf2-4769-432d-a3d6-20dca80880bd",
        "value": "cool-mi-lk5.po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:57+00:00",
        "timestamp": "1777140057",
        "to_ids": true,
        "type": "domain",
        "uuid": "9855ce8d-4220-4814-aac7-d7797dd6cc96",
        "value": "cool-stone5.jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:57+00:00",
        "timestamp": "1777140057",
        "to_ids": true,
        "type": "domain",
        "uuid": "951aed10-e721-4965-818d-79fcb5b1e78f",
        "value": "cool5-chain.de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:57+00:00",
        "timestamp": "1777140057",
        "to_ids": true,
        "type": "domain",
        "uuid": "258e752d-a740-4b31-b60d-4715f1342e9d",
        "value": "coolmi-lk5.import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:57+00:00",
        "timestamp": "1777140057",
        "to_ids": true,
        "type": "domain",
        "uuid": "13d16719-8158-4897-ad4d-f07cb41543af",
        "value": "coolstone6.kymle5rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:57+00:00",
        "timestamp": "1777140057",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac8808a9-30c0-4390-b021-9c8720ccd30a",
        "value": "coolstone6.sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:58+00:00",
        "timestamp": "1777140058",
        "to_ids": true,
        "type": "domain",
        "uuid": "75a9f422-0828-44f5-bd9c-5ff73cb796b1",
        "value": "coremount.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:58+00:00",
        "timestamp": "1777140058",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbd6f757-3bd7-4e5f-ba5c-6ffc396c1ce9",
        "value": "corhard.dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:58+00:00",
        "timestamp": "1777140058",
        "to_ids": true,
        "type": "domain",
        "uuid": "b114a86a-f865-4521-9629-e14db1942e78",
        "value": "courwind.blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:58+00:00",
        "timestamp": "1777140058",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f2251c1-dde9-4b3c-b3b6-3c2a4b6237ca",
        "value": "cp52.pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:58+00:00",
        "timestamp": "1777140058",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf4cf4e3-3342-467c-9941-192be0d6146a",
        "value": "cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:58+00:00",
        "timestamp": "1777140059",
        "to_ids": true,
        "type": "domain",
        "uuid": "67e80a1b-d45e-45ce-8422-1ed1e2c80a51",
        "value": "crat-mark.de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:59+00:00",
        "timestamp": "1777140059",
        "to_ids": true,
        "type": "domain",
        "uuid": "30047e49-a989-472e-a4b4-8020c5dad1d2",
        "value": "crawleramp.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:59+00:00",
        "timestamp": "1777140059",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1fe88d5-be3c-422b-a9d0-fa62c40eb2b8",
        "value": "credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:59+00:00",
        "timestamp": "1777140059",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd211021-dce3-46ca-a0ac-c4624d62abfa",
        "value": "crestsud.pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:59+00:00",
        "timestamp": "1777140059",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8683a67-66db-4686-af72-09394b13f85c",
        "value": "cryptocatal.de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:00:59+00:00",
        "timestamp": "1777140060",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d0d4421-dab3-41a4-90c8-3510fbfe7021",
        "value": "cryst0-core.histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:00+00:00",
        "timestamp": "1777140060",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a4bb58d-10b0-465e-b4c9-b95c722364fa",
        "value": "cultureengine.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:00+00:00",
        "timestamp": "1777140060",
        "to_ids": true,
        "type": "domain",
        "uuid": "91e66ce8-9904-46b4-bf41-eb989a84566c",
        "value": "cvw05my.7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:00+00:00",
        "timestamp": "1777140060",
        "to_ids": true,
        "type": "domain",
        "uuid": "926d95cb-e8db-4322-b0d1-179252a180ac",
        "value": "cxti.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:00+00:00",
        "timestamp": "1777140060",
        "to_ids": true,
        "type": "domain",
        "uuid": "02cf77de-e835-4c65-95d8-515ed0d51e59",
        "value": "d34l-node.po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:00+00:00",
        "timestamp": "1777140060",
        "to_ids": true,
        "type": "domain",
        "uuid": "d161750e-1c25-4aea-85ad-343904e2bbfd",
        "value": "d4rk-panel.autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:00+00:00",
        "timestamp": "1777140061",
        "to_ids": true,
        "type": "domain",
        "uuid": "0405bd3a-e223-44a9-8c3c-d2b573286e12",
        "value": "dark-6.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:01+00:00",
        "timestamp": "1777140061",
        "to_ids": true,
        "type": "domain",
        "uuid": "68ba4d02-10df-4ed6-b870-0544df6a5b21",
        "value": "dark-7.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:01+00:00",
        "timestamp": "1777140061",
        "to_ids": true,
        "type": "domain",
        "uuid": "46eb222b-9574-4d5e-bc92-edc3c869bbc8",
        "value": "dark-9.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:01+00:00",
        "timestamp": "1777140061",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab7602d1-740d-4e9f-975b-e8162ed73688",
        "value": "dark-berg-2.fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:01+00:00",
        "timestamp": "1777140061",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4cb623c-f3c8-48a0-8d81-fe57f918abed",
        "value": "dark-hypnosis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:01+00:00",
        "timestamp": "1777140062",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcdf0be0-caf4-4980-937d-60f0a5e219a8",
        "value": "dark-land-3.after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:02+00:00",
        "timestamp": "1777140062",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ce868f0-8a60-4164-b80c-1bf4bf28eae4",
        "value": "dark-ni-ght2.basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:02+00:00",
        "timestamp": "1777140062",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f075a9c-736a-44a1-bca7-dfdc08ee46bd",
        "value": "dark-open-5.godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:02+00:00",
        "timestamp": "1777140062",
        "to_ids": true,
        "type": "domain",
        "uuid": "c89214d9-f568-4142-bdc4-d15f2bf0ebbc",
        "value": "dark-shade1.deser8othic.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:02+00:00",
        "timestamp": "1777140062",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d792cef-ece1-42ae-b4b0-f9709d3d5980",
        "value": "dark-star-3v.slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:02+00:00",
        "timestamp": "1777140063",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5a0214a-36c9-4501-842f-01392ae572b8",
        "value": "dark-star-4.limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:03+00:00",
        "timestamp": "1777140063",
        "to_ids": true,
        "type": "domain",
        "uuid": "15f31e5f-4619-493b-83f9-c344bdbe67f5",
        "value": "dark-star-6.jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:03+00:00",
        "timestamp": "1777140063",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8714f98-2a15-4452-932b-9008e2de5e17",
        "value": "dark-star-9k.ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:03+00:00",
        "timestamp": "1777140063",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0e424a6-045b-4e6b-824d-7ea79ce5da41",
        "value": "darknight2.to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:03+00:00",
        "timestamp": "1777140063",
        "to_ids": true,
        "type": "domain",
        "uuid": "c347d8a9-8e04-4bd4-8935-064d7e278822",
        "value": "darktermi.5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:03+00:00",
        "timestamp": "1777140064",
        "to_ids": true,
        "type": "domain",
        "uuid": "de1d5f23-8938-4346-bf75-98e1ac52a85d",
        "value": "dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:04+00:00",
        "timestamp": "1777140064",
        "to_ids": true,
        "type": "domain",
        "uuid": "bddf942f-f4f3-456b-837f-ca2747a85cee",
        "value": "dawn-route.ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:04+00:00",
        "timestamp": "1777140064",
        "to_ids": true,
        "type": "domain",
        "uuid": "11506005-33fa-4086-901b-baf85a4d02cd",
        "value": "de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:04+00:00",
        "timestamp": "1777140064",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c6fed7e-cb06-49fb-9e6d-1104c2f0d8e9",
        "value": "de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:04+00:00",
        "timestamp": "1777140064",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c7f1fe0-3cbc-4878-af42-ae244aec8c13",
        "value": "de5xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:04+00:00",
        "timestamp": "1777140065",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbec6b67-50dd-4cc9-ac40-a7f965915434",
        "value": "de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:05+00:00",
        "timestamp": "1777140065",
        "to_ids": true,
        "type": "domain",
        "uuid": "2594ac77-da49-458b-81c5-e5471f652fcd",
        "value": "de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:05+00:00",
        "timestamp": "1777140065",
        "to_ids": true,
        "type": "domain",
        "uuid": "040cd675-438a-4ace-95b3-3ec9426ecca9",
        "value": "de6xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:05+00:00",
        "timestamp": "1777140065",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bd560a8-009f-423c-89ef-8acb9572d973",
        "value": "de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:05+00:00",
        "timestamp": "1777140065",
        "to_ids": true,
        "type": "domain",
        "uuid": "22b5138d-16a8-48ef-99fb-ca7a607ed639",
        "value": "de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:05+00:00",
        "timestamp": "1777140065",
        "to_ids": true,
        "type": "domain",
        "uuid": "50cdded9-7da1-4419-8424-d6aeca8e9a9e",
        "value": "dealparc.sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:06+00:00",
        "timestamp": "1777140066",
        "to_ids": true,
        "type": "domain",
        "uuid": "a696efbe-f914-4869-9603-5e2da7fbcff1",
        "value": "decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:06+00:00",
        "timestamp": "1777140066",
        "to_ids": true,
        "type": "domain",
        "uuid": "030f85db-d501-455d-a142-cbd2d244b680",
        "value": "decode-fac.junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:06+00:00",
        "timestamp": "1777140066",
        "to_ids": true,
        "type": "domain",
        "uuid": "42cfbc9d-cc65-4086-a9f7-9824e2f1cda3",
        "value": "deep-cave4.lucernemo7al.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:06+00:00",
        "timestamp": "1777140066",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fe024d6-a2af-4b88-bfe8-88f79dbdf646",
        "value": "deep-ocean3.basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:06+00:00",
        "timestamp": "1777140066",
        "to_ids": true,
        "type": "domain",
        "uuid": "984e20df-a643-4ea6-9b53-1984167aa2db",
        "value": "deep-ocean3.to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:07+00:00",
        "timestamp": "1777140067",
        "to_ids": true,
        "type": "domain",
        "uuid": "1994b8f3-312b-4810-904d-501e698d37fc",
        "value": "deep-plot6.art-tonsillitis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:07+00:00",
        "timestamp": "1777140067",
        "to_ids": true,
        "type": "domain",
        "uuid": "c75677b4-9bd7-41ff-b7e3-77b70ee68940",
        "value": "deep-red4.deser8othic.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:07+00:00",
        "timestamp": "1777140067",
        "to_ids": true,
        "type": "domain",
        "uuid": "36d2946a-61e0-4a95-8ddd-3ca6a6bfbed2",
        "value": "deep-soil3.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:07+00:00",
        "timestamp": "1777140067",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b52c3d6-1a23-4fcc-b8eb-2d430b8f7f3c",
        "value": "deepsea1.to6vamil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:07+00:00",
        "timestamp": "1777140067",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b8270c1-333a-498f-9918-1c8204ee64b3",
        "value": "defenvoya.to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:07+00:00",
        "timestamp": "1777140068",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0e00556-88fe-4508-b51a-491731360a1a",
        "value": "degassing-mould.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:08+00:00",
        "timestamp": "1777140068",
        "to_ids": true,
        "type": "domain",
        "uuid": "f883fd39-1a98-4a4b-b359-b81d73565001",
        "value": "del1v-graph.dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:08+00:00",
        "timestamp": "1777140068",
        "to_ids": true,
        "type": "domain",
        "uuid": "32c255db-9a5c-448b-ba32-4c0186f3ea99",
        "value": "delihyp.ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:08+00:00",
        "timestamp": "1777140068",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f124788-5403-40be-836a-cc7e6c7c105e",
        "value": "delstrea.sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:08+00:00",
        "timestamp": "1777140068",
        "to_ids": true,
        "type": "domain",
        "uuid": "76bf9d10-2d85-40ee-b134-8fdcb01d213e",
        "value": "denseink.clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:08+00:00",
        "timestamp": "1777140068",
        "to_ids": true,
        "type": "domain",
        "uuid": "867b7637-1793-470a-9f07-ea8b36fae6dc",
        "value": "dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:08+00:00",
        "timestamp": "1777140069",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2053a0d-6488-4b1c-879b-2403a64e3f69",
        "value": "dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:09+00:00",
        "timestamp": "1777140069",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b75102e-317e-41cd-85a1-e0047fb3ac03",
        "value": "dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:09+00:00",
        "timestamp": "1777140069",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecc178f2-6ed5-4338-a749-2525d869f186",
        "value": "dffer.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:09+00:00",
        "timestamp": "1777140069",
        "to_ids": true,
        "type": "domain",
        "uuid": "02411edf-38f6-4a67-8f27-f7fad63df97f",
        "value": "dfsgg.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:09+00:00",
        "timestamp": "1777140069",
        "to_ids": true,
        "type": "domain",
        "uuid": "6705b42a-7ca9-4274-bba7-0355f02896ac",
        "value": "dhnsdns.beer",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:09+00:00",
        "timestamp": "1777140070",
        "to_ids": true,
        "type": "domain",
        "uuid": "00187d7e-1889-4639-b359-1be393d4772f",
        "value": "diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:10+00:00",
        "timestamp": "1777140070",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea6c8cbe-5a99-4554-8aad-1a6959b4e3d1",
        "value": "directspring.alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:10+00:00",
        "timestamp": "1777140070",
        "to_ids": true,
        "type": "domain",
        "uuid": "be71e9fd-9a2d-4a2e-ac36-acb3110ea659",
        "value": "dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:10+00:00",
        "timestamp": "1777140070",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5fa4f8a-e052-44d0-b69a-b63d75ea08ea",
        "value": "dmnoyvf.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:10+00:00",
        "timestamp": "1777140070",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d134a7b-a8a8-4137-a261-561abd795c98",
        "value": "dn17wscb.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:10+00:00",
        "timestamp": "1777140070",
        "to_ids": true,
        "type": "domain",
        "uuid": "cabfa4b5-d69d-4a53-bdfd-d6e8b4b167f2",
        "value": "docyl.po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:10+00:00",
        "timestamp": "1777140071",
        "to_ids": true,
        "type": "domain",
        "uuid": "18224b26-e73e-4545-b90a-871e8df7a4fb",
        "value": "dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:11+00:00",
        "timestamp": "1777140071",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3e94bd7-af75-4eaa-8ae3-c8360c5bb9f6",
        "value": "dpcr.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:11+00:00",
        "timestamp": "1777140071",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd595a72-5229-4ce4-b0ad-54bbdb03aba1",
        "value": "draftroya.acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:11+00:00",
        "timestamp": "1777140071",
        "to_ids": true,
        "type": "domain",
        "uuid": "4683f330-4ee6-484b-b6d7-808253b72640",
        "value": "drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:11+00:00",
        "timestamp": "1777140071",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d66432d-4898-489f-8d7d-6088c3c758ba",
        "value": "dsf2.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:11+00:00",
        "timestamp": "1777140071",
        "to_ids": true,
        "type": "domain",
        "uuid": "291e6ad0-8cf0-400b-9ee4-bff8cbed878a",
        "value": "dsff5.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:11+00:00",
        "timestamp": "1777140072",
        "to_ids": true,
        "type": "domain",
        "uuid": "a31b3a84-4038-40db-b9f2-6b367c89397a",
        "value": "du5t-port.plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:12+00:00",
        "timestamp": "1777140072",
        "to_ids": true,
        "type": "domain",
        "uuid": "6af4f734-4bee-4702-bebd-673427cb34e6",
        "value": "dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:12+00:00",
        "timestamp": "1777140072",
        "to_ids": true,
        "type": "domain",
        "uuid": "c31404c9-17b6-4429-81da-145f2b909e02",
        "value": "dustfix.to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:12+00:00",
        "timestamp": "1777140072",
        "to_ids": true,
        "type": "domain",
        "uuid": "225c042c-3a42-40cc-84e6-7a5207b49fa3",
        "value": "dusttide.ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:12+00:00",
        "timestamp": "1777140072",
        "to_ids": true,
        "type": "domain",
        "uuid": "77b27ffc-c229-41a6-8a8a-46f3f9d8c8be",
        "value": "dyn-lineix.to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:12+00:00",
        "timestamp": "1777140072",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1f534cb-1e68-437d-8079-8d86b78a5df2",
        "value": "dyn-lineor.7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:13+00:00",
        "timestamp": "1777140073",
        "to_ids": true,
        "type": "domain",
        "uuid": "b952c3b2-64c7-4486-a071-fb3b257ae0dc",
        "value": "dyn-tideis.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:13+00:00",
        "timestamp": "1777140073",
        "to_ids": true,
        "type": "domain",
        "uuid": "90ae075a-12b6-4460-a455-a0a72319d568",
        "value": "dyncoreis3.pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:13+00:00",
        "timestamp": "1777140073",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3ccc74f-2732-4d7b-9acb-f99b6e5391d5",
        "value": "dynforgeal.kymle2rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:13+00:00",
        "timestamp": "1777140073",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e9d9eaf-5031-4a8f-a3ad-b84450a83c6c",
        "value": "dynlineal8.wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:13+00:00",
        "timestamp": "1777140073",
        "to_ids": true,
        "type": "domain",
        "uuid": "53b2a4df-e6d2-44c6-9996-6e78cb60fbac",
        "value": "dynlith7os.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:13+00:00",
        "timestamp": "1777140074",
        "to_ids": true,
        "type": "domain",
        "uuid": "66249023-209a-4cdf-be79-7f2cb64248c2",
        "value": "dynspirea2.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:14+00:00",
        "timestamp": "1777140074",
        "to_ids": true,
        "type": "domain",
        "uuid": "db3bc38a-2815-4385-9d61-b1ce22e63989",
        "value": "dyntide0al.bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:14+00:00",
        "timestamp": "1777140074",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb8c5d0-55a3-44a7-9daf-eb998f9cb007",
        "value": "eamo.bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:14+00:00",
        "timestamp": "1777140074",
        "to_ids": true,
        "type": "domain",
        "uuid": "904f5ff4-d7b7-4021-b9ad-c16b44b47470",
        "value": "easmb.ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:14+00:00",
        "timestamp": "1777140074",
        "to_ids": true,
        "type": "domain",
        "uuid": "b00044db-8af3-46ec-84bf-7825c1f76923",
        "value": "easy-ta-sk6.eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:14+00:00",
        "timestamp": "1777140074",
        "to_ids": true,
        "type": "domain",
        "uuid": "f832aadc-0f83-4d29-bb36-645d3069b685",
        "value": "easy-task6.kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:14+00:00",
        "timestamp": "1777140075",
        "to_ids": true,
        "type": "domain",
        "uuid": "8975ddb1-29b1-4792-b125-14a9d1b69b72",
        "value": "echocanopy.cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:15+00:00",
        "timestamp": "1777140075",
        "to_ids": true,
        "type": "domain",
        "uuid": "a11dcb3f-a75a-45ba-948c-f7f82f2aa8a5",
        "value": "echoloa.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:15+00:00",
        "timestamp": "1777140075",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8a82ee5-24cc-405e-986d-32df33478c87",
        "value": "eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:15+00:00",
        "timestamp": "1777140075",
        "to_ids": true,
        "type": "domain",
        "uuid": "263cdbba-02c3-46a8-8366-35d829c1412c",
        "value": "eihf.sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:15+00:00",
        "timestamp": "1777140076",
        "to_ids": true,
        "type": "domain",
        "uuid": "e56b5d0c-4f03-489f-aa0d-8062bad4606a",
        "value": "ejm0c.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:16+00:00",
        "timestamp": "1777140076",
        "to_ids": true,
        "type": "domain",
        "uuid": "c96ee47e-7fd9-4b46-94ba-4f058679fdcf",
        "value": "emidb.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:16+00:00",
        "timestamp": "1777140076",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a9a18c4-2148-4929-a930-f8dd49a8d417",
        "value": "empty-s-pac4.buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:16+00:00",
        "timestamp": "1777140076",
        "to_ids": true,
        "type": "domain",
        "uuid": "11a2f724-3c9d-4954-8910-50c61f896505",
        "value": "empty-sp-ac4.ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:16+00:00",
        "timestamp": "1777140076",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c1c0fca-5cba-4751-930e-a8fb852120ae",
        "value": "empty-space4.wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:16+00:00",
        "timestamp": "1777140076",
        "to_ids": true,
        "type": "domain",
        "uuid": "7825d199-d9df-415f-842d-1ee94773f646",
        "value": "emroz.boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:16+00:00",
        "timestamp": "1777140077",
        "to_ids": true,
        "type": "domain",
        "uuid": "3159f5a3-a215-4705-b31b-894c0284b296",
        "value": "encod-logic.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:17+00:00",
        "timestamp": "1777140077",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c39c873-c990-417e-bbe6-27ca7a826f44",
        "value": "epyc.rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:17+00:00",
        "timestamp": "1777140077",
        "to_ids": true,
        "type": "domain",
        "uuid": "22deefbf-75a0-4b3c-8af7-4f7ee45a06e9",
        "value": "eqov17u.kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:17+00:00",
        "timestamp": "1777140077",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c3342a0-1670-4b82-ba8c-92b0e495630e",
        "value": "equscript.ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:17+00:00",
        "timestamp": "1777140077",
        "to_ids": true,
        "type": "domain",
        "uuid": "feeead07-9642-483e-8685-0775cd1c7641",
        "value": "ernbe-leaf.to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:17+00:00",
        "timestamp": "1777140078",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd9fe907-f2f3-4207-a0cd-b167eed671f3",
        "value": "eufkpp.ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:18+00:00",
        "timestamp": "1777140078",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab16e0bd-1266-4837-a7f6-dacbf8bd64d8",
        "value": "ev8l.light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:18+00:00",
        "timestamp": "1777140078",
        "to_ids": true,
        "type": "domain",
        "uuid": "74b65183-7507-4656-8cbf-2deb6d5ebf74",
        "value": "ew6.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:18+00:00",
        "timestamp": "1777140078",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a4ca4aa-ac2a-4175-8d26-703485b8d1ff",
        "value": "excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:18+00:00",
        "timestamp": "1777140078",
        "to_ids": true,
        "type": "domain",
        "uuid": "92662416-fb41-45ac-998f-5e2335f18cc7",
        "value": "extendvia.de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:18+00:00",
        "timestamp": "1777140078",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d8bbf41-197b-475e-99f1-6638e3c0b271",
        "value": "extortion-fufu.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:18+00:00",
        "timestamp": "1777140079",
        "to_ids": true,
        "type": "domain",
        "uuid": "36267aca-1219-4896-bcfa-1a5e8888b1b3",
        "value": "extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:19+00:00",
        "timestamp": "1777140079",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddc3a8d7-8c81-470d-8196-442180c0e54c",
        "value": "f0cu-grid.bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:19+00:00",
        "timestamp": "1777140079",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d9448a2-beb6-4fa7-ad1a-917847697aad",
        "value": "f0rm-mount.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:19+00:00",
        "timestamp": "1777140079",
        "to_ids": true,
        "type": "domain",
        "uuid": "23b02ecb-ca82-4562-9f53-84ae8f3ad25e",
        "value": "f0rrn4-logic.acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:19+00:00",
        "timestamp": "1777140079",
        "to_ids": true,
        "type": "domain",
        "uuid": "657ba55e-08f5-4fdd-85ff-a40dca179c6c",
        "value": "f4ct0ry-mark.zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:19+00:00",
        "timestamp": "1777140079",
        "to_ids": true,
        "type": "domain",
        "uuid": "da9b37f7-a629-484d-be2d-a14c6e1924d9",
        "value": "fabr2-path.over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:19+00:00",
        "timestamp": "1777140080",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dcd4840-6560-4395-8925-fdf56ef633e1",
        "value": "faithf2-frame.2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:20+00:00",
        "timestamp": "1777140080",
        "to_ids": true,
        "type": "domain",
        "uuid": "e264408c-6918-41d2-92da-b96f00ed571f",
        "value": "faithfulvector.ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:20+00:00",
        "timestamp": "1777140080",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b1a92d4-f942-452f-b000-5bb50b787484",
        "value": "falconshift.foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:20+00:00",
        "timestamp": "1777140080",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7a8c3d8-ed60-4817-8b41-f309c73ab869",
        "value": "falforma.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:20+00:00",
        "timestamp": "1777140080",
        "to_ids": true,
        "type": "domain",
        "uuid": "a44f89f3-7d6b-4d02-bd55-a6e46e6ce2bf",
        "value": "fall-ridg.to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:20+00:00",
        "timestamp": "1777140081",
        "to_ids": true,
        "type": "domain",
        "uuid": "39e2705f-e95a-4de9-9249-d60b0ba45ab4",
        "value": "fallbasic.wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:21+00:00",
        "timestamp": "1777140081",
        "to_ids": true,
        "type": "domain",
        "uuid": "e033481a-942f-4ae7-a030-f3bf455d45d3",
        "value": "fallgrim.to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:21+00:00",
        "timestamp": "1777140081",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8ec3a2a-681f-4a78-a3db-bddd2ace3119",
        "value": "fast-1.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:21+00:00",
        "timestamp": "1777140081",
        "to_ids": true,
        "type": "domain",
        "uuid": "306a322c-0c97-4f2b-a5a2-1a7f86dff2c3",
        "value": "fast-1.there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:21+00:00",
        "timestamp": "1777140081",
        "to_ids": true,
        "type": "domain",
        "uuid": "26da7d08-e9ec-4468-a67f-9536fe0ed101",
        "value": "fast-2.dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:21+00:00",
        "timestamp": "1777140081",
        "to_ids": true,
        "type": "domain",
        "uuid": "9569f702-efcb-4dba-8cc8-8ce343c380a1",
        "value": "fast-2x.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:22+00:00",
        "timestamp": "1777140082",
        "to_ids": true,
        "type": "domain",
        "uuid": "db73e450-3246-43ce-be70-17909dc0bedb",
        "value": "fast-3.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:22+00:00",
        "timestamp": "1777140082",
        "to_ids": true,
        "type": "domain",
        "uuid": "1844d8a8-6a14-4e02-a639-c08bc86e10ac",
        "value": "fast-3v.jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:22+00:00",
        "timestamp": "1777140082",
        "to_ids": true,
        "type": "domain",
        "uuid": "555a0b4d-435f-48dc-b4ee-63d3b0d4e8c8",
        "value": "fast-5.limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:22+00:00",
        "timestamp": "1777140082",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae0fa944-4562-4934-8c90-7db09f731e07",
        "value": "fast-7k.inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:22+00:00",
        "timestamp": "1777140082",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e20efc7-78be-49b7-8fa8-7aff4c093155",
        "value": "fast-9.godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:22+00:00",
        "timestamp": "1777140083",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea37ea65-a4f1-4750-8e4f-b4edf14b2862",
        "value": "fast-9.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:23+00:00",
        "timestamp": "1777140083",
        "to_ids": true,
        "type": "domain",
        "uuid": "67939fe2-c462-4905-b932-d1bf6c77424c",
        "value": "fast-berg-4.archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:23+00:00",
        "timestamp": "1777140083",
        "to_ids": true,
        "type": "domain",
        "uuid": "638bb691-2204-40a8-88cd-491071ec660e",
        "value": "fast-land-9c.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:23+00:00",
        "timestamp": "1777140083",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d779db6-7e64-4fa2-935e-a7ff243fe237",
        "value": "fast-zeit-3.ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:23+00:00",
        "timestamp": "1777140083",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa2a594e-3310-459a-be55-cac3a7cb51d8",
        "value": "fast-zeit-4.miv6soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:23+00:00",
        "timestamp": "1777140083",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b7b8df0-5bb4-49b3-99de-ff612e741222",
        "value": "fast-zeit-5k.cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:23+00:00",
        "timestamp": "1777140084",
        "to_ids": true,
        "type": "domain",
        "uuid": "e287d1db-2663-4c7f-b3f9-05a43b03b692",
        "value": "fastrun3.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:24+00:00",
        "timestamp": "1777140084",
        "to_ids": true,
        "type": "domain",
        "uuid": "52843906-aa49-4340-ad13-9527da8abd09",
        "value": "fastrun3.ra9ximer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:24+00:00",
        "timestamp": "1777140084",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d966952-9d37-4d28-8281-d2382bd04758",
        "value": "faststep5.mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:24+00:00",
        "timestamp": "1777140084",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3e04832-6719-429a-a018-3e5904f6ddc4",
        "value": "fgeyw.wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:24+00:00",
        "timestamp": "1777140084",
        "to_ids": true,
        "type": "domain",
        "uuid": "25ec1b82-1796-4f9a-93df-6cb324d558e3",
        "value": "fier-cany.po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:24+00:00",
        "timestamp": "1777140084",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bc7d56e-3f1c-480b-9d5d-3ae67caf34bd",
        "value": "fierce-frame.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:25+00:00",
        "timestamp": "1777140085",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6d5eaff-ce98-4a96-bb2f-9e6b8259921f",
        "value": "final-step6.sizar-sniffy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:25+00:00",
        "timestamp": "1777140085",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f0f47ab-0126-43a4-8a65-3cf4fcfce6c6",
        "value": "fire-2m.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:25+00:00",
        "timestamp": "1777140085",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4b7d7b8-77bd-4bc8-99d0-1c4e3a15c184",
        "value": "firmwa7-point.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:25+00:00",
        "timestamp": "1777140085",
        "to_ids": true,
        "type": "domain",
        "uuid": "415a922b-63e9-4919-91c9-e2106b893852",
        "value": "fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:25+00:00",
        "timestamp": "1777140085",
        "to_ids": true,
        "type": "domain",
        "uuid": "44d68d7d-c030-4a2a-bc08-065783aae182",
        "value": "fjtx.miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:25+00:00",
        "timestamp": "1777140086",
        "to_ids": true,
        "type": "domain",
        "uuid": "1de047d9-cd24-407c-a01b-b9227551ae30",
        "value": "fkcrc.bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:26+00:00",
        "timestamp": "1777140086",
        "to_ids": true,
        "type": "domain",
        "uuid": "79508e8d-a2cc-4a45-a60b-f411db47f04b",
        "value": "fkftn4.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:26+00:00",
        "timestamp": "1777140086",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9f0b5c8-87a6-44b2-9c85-eae428a60c0d",
        "value": "fl4rn2-phase.bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:26+00:00",
        "timestamp": "1777140086",
        "to_ids": true,
        "type": "domain",
        "uuid": "433ec156-5730-4c6c-ae52-3389d25469ac",
        "value": "flee-bridge.zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:26+00:00",
        "timestamp": "1777140086",
        "to_ids": true,
        "type": "domain",
        "uuid": "945bc5b5-e2c9-47d3-a6ed-7d6e30c3939d",
        "value": "flee-line.po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:26+00:00",
        "timestamp": "1777140086",
        "to_ids": true,
        "type": "domain",
        "uuid": "77bee492-26c9-4b52-a948-4b32aaca48ce",
        "value": "fleequot.boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:26+00:00",
        "timestamp": "1777140087",
        "to_ids": true,
        "type": "domain",
        "uuid": "7811861c-033f-4cec-aeee-440903dacb3d",
        "value": "flkqe.sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:27+00:00",
        "timestamp": "1777140087",
        "to_ids": true,
        "type": "domain",
        "uuid": "af782227-cfbe-4c7b-ac6e-59fc8f0c3bc3",
        "value": "foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:27+00:00",
        "timestamp": "1777140087",
        "to_ids": true,
        "type": "domain",
        "uuid": "597c3446-cfc0-42cb-8bb1-3805ca8142b3",
        "value": "focusflame.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:27+00:00",
        "timestamp": "1777140087",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fc86b7f-ce0e-4c31-86c7-d900e0ea3cb4",
        "value": "fore0-core.light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:27+00:00",
        "timestamp": "1777140087",
        "to_ids": true,
        "type": "domain",
        "uuid": "3478bb99-77ba-4f16-b8cd-b6f921b048b0",
        "value": "forg-scann.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:27+00:00",
        "timestamp": "1777140087",
        "to_ids": true,
        "type": "domain",
        "uuid": "b346c953-7a9c-4f38-be96-09329c0a39e0",
        "value": "formatsol.7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:28+00:00",
        "timestamp": "1777140088",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b8ac7f0-103a-4d80-bc23-0df48b4246a7",
        "value": "formtrai.rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:28+00:00",
        "timestamp": "1777140088",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e2f8e72-3833-4d13-b380-63b6ac4556fc",
        "value": "forrn7-panel.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:28+00:00",
        "timestamp": "1777140088",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b65a089-158f-4bc0-acc0-9d7cd7752f23",
        "value": "fre1ght-mark.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:28+00:00",
        "timestamp": "1777140088",
        "to_ids": true,
        "type": "domain",
        "uuid": "664f15e6-7d4e-4cc6-96eb-049fb04b1f7e",
        "value": "fresh-app-l1.jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:28+00:00",
        "timestamp": "1777140088",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c2676f7-2be7-4f33-9f10-25d24a2c23d2",
        "value": "fresh-tea4.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:28+00:00",
        "timestamp": "1777140089",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ec7b4f3-98a2-498e-830f-44b0233c6d41",
        "value": "fresh-tea4.import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:29+00:00",
        "timestamp": "1777140089",
        "to_ids": true,
        "type": "domain",
        "uuid": "a80b27a8-0635-43c7-aeb8-61b623d219cc",
        "value": "freshmilk3.sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:29+00:00",
        "timestamp": "1777140089",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b557c7a-5b80-49ae-a1bc-8337ba1ed7de",
        "value": "freshtea4.po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:29+00:00",
        "timestamp": "1777140089",
        "to_ids": true,
        "type": "domain",
        "uuid": "03747a51-fdf9-44c2-9fcd-a2ed8620312f",
        "value": "fujyh.qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:29+00:00",
        "timestamp": "1777140089",
        "to_ids": true,
        "type": "domain",
        "uuid": "1345366c-6898-48c5-a083-f2fb4bbf4aa9",
        "value": "full-b-ox3.buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:29+00:00",
        "timestamp": "1777140089",
        "to_ids": true,
        "type": "domain",
        "uuid": "aca5e9c0-e722-4289-a3f0-e526b0a953b6",
        "value": "full-ro-om4.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:29+00:00",
        "timestamp": "1777140090",
        "to_ids": true,
        "type": "domain",
        "uuid": "581c0007-e4a8-4add-bb6c-7cbdfcba45ab",
        "value": "full-room4.po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:30+00:00",
        "timestamp": "1777140090",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3873a69-8c97-4982-a30e-6c4aa3814f81",
        "value": "fullbox3.ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:30+00:00",
        "timestamp": "1777140090",
        "to_ids": true,
        "type": "domain",
        "uuid": "5497edf8-abd8-48db-8d2c-b9aee83317e3",
        "value": "fullbox3.wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:30+00:00",
        "timestamp": "1777140090",
        "to_ids": true,
        "type": "domain",
        "uuid": "417b4041-3204-4b91-b0be-ce1b9b19f494",
        "value": "fullr-oom4.cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:30+00:00",
        "timestamp": "1777140090",
        "to_ids": true,
        "type": "domain",
        "uuid": "682ffcc9-4a55-4b92-85f7-11f7a591e9a6",
        "value": "fund-ancho.pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:30+00:00",
        "timestamp": "1777140090",
        "to_ids": true,
        "type": "domain",
        "uuid": "57674ec2-0c93-4d96-b064-9812f6acc6d7",
        "value": "g1yph5-switch.qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:30+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca1b7a36-b4ab-49bb-9d71-b5dd84d80997",
        "value": "gdvdjt.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:31+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b702332-d2b7-4590-965c-1fa5b4d40ae1",
        "value": "geld-x5.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:31+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "1735f976-0c7c-43b6-a7a6-afcfa8537350",
        "value": "gene-mod.hai1owhiten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:31+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "647cfe15-bf0c-40d1-b45a-6adc7900efb7",
        "value": "genom-node.wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:31+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "47ae75ed-b1ac-442d-989d-219987723214",
        "value": "gentl-snow.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:31+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "e49e7a81-f867-490b-92be-3550c6d6489d",
        "value": "geo-1atti.9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:31+00:00",
        "timestamp": "1777140091",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c97bd95-9062-4991-be0b-346dad48b10f",
        "value": "geo-1c3.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:32+00:00",
        "timestamp": "1777140092",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbac5019-9ade-49b0-a93b-19a34c9a4b6d",
        "value": "geo-3mbe.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:32+00:00",
        "timestamp": "1777140092",
        "to_ids": true,
        "type": "domain",
        "uuid": "4aacb532-3041-42f5-ad2e-43f8e9ff1a97",
        "value": "geo-byt3.extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:32+00:00",
        "timestamp": "1777140092",
        "to_ids": true,
        "type": "domain",
        "uuid": "79bf333d-fc12-4e99-ac26-42d4270b9226",
        "value": "geo-illurn.dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:32+00:00",
        "timestamp": "1777140092",
        "to_ids": true,
        "type": "domain",
        "uuid": "04de5afc-0190-4913-841b-4c24129ac8ba",
        "value": "geo-pol4r.po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:32+00:00",
        "timestamp": "1777140092",
        "to_ids": true,
        "type": "domain",
        "uuid": "79ac2f6d-6353-49cd-8c03-7ffb04d9e4a8",
        "value": "geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:32+00:00",
        "timestamp": "1777140093",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3c25b4c-cd4f-4683-a77e-fab3f0e3744a",
        "value": "gf2rfd.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:33+00:00",
        "timestamp": "1777140093",
        "to_ids": true,
        "type": "domain",
        "uuid": "40ed3318-bf40-4c68-81ad-f8fd3e6f5ef3",
        "value": "gfpb.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:33+00:00",
        "timestamp": "1777140093",
        "to_ids": true,
        "type": "domain",
        "uuid": "aea5c2c9-6b2c-4629-94ab-41e7cbfa21c0",
        "value": "ggtqa.qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:33+00:00",
        "timestamp": "1777140093",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4644e65-daa2-4485-815a-e3cf8b0ef1cc",
        "value": "glassb-otl2.mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:33+00:00",
        "timestamp": "1777140093",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ea4c7f6-e914-4817-82da-b367b6a61b68",
        "value": "glmu.bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:33+00:00",
        "timestamp": "1777140093",
        "to_ids": true,
        "type": "domain",
        "uuid": "20d49033-8703-4c75-bf5a-e6cff84dc58e",
        "value": "glos-rep.to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:33+00:00",
        "timestamp": "1777140094",
        "to_ids": true,
        "type": "domain",
        "uuid": "07c9b65e-8fd8-46dc-a554-e53aadd67098",
        "value": "glossink.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:34+00:00",
        "timestamp": "1777140094",
        "to_ids": true,
        "type": "domain",
        "uuid": "61cb4d6b-08c8-4342-a4e8-2d3517f7bb3a",
        "value": "godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:34+00:00",
        "timestamp": "1777140094",
        "to_ids": true,
        "type": "domain",
        "uuid": "256a5eb9-2d6b-4a2a-b50b-1df6210c837e",
        "value": "gold-2.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:34+00:00",
        "timestamp": "1777140094",
        "to_ids": true,
        "type": "domain",
        "uuid": "91463b15-12c4-4e75-867a-7e9d4f298024",
        "value": "gold-2.jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:34+00:00",
        "timestamp": "1777140094",
        "to_ids": true,
        "type": "domain",
        "uuid": "61a3a2ba-8f2d-47b8-ab65-f58e24973da1",
        "value": "gold-4m.melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:34+00:00",
        "timestamp": "1777140094",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d21adb6-04b2-4e17-9e94-4472418f0f70",
        "value": "gold-4z.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:34+00:00",
        "timestamp": "1777140095",
        "to_ids": true,
        "type": "domain",
        "uuid": "80b347f1-e20a-4248-b509-d1e9f0747003",
        "value": "gold-5.archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:35+00:00",
        "timestamp": "1777140095",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dd0d303-1a76-4eb9-bd9e-85f99e967ed3",
        "value": "gold-5b.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:35+00:00",
        "timestamp": "1777140095",
        "to_ids": true,
        "type": "domain",
        "uuid": "766e0f07-45a3-42be-8a98-cc77487282dd",
        "value": "gold-fire-9w.fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:35+00:00",
        "timestamp": "1777140095",
        "to_ids": true,
        "type": "domain",
        "uuid": "00e55aae-a41f-41c9-b5ce-4efc2927610a",
        "value": "gold-fish4.to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:35+00:00",
        "timestamp": "1777140095",
        "to_ids": true,
        "type": "domain",
        "uuid": "89346a98-c0f3-4156-af2a-64a247ff05b7",
        "value": "gold-land-8x.miv6soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:35+00:00",
        "timestamp": "1777140095",
        "to_ids": true,
        "type": "domain",
        "uuid": "b18f47fd-397a-4377-8297-c03e264298b0",
        "value": "gold-mond-2m.there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:35+00:00",
        "timestamp": "1777140096",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3c20efa-214b-4353-99ff-1744eaa62c27",
        "value": "gold-mond-9z.cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:36+00:00",
        "timestamp": "1777140096",
        "to_ids": true,
        "type": "domain",
        "uuid": "f476de37-92f2-4eab-8231-8206b5be64c5",
        "value": "gold-wald-1v.limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:36+00:00",
        "timestamp": "1777140096",
        "to_ids": true,
        "type": "domain",
        "uuid": "68e1b793-f0a6-40e6-81b0-bf1c0d9d81ce",
        "value": "goldfi-sh4.basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:36+00:00",
        "timestamp": "1777140096",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b7d95d3-3d14-449a-a8b0-879256332734",
        "value": "good-n-ews1.eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:36+00:00",
        "timestamp": "1777140096",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c9ead50-bd69-41ff-b941-b50aac7029cb",
        "value": "good-news1.kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:36+00:00",
        "timestamp": "1777140096",
        "to_ids": true,
        "type": "domain",
        "uuid": "f909cb47-0662-4990-89dd-5ffddcd966a2",
        "value": "gooditem2.qi5maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:36+00:00",
        "timestamp": "1777140097",
        "to_ids": true,
        "type": "domain",
        "uuid": "6be6d2dd-00a3-4c4c-a8eb-69144cf56c91",
        "value": "goodnews1.wi3sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:37+00:00",
        "timestamp": "1777140097",
        "to_ids": true,
        "type": "domain",
        "uuid": "d51638b2-d229-4323-b78f-b7837ece3108",
        "value": "gpfour4.miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:37+00:00",
        "timestamp": "1777140097",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd0d2b00-a34c-4b66-b296-e3f546947e57",
        "value": "gr0vvt1-port.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:37+00:00",
        "timestamp": "1777140097",
        "to_ids": true,
        "type": "domain",
        "uuid": "39edb58d-4b6d-4f3f-97fa-40cfd9ccb71d",
        "value": "gr1d1-vector.to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:37+00:00",
        "timestamp": "1777140097",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb36e2d6-8898-4cd5-810a-daf5a7ff738e",
        "value": "gr4nd-vault.ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:37+00:00",
        "timestamp": "1777140097",
        "to_ids": true,
        "type": "domain",
        "uuid": "14888da4-6375-4965-93c7-f65615118f4e",
        "value": "grabs5tatus.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:37+00:00",
        "timestamp": "1777140098",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3d38a69-1a6f-400c-a721-e54fc18f1cf1",
        "value": "gran-sync.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:38+00:00",
        "timestamp": "1777140098",
        "to_ids": true,
        "type": "domain",
        "uuid": "1974876c-b78a-4d7f-aa1a-19b19cfe2c70",
        "value": "granitcuriou.wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:38+00:00",
        "timestamp": "1777140098",
        "to_ids": true,
        "type": "domain",
        "uuid": "e64e83d2-6f2e-454c-be9a-77d9a9249843",
        "value": "gre-enleaf2.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:38+00:00",
        "timestamp": "1777140098",
        "to_ids": true,
        "type": "domain",
        "uuid": "32e69c73-1ab0-496d-b6c2-be7bdee20bc7",
        "value": "greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:38+00:00",
        "timestamp": "1777140098",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee547202-3de2-4bb9-be0c-6d3f262eeea6",
        "value": "greenlamp2.9zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:38+00:00",
        "timestamp": "1777140098",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1d699c8-01e1-4cfe-9214-25bbb8b272be",
        "value": "grmj9oyb.blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:38+00:00",
        "timestamp": "1777140099",
        "to_ids": true,
        "type": "domain",
        "uuid": "4efff95c-152b-47f4-a435-fae38818b6e8",
        "value": "grow9-craft.autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:39+00:00",
        "timestamp": "1777140099",
        "to_ids": true,
        "type": "domain",
        "uuid": "063165fb-f239-4e3d-b2a6-27ff1afc85be",
        "value": "growthcircui.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:39+00:00",
        "timestamp": "1777140099",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbddff58-4f6c-4d21-b5b0-f37f402c75ce",
        "value": "gsfyi.bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:39+00:00",
        "timestamp": "1777140099",
        "to_ids": true,
        "type": "domain",
        "uuid": "d83641a7-50a2-464e-b7c2-6ee3a6ddf26c",
        "value": "gu1de-signal.drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:39+00:00",
        "timestamp": "1777140099",
        "to_ids": true,
        "type": "domain",
        "uuid": "59d28cdf-63dc-434f-985c-b4c7b0018fcd",
        "value": "guardtimb.kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:39+00:00",
        "timestamp": "1777140099",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccc332e7-5330-422d-879f-ca616cc73947",
        "value": "gufnz2.5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:40+00:00",
        "timestamp": "1777140100",
        "to_ids": true,
        "type": "domain",
        "uuid": "fad38bdb-1627-4167-aba3-58ed45255466",
        "value": "guidelocal.matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:40+00:00",
        "timestamp": "1777140100",
        "to_ids": true,
        "type": "domain",
        "uuid": "579f8a8e-f261-4c0e-8e10-1b014584971d",
        "value": "gv6cwq.extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:40+00:00",
        "timestamp": "1777140100",
        "to_ids": true,
        "type": "domain",
        "uuid": "fffcfa2c-bd6b-4759-99e0-cc5f8cd21572",
        "value": "gxbpjafl.boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:40+00:00",
        "timestamp": "1777140100",
        "to_ids": true,
        "type": "domain",
        "uuid": "776e7251-1143-4c12-b73e-9df6a2d9113b",
        "value": "handlerequi.mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:40+00:00",
        "timestamp": "1777140100",
        "to_ids": true,
        "type": "domain",
        "uuid": "bee62bbd-dbfb-411f-a6da-6a86bfb18464",
        "value": "hardbox5.sylom5er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:40+00:00",
        "timestamp": "1777140101",
        "to_ids": true,
        "type": "domain",
        "uuid": "5416df49-8b4c-4eb9-bba5-8755a03bfd15",
        "value": "hauinn.to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:41+00:00",
        "timestamp": "1777140101",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcd2999b-2446-435b-b028-4c10a32f03d7",
        "value": "haul-cache.de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:41+00:00",
        "timestamp": "1777140101",
        "to_ids": true,
        "type": "domain",
        "uuid": "1053155f-6fed-44ec-85de-7ea340320f03",
        "value": "haul-sheet.wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:41+00:00",
        "timestamp": "1777140101",
        "to_ids": true,
        "type": "domain",
        "uuid": "38ca2efd-3097-47cc-84e8-d6ea6b1e755e",
        "value": "haus-1.cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:41+00:00",
        "timestamp": "1777140101",
        "to_ids": true,
        "type": "domain",
        "uuid": "426332e2-d0fc-4d36-8bfe-a3e9c57f8114",
        "value": "haus-1.melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:41+00:00",
        "timestamp": "1777140101",
        "to_ids": true,
        "type": "domain",
        "uuid": "643bca61-be66-4a2c-91a1-99b35b33848d",
        "value": "haus-2.archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:41+00:00",
        "timestamp": "1777140102",
        "to_ids": true,
        "type": "domain",
        "uuid": "8614edce-6b05-40a3-aa10-19d36c8fb274",
        "value": "haus-4.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:42+00:00",
        "timestamp": "1777140102",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6b3350e-086a-4af0-8694-18c5852e1496",
        "value": "haus-5.geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:42+00:00",
        "timestamp": "1777140102",
        "to_ids": true,
        "type": "domain",
        "uuid": "32f42305-5956-4a0c-b138-6f66f7d5dd6b",
        "value": "haus-5.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:42+00:00",
        "timestamp": "1777140102",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfd82dab-a742-4180-a088-21f4b9575db2",
        "value": "haus-7.dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:42+00:00",
        "timestamp": "1777140102",
        "to_ids": true,
        "type": "domain",
        "uuid": "dafe4b6c-a699-4036-b86f-9a2bb59331fe",
        "value": "haus-9.there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:42+00:00",
        "timestamp": "1777140102",
        "to_ids": true,
        "type": "domain",
        "uuid": "99ad150a-57d1-4196-b0a5-b5f582efe68c",
        "value": "hblrl.pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:42+00:00",
        "timestamp": "1777140103",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f5f9f69-222f-4cb3-976c-7758da85c9e3",
        "value": "hdf358xa.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:43+00:00",
        "timestamp": "1777140103",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8239e91-d38c-4f63-a295-c18221f92e00",
        "value": "heavy-lo-ad1.buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:43+00:00",
        "timestamp": "1777140103",
        "to_ids": true,
        "type": "domain",
        "uuid": "19936629-2546-454d-a9fa-65b27415c789",
        "value": "heavy-load1.wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:43+00:00",
        "timestamp": "1777140103",
        "to_ids": true,
        "type": "domain",
        "uuid": "08501d04-ff79-44bf-9f7c-bc5b17551cba",
        "value": "heavyload1.ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:43+00:00",
        "timestamp": "1777140103",
        "to_ids": true,
        "type": "domain",
        "uuid": "d02a8be9-7c6b-46a3-a7e8-f6b5f2642bab",
        "value": "heicn.wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:43+00:00",
        "timestamp": "1777140103",
        "to_ids": true,
        "type": "domain",
        "uuid": "16a344f6-3f3e-437c-a35a-62edb715c8e9",
        "value": "hf89cj2.nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:43+00:00",
        "timestamp": "1777140104",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fbe1ab8-046c-4a57-9e0d-dafceec386de",
        "value": "hiddqueue.histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:44+00:00",
        "timestamp": "1777140104",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a82c11-79cf-4d45-b5d2-728e3027b1d0",
        "value": "high-mount3.lucernemo7al.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:44+00:00",
        "timestamp": "1777140104",
        "to_ids": true,
        "type": "domain",
        "uuid": "8880ee4b-7fb6-46c7-adf4-baa9ec6b8710",
        "value": "high-roof5.hai1owhiten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:44+00:00",
        "timestamp": "1777140104",
        "to_ids": true,
        "type": "domain",
        "uuid": "0edac02d-72f6-45ce-874e-343f7dd54f8e",
        "value": "hight-ree6.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:44+00:00",
        "timestamp": "1777140104",
        "to_ids": true,
        "type": "domain",
        "uuid": "c18e2c07-0f3d-4b77-803c-452f890da311",
        "value": "hillrain.wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:44+00:00",
        "timestamp": "1777140104",
        "to_ids": true,
        "type": "domain",
        "uuid": "833e2df9-bac5-4901-a386-0db3ac02fe05",
        "value": "histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:45+00:00",
        "timestamp": "1777140105",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2342a86-1af4-4c00-b443-df1b68337814",
        "value": "histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:45+00:00",
        "timestamp": "1777140105",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d3ca2e2-7de8-410c-ab14-72ab5eac5be3",
        "value": "hitchb1ame.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:45+00:00",
        "timestamp": "1777140105",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a1b4f7e-45c5-4048-bf2c-ec1396512650",
        "value": "hkez.de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:45+00:00",
        "timestamp": "1777140105",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ca4d083-9173-47e4-8bcd-f8d62e91d8ba",
        "value": "hmhfs.9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:45+00:00",
        "timestamp": "1777140105",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd243132-d53c-4011-9337-cb5ed363c2e0",
        "value": "holz-5.ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:45+00:00",
        "timestamp": "1777140106",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ebad0ab-84c1-4f98-be12-63f66d567587",
        "value": "holz-8m.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:46+00:00",
        "timestamp": "1777140106",
        "to_ids": true,
        "type": "domain",
        "uuid": "338d2afe-7d42-4eec-a436-eb4b0ce02b7e",
        "value": "holz-baum-3.miv6soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:46+00:00",
        "timestamp": "1777140106",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e1a535f-9f4c-4c60-83d5-8c954c23c488",
        "value": "holz-baum-4.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:46+00:00",
        "timestamp": "1777140106",
        "to_ids": true,
        "type": "domain",
        "uuid": "98eb8786-ded9-487c-b6de-6839cd861a69",
        "value": "holz-baum-4.godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:46+00:00",
        "timestamp": "1777140106",
        "to_ids": true,
        "type": "domain",
        "uuid": "925a406a-43e4-4b92-b83f-41672f4362bb",
        "value": "holz-baum-8.ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:46+00:00",
        "timestamp": "1777140106",
        "to_ids": true,
        "type": "domain",
        "uuid": "a31b7f94-d92a-4dec-b31c-259efd0440a9",
        "value": "holz-berg-4b.slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:46+00:00",
        "timestamp": "1777140107",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ecd642b-4925-4807-a2d0-ffc2e72ff0e0",
        "value": "holz-berg-5.presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:47+00:00",
        "timestamp": "1777140107",
        "to_ids": true,
        "type": "domain",
        "uuid": "e619af8e-c7eb-422b-a0b9-aed3ff36c034",
        "value": "holz-v1.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:47+00:00",
        "timestamp": "1777140107",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6cbd67b-f087-4e7b-8961-4d37a075549d",
        "value": "home-base1.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:47+00:00",
        "timestamp": "1777140107",
        "to_ids": true,
        "type": "domain",
        "uuid": "217a180e-aa02-4310-a2bb-57636b54aad7",
        "value": "home-tray1.mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:47+00:00",
        "timestamp": "1777140107",
        "to_ids": true,
        "type": "domain",
        "uuid": "40fd9fe8-b553-45e1-bb42-3d0e2cc12789",
        "value": "hot-s-oup3.import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:48+00:00",
        "timestamp": "1777140108",
        "to_ids": true,
        "type": "domain",
        "uuid": "b70187ba-b993-4826-99e7-2a053bbc1d04",
        "value": "hot-so-up3.po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:48+00:00",
        "timestamp": "1777140108",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd42af32-2a7c-4d78-837d-623ef6bbd020",
        "value": "hot-soup3.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:48+00:00",
        "timestamp": "1777140108",
        "to_ids": true,
        "type": "domain",
        "uuid": "6793668b-5618-42fe-bb63-92238c49ded7",
        "value": "hot-tea4.sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:48+00:00",
        "timestamp": "1777140109",
        "to_ids": true,
        "type": "domain",
        "uuid": "77f6bfaf-866c-405f-9b86-c3dea2e6a247",
        "value": "hot-tea4.wi2sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:49+00:00",
        "timestamp": "1777140109",
        "to_ids": true,
        "type": "domain",
        "uuid": "d18e9dcd-8cbb-46d9-8da4-4ceea2b6d1ff",
        "value": "hottea3.jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:49+00:00",
        "timestamp": "1777140109",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0e7a8f2-d5fb-4e1e-9ddb-161026b4e431",
        "value": "html.dark-hypnosis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:49+00:00",
        "timestamp": "1777140109",
        "to_ids": true,
        "type": "domain",
        "uuid": "621e09b7-4d2e-4e7c-9705-ef0f63177f43",
        "value": "hublistener.sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:49+00:00",
        "timestamp": "1777140109",
        "to_ids": true,
        "type": "domain",
        "uuid": "c88e4c53-b65a-4b1e-a72e-d498c77a39c1",
        "value": "hubspruc.ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:49+00:00",
        "timestamp": "1777140109",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b0a3165-f5ef-4304-984c-5918a338fc01",
        "value": "hyp3-plate.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:49+00:00",
        "timestamp": "1777140110",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd426801-ce78-48f1-aae2-7b46ecfc54cb",
        "value": "hyper-5ystem.po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:50+00:00",
        "timestamp": "1777140110",
        "to_ids": true,
        "type": "domain",
        "uuid": "99054611-dd49-4194-9612-3029d21d822d",
        "value": "hyper-inv0ice.miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:50+00:00",
        "timestamp": "1777140110",
        "to_ids": true,
        "type": "domain",
        "uuid": "306fc09f-3436-4dd7-a604-ff69a6696ebc",
        "value": "hyper-r3fin.through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:50+00:00",
        "timestamp": "1777140110",
        "to_ids": true,
        "type": "domain",
        "uuid": "397d99c6-bf77-4511-b9e6-f70fb8d5f34a",
        "value": "hyper8-signal.2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:50+00:00",
        "timestamp": "1777140110",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dcaffc1-f9d4-4767-aac9-165dca31b3df",
        "value": "hyperpul.to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:50+00:00",
        "timestamp": "1777140110",
        "to_ids": true,
        "type": "domain",
        "uuid": "57a1dd6c-958c-45ad-9444-4bac0166750d",
        "value": "idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:50+00:00",
        "timestamp": "1777140111",
        "to_ids": true,
        "type": "domain",
        "uuid": "9674b527-79a0-4031-bf61-4b40918e5212",
        "value": "ifzyk85.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:51+00:00",
        "timestamp": "1777140111",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d28d960-b451-4383-bfe1-8d7e60f3238b",
        "value": "igix.kymle2rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:51+00:00",
        "timestamp": "1777140111",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce61700e-801c-4ded-ba09-d6c0c2c34d0d",
        "value": "ihsk.de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:51+00:00",
        "timestamp": "1777140111",
        "to_ids": true,
        "type": "domain",
        "uuid": "28113c21-f9dc-4e83-96f1-14b02624fcda",
        "value": "ik63uk.7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:51+00:00",
        "timestamp": "1777140111",
        "to_ids": true,
        "type": "domain",
        "uuid": "610d89ac-9ee2-4922-8b0b-32558aad6886",
        "value": "import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:51+00:00",
        "timestamp": "1777140111",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8ee1738-0fbc-4dbc-bb82-457597fa6a51",
        "value": "inde-fer.protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:51+00:00",
        "timestamp": "1777140112",
        "to_ids": true,
        "type": "domain",
        "uuid": "66086c87-688d-40f9-b27b-29e4f81c840b",
        "value": "indexwho.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:52+00:00",
        "timestamp": "1777140112",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4b2b404-49bf-4599-bde3-37f381185395",
        "value": "infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:52+00:00",
        "timestamp": "1777140112",
        "to_ids": true,
        "type": "domain",
        "uuid": "9da3336c-8e93-4fb2-bf32-51465d18657d",
        "value": "inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:52+00:00",
        "timestamp": "1777140112",
        "to_ids": true,
        "type": "domain",
        "uuid": "05286756-d979-4939-ad90-4b1b4f32a26f",
        "value": "inkraven.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:52+00:00",
        "timestamp": "1777140112",
        "to_ids": true,
        "type": "domain",
        "uuid": "95f80870-ae2b-4e5a-8824-f678eefe2fa8",
        "value": "innercoupon.foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:52+00:00",
        "timestamp": "1777140112",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf694235-3f05-4c3e-b06b-635ba9b1839c",
        "value": "invbro.kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:52+00:00",
        "timestamp": "1777140113",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5d28f1b-c24a-4c2f-ad35-d53988f83c1d",
        "value": "iron-8v.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:53+00:00",
        "timestamp": "1777140113",
        "to_ids": true,
        "type": "domain",
        "uuid": "06ff2b3a-2b5a-4262-a859-1093b9499a72",
        "value": "iron-9v.melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:53+00:00",
        "timestamp": "1777140113",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b8acfb2-e5f6-414d-aa69-2b409b11761f",
        "value": "iron-mond-7x.archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:53+00:00",
        "timestamp": "1777140113",
        "to_ids": true,
        "type": "domain",
        "uuid": "b723bf8f-35a9-46ad-aa6a-6aa099d836c6",
        "value": "iron-star-2n.caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:53+00:00",
        "timestamp": "1777140113",
        "to_ids": true,
        "type": "domain",
        "uuid": "353d207a-b846-4acd-bebf-c3f2422c7a6a",
        "value": "iron-star-3.dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:53+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "43e14b3f-5baf-4444-9058-1c9357822629",
        "value": "iron-zeit-8.inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:54+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc40b230-8fd4-41a1-b39b-40f4a315026d",
        "value": "iz7v.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:54+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "82fa6937-ebe4-49d1-afc6-be649c872401",
        "value": "jakej.ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:54+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "2777e69d-a47e-45f8-be0e-f040bc851d01",
        "value": "jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:54+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "7513a775-f8e7-4e84-a4b5-e6a854c593f5",
        "value": "jcgopydo.2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:54+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "18b2dfd5-256e-47a1-af52-184d29feee5d",
        "value": "jch52q.po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:54+00:00",
        "timestamp": "1777140114",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd1cc9c-c2bd-4c82-8d93-c884365aa261",
        "value": "jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140115",
        "to_ids": true,
        "type": "domain",
        "uuid": "622f56f9-850e-469d-8405-1d5f0ba83ef6",
        "value": "jkdraj.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140115",
        "to_ids": true,
        "type": "domain",
        "uuid": "0452b821-a5c2-40e1-ae64-175c0a8883e3",
        "value": "junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140115",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8902a7b-a602-4d24-ad04-e351cca5c901",
        "value": "just-ta-lk5.kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140115",
        "to_ids": true,
        "type": "domain",
        "uuid": "d66d9f00-a2f9-4be6-9de2-7865a0405a13",
        "value": "just-ta-lk5.wi3sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140115",
        "to_ids": true,
        "type": "domain",
        "uuid": "affcb8c2-c45b-4eca-8668-0743c99f2639",
        "value": "justta-lk5.eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140115",
        "to_ids": true,
        "type": "domain",
        "uuid": "0587aa29-5deb-471b-9505-93d490bc28d2",
        "value": "jz39wex.boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:55+00:00",
        "timestamp": "1777140116",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc8e918a-2e77-4a39-bb98-37a99eeaedbf",
        "value": "jz8ef5.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:56+00:00",
        "timestamp": "1777140116",
        "to_ids": true,
        "type": "domain",
        "uuid": "03e6cd12-8587-4bf2-9af5-961a2645cc95",
        "value": "jzojka.pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:56+00:00",
        "timestamp": "1777140116",
        "to_ids": true,
        "type": "domain",
        "uuid": "aad99cbb-f5d1-4963-9e49-1e68e2b8cddd",
        "value": "kalt-2c.presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:56+00:00",
        "timestamp": "1777140116",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd221f45-8537-4a25-835a-19fb2dbe7b17",
        "value": "kalt-4.ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:56+00:00",
        "timestamp": "1777140116",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce940787-b7c4-4ca5-bd0d-00a3f13ed66b",
        "value": "kalt-6.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:56+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6af1ed9-da9a-476e-8c7e-5f9fe014f624",
        "value": "kalt-9.dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:57+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc535873-300b-4514-81df-1074bbb3bc9f",
        "value": "kalt-berg-6.accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:57+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "803ca967-ddd6-4e96-8c94-85271e51fb34",
        "value": "kalt-m5.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:57+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "393ecaf2-4d5e-474c-b329-5e385ab6c4a9",
        "value": "kalt-mond-8.melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:57+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "2841c487-2f3f-4153-af12-c27948587e1f",
        "value": "kalt-wald-8.cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:57+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "995fe426-518d-4709-8c26-1977fb01d6de",
        "value": "kchjc5x.pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:57+00:00",
        "timestamp": "1777140117",
        "to_ids": true,
        "type": "domain",
        "uuid": "938dea8f-1da8-4f58-b88e-71ba955e5e34",
        "value": "ke3srk.dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:58+00:00",
        "timestamp": "1777140118",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb65630-ba14-45dc-9c78-65d1460c5b2a",
        "value": "kel-marken.dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:58+00:00",
        "timestamp": "1777140118",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1258edd-4927-4fdc-b422-93cf242cf163",
        "value": "kelcoreos9.dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:58+00:00",
        "timestamp": "1777140118",
        "to_ids": true,
        "type": "domain",
        "uuid": "af0d760f-c933-4f2b-9114-7ba37c6776aa",
        "value": "kelmarkis.bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:58+00:00",
        "timestamp": "1777140118",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d61a958-6c27-4cf9-9ed7-2d4fd3f070a8",
        "value": "kelmeshos7.extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:58+00:00",
        "timestamp": "1777140118",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf630da9-d248-46f5-9e50-6459b48b6e80",
        "value": "kelvaleum.boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:58+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ee596ee-f4fb-4779-b6c6-65ed264754ed",
        "value": "kelven9et.bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:59+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe6d54df-6ca0-48ec-89e1-132f5d34d9fc",
        "value": "kionap.zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:59+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "a093c319-09fa-4e01-bab2-332de7e4f534",
        "value": "kkdho.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:59+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4da131c-05f4-49b1-ae57-b93b57c00f1b",
        "value": "kpelhw.kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:59+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "8011c83f-0065-4fe8-b201-ff38a484610c",
        "value": "ku193bt.wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:59+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2656308-4c76-41c3-a19e-8a283230297e",
        "value": "kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:01:59+00:00",
        "timestamp": "1777140119",
        "to_ids": true,
        "type": "domain",
        "uuid": "580812fe-0d02-4faf-82ec-16a885fdf72b",
        "value": "kymle2rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:00+00:00",
        "timestamp": "1777140120",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce0a16e0-dbdf-4619-98f8-a6e222dbc711",
        "value": "kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:00+00:00",
        "timestamp": "1777140120",
        "to_ids": true,
        "type": "domain",
        "uuid": "f38a747f-cc10-4cf4-9524-7349ac9205fc",
        "value": "kymle4rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:00+00:00",
        "timestamp": "1777140120",
        "to_ids": true,
        "type": "domain",
        "uuid": "faa60e11-4d72-4c3b-8ca4-616b611cb6b3",
        "value": "kymle5rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:00+00:00",
        "timestamp": "1777140120",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f7024b9-283a-42e6-be6c-7d4e67d6976b",
        "value": "kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:00+00:00",
        "timestamp": "1777140120",
        "to_ids": true,
        "type": "domain",
        "uuid": "94ec2725-6be7-45d2-bdbf-378d145ae56e",
        "value": "kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140121",
        "to_ids": true,
        "type": "domain",
        "uuid": "feb350e7-9825-4bee-8d15-bfe5523b022c",
        "value": "kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140121",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2107089-76c5-4d34-b1c6-6ad33a35393b",
        "value": "kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140121",
        "to_ids": true,
        "type": "domain",
        "uuid": "47012dc5-eab5-4026-a76d-718ee6a24813",
        "value": "l1ch-mesh.rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140121",
        "to_ids": true,
        "type": "domain",
        "uuid": "f91cc6be-1c2d-4ef4-9f7a-b0e1216f80bf",
        "value": "labelparc.clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140121",
        "to_ids": true,
        "type": "domain",
        "uuid": "7522945a-7051-49da-9c92-e1588e6c9a91",
        "value": "land-1.godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140121",
        "to_ids": true,
        "type": "domain",
        "uuid": "0460be64-c16c-42a5-87e6-4219f9907ee1",
        "value": "land-2.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:01+00:00",
        "timestamp": "1777140122",
        "to_ids": true,
        "type": "domain",
        "uuid": "0094144d-f445-49c2-86ae-8662ea150edf",
        "value": "land-9.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:02+00:00",
        "timestamp": "1777140122",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c8d2c04-b953-4806-bfa0-1108dda927df",
        "value": "laryngol-needle.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:02+00:00",
        "timestamp": "1777140122",
        "to_ids": true,
        "type": "domain",
        "uuid": "daed59f7-30bc-4379-8bc5-1a553a69a4e4",
        "value": "lastpa-ge2.sylom5er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:02+00:00",
        "timestamp": "1777140122",
        "to_ids": true,
        "type": "domain",
        "uuid": "20cb1e7c-39c1-405f-bbba-f0e1e2ba9ce2",
        "value": "lbwtqscv.arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:02+00:00",
        "timestamp": "1777140122",
        "to_ids": true,
        "type": "domain",
        "uuid": "510bfdf5-27b9-47e0-87c0-fc23682e7cf3",
        "value": "lgjov.sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:02+00:00",
        "timestamp": "1777140122",
        "to_ids": true,
        "type": "domain",
        "uuid": "0195b98f-5073-402c-b3be-47e1a5d2b790",
        "value": "light-mo-on6.qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:02+00:00",
        "timestamp": "1777140123",
        "to_ids": true,
        "type": "domain",
        "uuid": "45e0d003-f9a0-4490-a026-b954c67ea963",
        "value": "light-mo-on6.sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:03+00:00",
        "timestamp": "1777140123",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ee913fc-1a5f-4a5b-a9bb-c9d9a3fa16b1",
        "value": "light-pa-ck2.ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:03+00:00",
        "timestamp": "1777140123",
        "to_ids": true,
        "type": "domain",
        "uuid": "c409e97d-f171-4248-a5e5-23f6dfe810fa",
        "value": "light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:03+00:00",
        "timestamp": "1777140123",
        "to_ids": true,
        "type": "domain",
        "uuid": "e688621b-5a8a-40ce-b3a3-2f3fef5433d9",
        "value": "lightmoon6.zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:03+00:00",
        "timestamp": "1777140123",
        "to_ids": true,
        "type": "domain",
        "uuid": "8acd0659-3dfe-4452-9d65-90360875b53d",
        "value": "lightp-ack2.buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:03+00:00",
        "timestamp": "1777140124",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdf23f88-e10a-477b-a049-0b1335f4bb6f",
        "value": "lightp-ack2.wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:04+00:00",
        "timestamp": "1777140124",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee751a15-cadb-4a19-952d-a4807e39b75d",
        "value": "lightp0isoner.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:04+00:00",
        "timestamp": "1777140124",
        "to_ids": true,
        "type": "domain",
        "uuid": "199d216c-d016-4882-9304-8467af6d4e22",
        "value": "limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:04+00:00",
        "timestamp": "1777140124",
        "to_ids": true,
        "type": "domain",
        "uuid": "763ea4f3-d7de-405a-b206-e5b5990700bd",
        "value": "link6-switch.to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:04+00:00",
        "timestamp": "1777140124",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e8a20bb-0548-4a3b-b456-9289bf4998f5",
        "value": "ljzoiu.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:04+00:00",
        "timestamp": "1777140124",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7aef75-7dac-4573-8ce4-dc139244d8ed",
        "value": "lmk4z.through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:04+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "a30ac3d0-f315-498e-b7c5-d4b6a41e48cc",
        "value": "loadermin.wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:05+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c7ae29f-301f-4504-a54d-d61f33e8aad8",
        "value": "loc46-cache.dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:05+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc9a7eba-b5c6-4d81-b365-16ff5e4e8638",
        "value": "locallan.de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:05+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "afd27983-9314-466e-94e0-39035dcf059c",
        "value": "long-be-lt3.arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:05+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "92d3f45e-c293-42fe-8e55-55d243c3d8dd",
        "value": "long-belt3.bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:05+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e99e1cc-5794-4234-9e50-6efb483cb3a9",
        "value": "long-voracious.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:05+00:00",
        "timestamp": "1777140125",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8fd7d0e-0fe5-4060-b2b2-9eedc913aad5",
        "value": "longbelt3.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:06+00:00",
        "timestamp": "1777140126",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f1a004b-5700-41e2-9533-c033af669a30",
        "value": "lopamp4.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:06+00:00",
        "timestamp": "1777140126",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd423590-99fd-43fa-8bb7-23a10df10af2",
        "value": "lqfrhvos.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:06+00:00",
        "timestamp": "1777140126",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b2e53da-e4f3-4ced-a699-7f5de67309a5",
        "value": "lumcrest0is.over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:06+00:00",
        "timestamp": "1777140126",
        "to_ids": true,
        "type": "domain",
        "uuid": "36df7f0f-58bb-4804-a749-0e3137f64f8b",
        "value": "lumdraal1.kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:06+00:00",
        "timestamp": "1777140126",
        "to_ids": true,
        "type": "domain",
        "uuid": "38d79c14-5259-41e3-bbcb-eb644f9c5926",
        "value": "lumlinea.7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:06+00:00",
        "timestamp": "1777140127",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e3a5116-d3fa-4430-96b2-ad61760bbb3d",
        "value": "lummarkar5.blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:07+00:00",
        "timestamp": "1777140127",
        "to_ids": true,
        "type": "domain",
        "uuid": "4794d63a-60d7-4714-9b7f-c176094fd1b6",
        "value": "lumvenex2.to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:07+00:00",
        "timestamp": "1777140127",
        "to_ids": true,
        "type": "domain",
        "uuid": "8384495c-2f55-4151-948b-56d2a7328839",
        "value": "luna-nod.dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:07+00:00",
        "timestamp": "1777140127",
        "to_ids": true,
        "type": "domain",
        "uuid": "8298188c-02a6-401c-836d-eca097dc773e",
        "value": "lunarorganize.polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:07+00:00",
        "timestamp": "1777140127",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdce518f-e50e-455d-b237-fbe93018284e",
        "value": "lw92.kymle2rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:07+00:00",
        "timestamp": "1777140127",
        "to_ids": true,
        "type": "domain",
        "uuid": "8340fdee-1e7e-4de0-b61a-e7ebd38287aa",
        "value": "m17e.rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:07+00:00",
        "timestamp": "1777140128",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c5c1f41-b99f-4d20-b799-03bd56ec6d35",
        "value": "m3rg-watch.kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:08+00:00",
        "timestamp": "1777140128",
        "to_ids": true,
        "type": "domain",
        "uuid": "62f2e8ae-51b2-4900-84ca-461634956f05",
        "value": "m46v.junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:08+00:00",
        "timestamp": "1777140128",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d532548-53bb-4603-a0d8-5d44683beff5",
        "value": "ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:08+00:00",
        "timestamp": "1777140128",
        "to_ids": true,
        "type": "domain",
        "uuid": "430110d5-9da4-423b-94f3-d86be33d80cb",
        "value": "main-goal3.resolut-revening.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:08+00:00",
        "timestamp": "1777140128",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c8a2e82-bb2f-4628-9147-6d3e60d882eb",
        "value": "main-po-int6.buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:08+00:00",
        "timestamp": "1777140128",
        "to_ids": true,
        "type": "domain",
        "uuid": "d02adad1-015c-4b82-918c-3396501a9788",
        "value": "main-po-int6.ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:08+00:00",
        "timestamp": "1777140129",
        "to_ids": true,
        "type": "domain",
        "uuid": "804f53f0-0505-48a4-9f03-11096a238710",
        "value": "main-point6.wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:09+00:00",
        "timestamp": "1777140129",
        "to_ids": true,
        "type": "domain",
        "uuid": "1754eb9a-2697-4417-b0fd-b496939074c9",
        "value": "main-sensor3.artichf1atly.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:09+00:00",
        "timestamp": "1777140129",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7f3735-7a05-4c41-8808-92330b5c0d51",
        "value": "majorbright.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:09+00:00",
        "timestamp": "1777140129",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1501b29-52ae-4391-b9a7-35a20a7a8398",
        "value": "majorrapid.cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:09+00:00",
        "timestamp": "1777140129",
        "to_ids": true,
        "type": "domain",
        "uuid": "55505d7f-c345-420c-b418-f0cfa71fa908",
        "value": "man-slide.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:09+00:00",
        "timestamp": "1777140129",
        "to_ids": true,
        "type": "domain",
        "uuid": "09760d90-3d51-41de-8fb2-64c9ce113f26",
        "value": "manifes-daw.light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:09+00:00",
        "timestamp": "1777140130",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5282fb6-ff71-41da-b884-3ca3abd75b19",
        "value": "matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:10+00:00",
        "timestamp": "1777140130",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ff2217e-f319-466a-865e-020a8e7eec8a",
        "value": "measu8-drive.sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:10+00:00",
        "timestamp": "1777140130",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdc69df1-0d73-437d-9bd8-32d335fd987c",
        "value": "melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:10+00:00",
        "timestamp": "1777140130",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7492b13-3c77-4bb5-b086-c4bb3fd260e6",
        "value": "memofreigh.drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:10+00:00",
        "timestamp": "1777140130",
        "to_ids": true,
        "type": "domain",
        "uuid": "2805254f-0c6e-44f4-923f-7731a6c352ec",
        "value": "mer-meshis.dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:10+00:00",
        "timestamp": "1777140130",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d35a92e-7a3f-462d-9541-00c6dfc74228",
        "value": "mercore1et.rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140131",
        "to_ids": true,
        "type": "domain",
        "uuid": "edf841b9-b21a-4e08-8d1c-d50ce0b1918e",
        "value": "mercrestos.plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140131",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee995172-0131-48f8-92d9-caf3fe343686",
        "value": "mervale9al.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140131",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e07bfdc-9eed-4bf8-8fa6-e28226890a07",
        "value": "mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140131",
        "to_ids": true,
        "type": "domain",
        "uuid": "75252253-7f1d-49e0-afc4-5d6a55afc647",
        "value": "meta-1ce.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140131",
        "to_ids": true,
        "type": "domain",
        "uuid": "41bf0194-004c-4975-87ed-151345dd6c13",
        "value": "meta-b4rk.9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140131",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e300ecc-4605-48c8-b7fe-20930034abb6",
        "value": "meta-irnpor.acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:11+00:00",
        "timestamp": "1777140132",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3893c52-0dd9-4b3c-95c1-bd8c6aad678e",
        "value": "meta-rn0du.through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:12+00:00",
        "timestamp": "1777140132",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f536052-c1ca-425d-82da-e2a3761549c6",
        "value": "mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:12+00:00",
        "timestamp": "1777140132",
        "to_ids": true,
        "type": "domain",
        "uuid": "02054da4-b8a7-4f11-8248-4ff32b2eb70f",
        "value": "minor-mon.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:12+00:00",
        "timestamp": "1777140132",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8c47511-b060-4689-94ef-1c6252a06ca2",
        "value": "miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:12+00:00",
        "timestamp": "1777140132",
        "to_ids": true,
        "type": "domain",
        "uuid": "5401befd-c559-4e76-855a-bc2318380197",
        "value": "miv6soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:12+00:00",
        "timestamp": "1777140133",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad53d41c-5f7c-4a3e-a66e-48f6391c6054",
        "value": "miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:13+00:00",
        "timestamp": "1777140133",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd5ab387-c820-4815-89e9-cc3c2e866f89",
        "value": "mixwoo.capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:13+00:00",
        "timestamp": "1777140133",
        "to_ids": true,
        "type": "domain",
        "uuid": "207c1859-b885-40a1-ab70-1fefb9dd539f",
        "value": "mme4po.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:13+00:00",
        "timestamp": "1777140133",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0452ec2-9e01-4995-8832-2d0729e45bb3",
        "value": "modelfabri.qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:13+00:00",
        "timestamp": "1777140133",
        "to_ids": true,
        "type": "domain",
        "uuid": "66c8eee9-8ace-44ad-961f-8bed3f86c6dc",
        "value": "moderntransit.po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:13+00:00",
        "timestamp": "1777140133",
        "to_ids": true,
        "type": "domain",
        "uuid": "7db49ff3-a1c6-49fb-b398-7f9fff7654c8",
        "value": "mond-1v.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:13+00:00",
        "timestamp": "1777140134",
        "to_ids": true,
        "type": "domain",
        "uuid": "10203c02-44b1-45b2-8611-3e9e376fc979",
        "value": "mond-q7.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:14+00:00",
        "timestamp": "1777140134",
        "to_ids": true,
        "type": "domain",
        "uuid": "76dcc8fd-c54e-4fac-9788-f60a3ea9fb60",
        "value": "mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:14+00:00",
        "timestamp": "1777140134",
        "to_ids": true,
        "type": "domain",
        "uuid": "4aff2680-fc57-4470-9b9f-24b5f2dc4f2f",
        "value": "moon-5z.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:14+00:00",
        "timestamp": "1777140134",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7efc4de-5856-41f9-97db-bd364ec27ca6",
        "value": "moraltin.clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:14+00:00",
        "timestamp": "1777140134",
        "to_ids": true,
        "type": "domain",
        "uuid": "10e5412c-726e-41ad-ac0b-192a04410c8b",
        "value": "mossbra.kymle2rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:14+00:00",
        "timestamp": "1777140134",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4c1b033-3a9a-42cf-b549-61a9007352a0",
        "value": "mossphoto.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:15+00:00",
        "timestamp": "1777140135",
        "to_ids": true,
        "type": "domain",
        "uuid": "20f2007e-c618-468c-a734-54b9b8b5f06b",
        "value": "motif4-vector.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:15+00:00",
        "timestamp": "1777140135",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d7826da-965f-4bc8-b937-d2b3c8f3a4bc",
        "value": "multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:15+00:00",
        "timestamp": "1777140135",
        "to_ids": true,
        "type": "domain",
        "uuid": "2343a57f-3947-4d5c-92f2-d8ccb3c62c03",
        "value": "multi-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:15+00:00",
        "timestamp": "1777140135",
        "to_ids": true,
        "type": "domain",
        "uuid": "1015fd18-a60f-45f7-aa8a-5c7d5c4974c3",
        "value": "musglcb.pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:15+00:00",
        "timestamp": "1777140135",
        "to_ids": true,
        "type": "domain",
        "uuid": "5853c2dc-de84-40fc-a254-c461d63c2f9e",
        "value": "mxt0kl.de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:15+00:00",
        "timestamp": "1777140135",
        "to_ids": true,
        "type": "domain",
        "uuid": "90b8f646-1143-4667-b3e1-1578ac924a59",
        "value": "n0de6-node.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:16+00:00",
        "timestamp": "1777140136",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c747dde-a026-4bd9-8f38-56df71fda52d",
        "value": "n0rt-crest.to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:16+00:00",
        "timestamp": "1777140136",
        "to_ids": true,
        "type": "domain",
        "uuid": "529e226c-cb5a-4fcd-a5cc-558f1e6c6ce4",
        "value": "narcore.pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:16+00:00",
        "timestamp": "1777140136",
        "to_ids": true,
        "type": "domain",
        "uuid": "06aebb84-da43-4d4d-82b1-3dd01cf11626",
        "value": "nbfirv.sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:16+00:00",
        "timestamp": "1777140136",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1b3c629-c79f-4658-ab17-e36ac3d21988",
        "value": "neo-c4rri.junkie-talker.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:16+00:00",
        "timestamp": "1777140136",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb8e58fe-3754-403c-8e52-78068239781a",
        "value": "neo-cornput.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:16+00:00",
        "timestamp": "1777140137",
        "to_ids": true,
        "type": "domain",
        "uuid": "a57d741d-1087-40d1-b495-6b587e2cc61e",
        "value": "neo-r0ut.po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:17+00:00",
        "timestamp": "1777140137",
        "to_ids": true,
        "type": "domain",
        "uuid": "53888346-6b3d-480b-8abb-1bc5ed10c51e",
        "value": "neo-s1at.cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:17+00:00",
        "timestamp": "1777140137",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d2dcb41-e022-46d1-b0ce-fdba38a2ea89",
        "value": "netw0r4-panel.extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:17+00:00",
        "timestamp": "1777140137",
        "to_ids": true,
        "type": "domain",
        "uuid": "486f5ff8-6584-467f-813e-a1d7782a978f",
        "value": "new-page6.ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:17+00:00",
        "timestamp": "1777140137",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b2aa55d-b1a0-4786-a17c-f5ac7e4dac5d",
        "value": "new-story2.art-tonsillitis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:17+00:00",
        "timestamp": "1777140137",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdc78a2f-86dd-4138-8b85-43a143929e4f",
        "value": "new-style5.bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:17+00:00",
        "timestamp": "1777140138",
        "to_ids": true,
        "type": "domain",
        "uuid": "b33d1700-c9bf-4f9a-9ff4-0031dba72d76",
        "value": "new-vi-ew4.aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:18+00:00",
        "timestamp": "1777140138",
        "to_ids": true,
        "type": "domain",
        "uuid": "f224d0b3-efaf-4629-8cbf-ed7bc6627d82",
        "value": "newst-yle5.arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:18+00:00",
        "timestamp": "1777140138",
        "to_ids": true,
        "type": "domain",
        "uuid": "2958d7a0-5653-474c-aa71-13a811c0f1e4",
        "value": "newstyle5.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:18+00:00",
        "timestamp": "1777140138",
        "to_ids": true,
        "type": "domain",
        "uuid": "9241d3d8-296d-4484-88be-dba3754085c8",
        "value": "next-door3.cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:18+00:00",
        "timestamp": "1777140138",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cb78f90-b11d-4420-864b-ea4971c731cf",
        "value": "nextdoor3.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:18+00:00",
        "timestamp": "1777140138",
        "to_ids": true,
        "type": "domain",
        "uuid": "48589f3b-a221-4682-b363-de4ae4d55535",
        "value": "nextdoor3.po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:18+00:00",
        "timestamp": "1777140139",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a76e4f0-96a5-498e-829e-27aabe9c0966",
        "value": "nhmud1dx.de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:19+00:00",
        "timestamp": "1777140139",
        "to_ids": true,
        "type": "domain",
        "uuid": "417b62cc-86ee-4cb5-be31-745a847c5c46",
        "value": "nice-sh-ot4.eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:19+00:00",
        "timestamp": "1777140139",
        "to_ids": true,
        "type": "domain",
        "uuid": "34a42980-a5a2-448e-afb4-ba39b6fc7bcf",
        "value": "nice-shot4.kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:19+00:00",
        "timestamp": "1777140139",
        "to_ids": true,
        "type": "domain",
        "uuid": "fedef97e-943b-46fe-acca-fed81a71a742",
        "value": "nivo.arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:19+00:00",
        "timestamp": "1777140139",
        "to_ids": true,
        "type": "domain",
        "uuid": "af2c2547-e0ce-4f36-ad20-1dc88795fc08",
        "value": "node-ult.kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:19+00:00",
        "timestamp": "1777140139",
        "to_ids": true,
        "type": "domain",
        "uuid": "35df9cf8-aa1d-447b-9535-708f6278bc74",
        "value": "noir-1.miv6soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:19+00:00",
        "timestamp": "1777140140",
        "to_ids": true,
        "type": "domain",
        "uuid": "e66ac2c4-57c8-4d3e-a95f-e2d831390fed",
        "value": "noir-2.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:20+00:00",
        "timestamp": "1777140140",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd711b10-021c-48e0-b8f4-2e7252185a26",
        "value": "noir-3x.there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:20+00:00",
        "timestamp": "1777140140",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ba9a6c0-fd9f-447b-9ca7-0f0de599242c",
        "value": "noir-4.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:20+00:00",
        "timestamp": "1777140140",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1e5b60f-6021-4fa7-a528-57522299dc04",
        "value": "noir-5.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:20+00:00",
        "timestamp": "1777140140",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf51f748-b2a1-4be1-9770-4896dc8600a3",
        "value": "noir-6.slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:20+00:00",
        "timestamp": "1777140141",
        "to_ids": true,
        "type": "domain",
        "uuid": "b58bfe49-d488-43ba-b31b-6222624bc1ec",
        "value": "noir-7.caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:21+00:00",
        "timestamp": "1777140141",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bf9139b-fd34-41c9-a523-a32db7ef19fa",
        "value": "noir-7.ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:21+00:00",
        "timestamp": "1777140141",
        "to_ids": true,
        "type": "domain",
        "uuid": "f53a3672-8306-4b45-a02b-ad43e93244ec",
        "value": "noir-8.limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:21+00:00",
        "timestamp": "1777140141",
        "to_ids": true,
        "type": "domain",
        "uuid": "54c1fd63-92b7-4f6c-bcd6-78302b8998a5",
        "value": "noir-land-3.inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:21+00:00",
        "timestamp": "1777140141",
        "to_ids": true,
        "type": "domain",
        "uuid": "51be0990-1da6-43f8-ad75-5c3b4ea9d233",
        "value": "noir-land-5.jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:21+00:00",
        "timestamp": "1777140141",
        "to_ids": true,
        "type": "domain",
        "uuid": "94802257-a3ff-4129-b902-b9bbb3122bf2",
        "value": "noir-land-5s.ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:21+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "49b6b78c-f2e5-43ce-8f33-6ddd4c5dba97",
        "value": "noir-s6.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:22+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "da1f22b8-e2e2-4c6b-9dad-e8ee441984f3",
        "value": "noir-x8.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:22+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7172e19-79b9-4c76-9c7e-a0813f74f946",
        "value": "noir-zeit-3s.godn2strich.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:22+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5711ea2-b482-4e8e-9bfd-3fe17139e953",
        "value": "nordraex.po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:22+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "14d8c1ee-26a1-45df-8f18-43fee9b712f2",
        "value": "norlineis.wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:22+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "a08fed73-cf3e-4284-bd34-c5c30f6452f4",
        "value": "norlineum5.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:22+00:00",
        "timestamp": "1777140142",
        "to_ids": true,
        "type": "domain",
        "uuid": "60bd2bed-1b16-4d15-bcd6-95a93ade5fa0",
        "value": "norspireos3.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:23+00:00",
        "timestamp": "1777140143",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed5006f6-af70-4314-b9b7-bbcf57fa7b62",
        "value": "norspireum6.sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:23+00:00",
        "timestamp": "1777140143",
        "to_ids": true,
        "type": "domain",
        "uuid": "70d2acea-6cbd-403e-94cb-24c33de2d14e",
        "value": "north9-line.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:23+00:00",
        "timestamp": "1777140143",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a6a5036-790a-4e7e-acd6-f6f7982e965e",
        "value": "notifieropti.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:23+00:00",
        "timestamp": "1777140143",
        "to_ids": true,
        "type": "domain",
        "uuid": "b39849c5-681c-4ba0-a2e4-d83e71ea96c3",
        "value": "notiflame.matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:23+00:00",
        "timestamp": "1777140143",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c2f3889-26dc-43c9-815e-b1beef84dbaf",
        "value": "nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:23+00:00",
        "timestamp": "1777140144",
        "to_ids": true,
        "type": "domain",
        "uuid": "58151b18-544f-4cb6-be5d-5817d49ee0cf",
        "value": "nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:24+00:00",
        "timestamp": "1777140144",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2738045-5314-4ff5-9f63-d56bf49bb705",
        "value": "nr76.mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:24+00:00",
        "timestamp": "1777140144",
        "to_ids": true,
        "type": "domain",
        "uuid": "f00993cd-72a1-4e24-bb70-ff7637dc4ba9",
        "value": "nugr.obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:24+00:00",
        "timestamp": "1777140144",
        "to_ids": true,
        "type": "domain",
        "uuid": "599029bc-f0fd-46ac-a226-bcade4fdc648",
        "value": "nzsrghd.qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:24+00:00",
        "timestamp": "1777140144",
        "to_ids": true,
        "type": "domain",
        "uuid": "870dcbf8-e85d-439e-88e2-745227021e75",
        "value": "nzwgpxkc.kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:24+00:00",
        "timestamp": "1777140144",
        "to_ids": true,
        "type": "domain",
        "uuid": "5894281b-66f5-49e7-85de-f8b1e7505237",
        "value": "o999.bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:24+00:00",
        "timestamp": "1777140145",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6382a30-13fc-429b-a388-f234ee4b080a",
        "value": "ob1phqqu.degassing-mould.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:25+00:00",
        "timestamp": "1777140145",
        "to_ids": true,
        "type": "domain",
        "uuid": "a07b3f4c-0bc3-4c1e-b6ad-09b41c535dc7",
        "value": "obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:25+00:00",
        "timestamp": "1777140145",
        "to_ids": true,
        "type": "domain",
        "uuid": "72bbbe19-9a18-48f4-b07f-c6a085790c25",
        "value": "offharves.to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:25+00:00",
        "timestamp": "1777140145",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6f72a8f-29c4-4c88-9b6e-d9f01a7049be",
        "value": "oifwmo.qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:25+00:00",
        "timestamp": "1777140145",
        "to_ids": true,
        "type": "domain",
        "uuid": "89d75f35-11af-4a87-bb85-997659bcafc5",
        "value": "old-ca-se6.jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:25+00:00",
        "timestamp": "1777140146",
        "to_ids": true,
        "type": "domain",
        "uuid": "a36220cd-d5f3-4177-b538-5596128cef09",
        "value": "ollowgl.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:26+00:00",
        "timestamp": "1777140146",
        "to_ids": true,
        "type": "domain",
        "uuid": "d953e972-7e64-43ae-8a61-39bf974ef21f",
        "value": "open-1.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:26+00:00",
        "timestamp": "1777140146",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3813878-e535-435b-8cf2-86870726a19c",
        "value": "open-1.fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:26+00:00",
        "timestamp": "1777140146",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a4bd088-bf34-48a9-90c6-7da73b3deaea",
        "value": "open-3.caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:26+00:00",
        "timestamp": "1777140146",
        "to_ids": true,
        "type": "domain",
        "uuid": "163588c1-02b9-4dc1-b414-557c1c3bfd8a",
        "value": "open-4.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:26+00:00",
        "timestamp": "1777140146",
        "to_ids": true,
        "type": "domain",
        "uuid": "95e588ad-3a42-4361-9329-6e339be8d062",
        "value": "open-6.after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:26+00:00",
        "timestamp": "1777140147",
        "to_ids": true,
        "type": "domain",
        "uuid": "dce95406-ed09-4dff-9e45-c1d69b81cf83",
        "value": "open-9.slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:27+00:00",
        "timestamp": "1777140147",
        "to_ids": true,
        "type": "domain",
        "uuid": "180dc88b-ff6b-4c73-994c-aaf94867f64b",
        "value": "open-book1.ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:27+00:00",
        "timestamp": "1777140147",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0090a1b-65b5-4871-a5ab-dbc13b570377",
        "value": "open-book1.to1varin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:27+00:00",
        "timestamp": "1777140147",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac8f052c-a473-4b5d-bb6e-90106282f4c1",
        "value": "open-haus-4.dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:27+00:00",
        "timestamp": "1777140147",
        "to_ids": true,
        "type": "domain",
        "uuid": "f742eb23-07bb-40b9-92a1-4c9b0ad99173",
        "value": "open-land-3x.presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:27+00:00",
        "timestamp": "1777140147",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8f97a31-1404-49fb-9f30-622fc06c6a6b",
        "value": "open-petit-8.accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:27+00:00",
        "timestamp": "1777140148",
        "to_ids": true,
        "type": "domain",
        "uuid": "719a8b09-012e-48d5-95fd-275da35e653f",
        "value": "open-wind1.aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:28+00:00",
        "timestamp": "1777140148",
        "to_ids": true,
        "type": "domain",
        "uuid": "54594bed-4070-4b81-9a4a-dbf05c67d4f1",
        "value": "openshi.dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:28+00:00",
        "timestamp": "1777140148",
        "to_ids": true,
        "type": "domain",
        "uuid": "82a52308-220d-4f1f-91d4-4dfc68739315",
        "value": "oqjwoky.capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:28+00:00",
        "timestamp": "1777140148",
        "to_ids": true,
        "type": "domain",
        "uuid": "762c111c-7538-45c6-95b1-142a6a7a42f7",
        "value": "organizepet.to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:28+00:00",
        "timestamp": "1777140148",
        "to_ids": true,
        "type": "domain",
        "uuid": "145b3d7f-f0b4-44ec-a84b-3b602e19b8db",
        "value": "otter0-array.qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:28+00:00",
        "timestamp": "1777140148",
        "to_ids": true,
        "type": "domain",
        "uuid": "0903a402-f0d2-49fb-a0f7-2c096136d782",
        "value": "over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:29+00:00",
        "timestamp": "1777140149",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0c6de41-75e5-47ce-81be-bef635d8659a",
        "value": "overfeed-social.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:29+00:00",
        "timestamp": "1777140149",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b2033ff-e3c8-4ebb-a59d-c68b0ad64cb9",
        "value": "oxhlrfs.ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:29+00:00",
        "timestamp": "1777140149",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0df0d4a-4c3f-47ab-a80e-e7cb73111b49",
        "value": "p0rt.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:29+00:00",
        "timestamp": "1777140149",
        "to_ids": true,
        "type": "domain",
        "uuid": "04b6ee47-6fa4-4da1-b310-cedd1a4576f2",
        "value": "p1a5-watch.1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:29+00:00",
        "timestamp": "1777140149",
        "to_ids": true,
        "type": "domain",
        "uuid": "4787be02-fa5a-4563-8af1-69b7b55f39eb",
        "value": "p4rse-forge.to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:29+00:00",
        "timestamp": "1777140150",
        "to_ids": true,
        "type": "domain",
        "uuid": "c57a155e-4e34-479d-9483-58421beb884c",
        "value": "p4rt3-lab.arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:30+00:00",
        "timestamp": "1777140150",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8094dc1-2923-4a53-b8f4-c4dcdae13207",
        "value": "p68x.de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:30+00:00",
        "timestamp": "1777140150",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf9ff874-6161-4724-84e6-448ae65e76e7",
        "value": "p82lmc.drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:30+00:00",
        "timestamp": "1777140150",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecada3c0-279a-4693-9c0a-4e87906fc40e",
        "value": "p9hda.pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:30+00:00",
        "timestamp": "1777140150",
        "to_ids": true,
        "type": "domain",
        "uuid": "be72d092-9402-4dfb-bb2c-682d00334c38",
        "value": "pack3-frame.mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:30+00:00",
        "timestamp": "1777140150",
        "to_ids": true,
        "type": "domain",
        "uuid": "def13fd4-23ca-4f78-931a-66cbdc0c199f",
        "value": "parcelmod.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:30+00:00",
        "timestamp": "1777140151",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4d0d182-6cf6-435e-a563-92ae2048e311",
        "value": "parcelpow.obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:31+00:00",
        "timestamp": "1777140151",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a3f152-8995-41ea-b233-e23554bf4787",
        "value": "partne0-sync.polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:31+00:00",
        "timestamp": "1777140151",
        "to_ids": true,
        "type": "domain",
        "uuid": "659b3824-3317-4ab5-b3d3-d50303be5213",
        "value": "partnertra.foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:31+00:00",
        "timestamp": "1777140151",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf2b99bf-0be0-4f5d-95fe-f1864d48c0d7",
        "value": "passiv-reage.qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:31+00:00",
        "timestamp": "1777140151",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa035fda-8725-47ce-9e64-b4a80c8de366",
        "value": "pastusout.wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:31+00:00",
        "timestamp": "1777140152",
        "to_ids": true,
        "type": "domain",
        "uuid": "38987e75-a0e1-4cd7-8e21-34037215a507",
        "value": "pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:32+00:00",
        "timestamp": "1777140152",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3e40499-0d2e-4901-bf6a-6aa79d4c3bc0",
        "value": "pb3kwq.obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:32+00:00",
        "timestamp": "1777140152",
        "to_ids": true,
        "type": "domain",
        "uuid": "05b6963b-35c2-4234-aae5-a387457ddede",
        "value": "pds6zjwn.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:32+00:00",
        "timestamp": "1777140152",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdb59abf-cc3a-4bff-abbb-c72ffc359385",
        "value": "peak-lab.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:32+00:00",
        "timestamp": "1777140152",
        "to_ids": true,
        "type": "domain",
        "uuid": "262aafce-f856-4634-9558-0660bdc57f30",
        "value": "pencospromisc.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:32+00:00",
        "timestamp": "1777140152",
        "to_ids": true,
        "type": "domain",
        "uuid": "430935cd-e51f-4f47-85e4-60c0a892a531",
        "value": "pepper-reprint.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:32+00:00",
        "timestamp": "1777140153",
        "to_ids": true,
        "type": "domain",
        "uuid": "661ada71-e918-4b5c-a132-af521fac081a",
        "value": "petal9-route.to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:33+00:00",
        "timestamp": "1777140153",
        "to_ids": true,
        "type": "domain",
        "uuid": "7087ba2a-bc77-4328-a929-0ed6bb34fd59",
        "value": "petit-3k.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:33+00:00",
        "timestamp": "1777140153",
        "to_ids": true,
        "type": "domain",
        "uuid": "45e1c17f-533d-4f8a-adbb-5532fd0bc086",
        "value": "petit-3z.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:33+00:00",
        "timestamp": "1777140153",
        "to_ids": true,
        "type": "domain",
        "uuid": "772e0f43-d1ed-40f9-8786-12dd263cf6ba",
        "value": "petit-7.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:33+00:00",
        "timestamp": "1777140153",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eeb7e54-d531-4fc1-a277-b5a9937ab103",
        "value": "petit-berg-1.geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:33+00:00",
        "timestamp": "1777140154",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8590c5f-25ce-4584-bdb9-5a5fb0d53dc3",
        "value": "petit-berg-5p.caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:34+00:00",
        "timestamp": "1777140154",
        "to_ids": true,
        "type": "domain",
        "uuid": "ada65fc8-cd09-42c3-8deb-2c74d3db3c8d",
        "value": "petit-fire-6.presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:34+00:00",
        "timestamp": "1777140154",
        "to_ids": true,
        "type": "domain",
        "uuid": "0390611b-bae5-4c69-b748-eb5d51ed5a36",
        "value": "petit-land-1.slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:34+00:00",
        "timestamp": "1777140154",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f34f467-c0fe-4f03-98e6-f54a50403134",
        "value": "petit-mond-1.dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:34+00:00",
        "timestamp": "1777140154",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0500db9-1640-4897-a334-74498e290daa",
        "value": "petit-wald-7k.fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:34+00:00",
        "timestamp": "1777140154",
        "to_ids": true,
        "type": "domain",
        "uuid": "89666c51-5036-49e2-9aeb-652bfc6e6ca6",
        "value": "petit-wind-5.melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:34+00:00",
        "timestamp": "1777140155",
        "to_ids": true,
        "type": "domain",
        "uuid": "c64b5dc8-9cf7-4662-993d-f3e62909b44a",
        "value": "petit-y1.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:35+00:00",
        "timestamp": "1777140155",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ef5c47e-96bc-4601-b40d-8ef1454797fc",
        "value": "philat-stubborn.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:35+00:00",
        "timestamp": "1777140155",
        "to_ids": true,
        "type": "domain",
        "uuid": "95b084eb-1560-4450-8b58-61b6624d4443",
        "value": "pin30-sync.de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:35+00:00",
        "timestamp": "1777140155",
        "to_ids": true,
        "type": "domain",
        "uuid": "d04f6c45-ec25-4c64-8bce-9fc6c5a9657d",
        "value": "pine2-branch.arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:35+00:00",
        "timestamp": "1777140155",
        "to_ids": true,
        "type": "domain",
        "uuid": "7aff0a4f-13ce-40ab-a70b-f2bce74e06cb",
        "value": "pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:35+00:00",
        "timestamp": "1777140156",
        "to_ids": true,
        "type": "domain",
        "uuid": "af396f96-9948-44fb-a497-a700691cae5c",
        "value": "pixe2-zone.zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:36+00:00",
        "timestamp": "1777140156",
        "to_ids": true,
        "type": "domain",
        "uuid": "d56c8a77-0b87-4e0b-bbe9-a34f13b81c3d",
        "value": "pixobs.po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:36+00:00",
        "timestamp": "1777140156",
        "to_ids": true,
        "type": "domain",
        "uuid": "08e541ef-ea46-4c32-8044-9097153e1784",
        "value": "pkqwqx.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:36+00:00",
        "timestamp": "1777140156",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f9c165e-4006-49c8-8e64-7d27cfeb0368",
        "value": "pl4sm-flow.nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:36+00:00",
        "timestamp": "1777140156",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6931488-b524-44b5-b01f-81a5963b815a",
        "value": "planrec.bexla2rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:36+00:00",
        "timestamp": "1777140156",
        "to_ids": true,
        "type": "domain",
        "uuid": "adb29d36-731d-4207-8fd8-fc52ea56e9e1",
        "value": "plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:36+00:00",
        "timestamp": "1777140157",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2754ea8-398d-4086-9efa-ebc4e5a29a4d",
        "value": "po2vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:37+00:00",
        "timestamp": "1777140157",
        "to_ids": true,
        "type": "domain",
        "uuid": "119b78a9-0b4d-4156-bc79-6e27bec6c9ac",
        "value": "po3vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:37+00:00",
        "timestamp": "1777140157",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb269d8c-05ed-4e4e-b560-fc9d52994cfc",
        "value": "po3vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:37+00:00",
        "timestamp": "1777140157",
        "to_ids": true,
        "type": "domain",
        "uuid": "3194a616-29e4-4602-bd4e-897fccf905bd",
        "value": "po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:37+00:00",
        "timestamp": "1777140157",
        "to_ids": true,
        "type": "domain",
        "uuid": "330a0a62-f6d1-4538-b0b8-febb74ea840f",
        "value": "po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:37+00:00",
        "timestamp": "1777140157",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d51bc94-b7fd-4aa4-93ce-78dea83fc40d",
        "value": "po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:38+00:00",
        "timestamp": "1777140158",
        "to_ids": true,
        "type": "domain",
        "uuid": "f39a7862-a8fd-4c7f-81b5-cd07630d4287",
        "value": "po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:38+00:00",
        "timestamp": "1777140158",
        "to_ids": true,
        "type": "domain",
        "uuid": "cadf2d2f-7fe4-41f1-b792-20416fc4bb5a",
        "value": "po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:38+00:00",
        "timestamp": "1777140158",
        "to_ids": true,
        "type": "domain",
        "uuid": "b871e163-8773-419e-85a2-e380c3400ff6",
        "value": "polatren.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:38+00:00",
        "timestamp": "1777140158",
        "to_ids": true,
        "type": "domain",
        "uuid": "c246009f-5aec-4f0c-8774-873ff64e4054",
        "value": "polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:38+00:00",
        "timestamp": "1777140158",
        "to_ids": true,
        "type": "domain",
        "uuid": "45b08d48-e067-4735-a71c-d56d1e8a709a",
        "value": "port-dat.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:38+00:00",
        "timestamp": "1777140158",
        "to_ids": true,
        "type": "domain",
        "uuid": "1940e83f-6799-4d7b-98a7-f6c2222b63d9",
        "value": "portal-enc.sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:39+00:00",
        "timestamp": "1777140159",
        "to_ids": true,
        "type": "domain",
        "uuid": "21febac4-199d-4f77-a10e-5126662fa6b2",
        "value": "portalpitch.pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:39+00:00",
        "timestamp": "1777140159",
        "to_ids": true,
        "type": "domain",
        "uuid": "12a2836e-57fc-40cd-822d-ea9e42b81a6f",
        "value": "pqj8j.alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:39+00:00",
        "timestamp": "1777140159",
        "to_ids": true,
        "type": "domain",
        "uuid": "b21c13d2-811b-4553-ae9b-b01200bd5e42",
        "value": "pr1rne-plate.bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:39+00:00",
        "timestamp": "1777140159",
        "to_ids": true,
        "type": "domain",
        "uuid": "452eff7a-a0ee-4d8b-93b3-5b40bc49bcac",
        "value": "presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:39+00:00",
        "timestamp": "1777140159",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cd5671f-3fb7-4e80-b75f-c9aa85eb01a4",
        "value": "pric3-flow.de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:39+00:00",
        "timestamp": "1777140160",
        "to_ids": true,
        "type": "domain",
        "uuid": "893c3f16-380d-42b7-9e8e-3bff15678eb8",
        "value": "priceun6eceive.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:40+00:00",
        "timestamp": "1777140160",
        "to_ids": true,
        "type": "domain",
        "uuid": "97d5aa38-63b8-44d1-bc73-ce8064594887",
        "value": "primeambe.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:40+00:00",
        "timestamp": "1777140160",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1a124ca-a0a0-4e37-b487-06cdd6e3cf1d",
        "value": "primeree.obli8edanger.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:40+00:00",
        "timestamp": "1777140160",
        "to_ids": true,
        "type": "domain",
        "uuid": "28da8362-e8b0-4522-8ebf-a9e33af49bf0",
        "value": "processlis.to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:40+00:00",
        "timestamp": "1777140160",
        "to_ids": true,
        "type": "domain",
        "uuid": "87149709-f881-4853-8fde-b8b644b5b130",
        "value": "profit-guide.blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:40+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a3933e1-19df-4305-9ec5-4a29a2de7381",
        "value": "profitconvo.mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:41+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ca806be-34aa-404b-a97b-8643d0a426c5",
        "value": "proto-5h4d.wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:41+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c820719-107c-4fd0-beb6-e4d774e75dab",
        "value": "proto-hub.kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:41+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "14a304d1-5382-47cf-8413-3e693e09144f",
        "value": "proto-str34m.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:41+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c9e0c4b-38dc-4e1a-ab8a-840cfa045780",
        "value": "protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:41+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "78757fcc-1d12-4799-89fb-d122514b52a1",
        "value": "pthq.boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:41+00:00",
        "timestamp": "1777140161",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4afaeee-f851-4a3a-8a5e-b934c57685cb",
        "value": "publish2-mount.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:42+00:00",
        "timestamp": "1777140162",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2956a02-af75-45cb-9e89-549f9273ba87",
        "value": "publishbark.zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:42+00:00",
        "timestamp": "1777140162",
        "to_ids": true,
        "type": "domain",
        "uuid": "2513aa3a-132f-4d0c-9509-1a7417c503c4",
        "value": "pulp-turquoise.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:42+00:00",
        "timestamp": "1777140162",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2e76041-e15a-41c5-a1e1-577f31212b44",
        "value": "pulspost.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:42+00:00",
        "timestamp": "1777140162",
        "to_ids": true,
        "type": "domain",
        "uuid": "7673d7b4-36b4-4d40-b39b-83e5137b88c5",
        "value": "pure-seed5.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:42+00:00",
        "timestamp": "1777140162",
        "to_ids": true,
        "type": "domain",
        "uuid": "b62d82b3-3b5a-4525-b6a7-558000a8fb6f",
        "value": "purewa-ter6.import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:42+00:00",
        "timestamp": "1777140163",
        "to_ids": true,
        "type": "domain",
        "uuid": "27eb205c-6dad-4c09-8289-0bdf0e21e258",
        "value": "purewater6.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:43+00:00",
        "timestamp": "1777140163",
        "to_ids": true,
        "type": "domain",
        "uuid": "7012eebe-938f-48b0-abe7-a63898739d80",
        "value": "purewater6.po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:43+00:00",
        "timestamp": "1777140163",
        "to_ids": true,
        "type": "domain",
        "uuid": "15e54d23-ef3a-46b2-a118-8296e7d416fb",
        "value": "pyj8st.cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:43+00:00",
        "timestamp": "1777140163",
        "to_ids": true,
        "type": "domain",
        "uuid": "dad1b6d2-1733-4fa3-ba19-95ffa60095e1",
        "value": "pyjq05.po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:43+00:00",
        "timestamp": "1777140163",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc1ff741-8c5e-431d-aa65-06dfb84a3e8d",
        "value": "qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:43+00:00",
        "timestamp": "1777140163",
        "to_ids": true,
        "type": "domain",
        "uuid": "8455d907-f88f-4a9f-afbb-ab4fcd27c6cb",
        "value": "qc3zfzu.to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:43+00:00",
        "timestamp": "1777140164",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fc1799a-4d39-41af-8e80-a79ef2aac56b",
        "value": "qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:44+00:00",
        "timestamp": "1777140164",
        "to_ids": true,
        "type": "domain",
        "uuid": "57bab882-217a-404e-9559-b0475964a44a",
        "value": "qi3mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:44+00:00",
        "timestamp": "1777140164",
        "to_ids": true,
        "type": "domain",
        "uuid": "b95d383d-a04e-4705-b591-0d8606b06cde",
        "value": "qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:44+00:00",
        "timestamp": "1777140164",
        "to_ids": true,
        "type": "domain",
        "uuid": "309b1367-66b3-49b2-9901-109de6a14e33",
        "value": "qi5maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:44+00:00",
        "timestamp": "1777140164",
        "to_ids": true,
        "type": "domain",
        "uuid": "abcac983-6566-4247-8e02-119556030335",
        "value": "qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:44+00:00",
        "timestamp": "1777140165",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e73362a-dee3-4dde-8f36-321fc1348069",
        "value": "qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:45+00:00",
        "timestamp": "1777140165",
        "to_ids": true,
        "type": "domain",
        "uuid": "0423bc42-2d11-459e-b984-aae6eeea34e7",
        "value": "qilzefl.sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:45+00:00",
        "timestamp": "1777140165",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e8bcb2-970c-43b5-ada4-bf1924057d5b",
        "value": "qiv2moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:45+00:00",
        "timestamp": "1777140165",
        "to_ids": true,
        "type": "domain",
        "uuid": "79d2aa44-e70d-4dec-a2b2-e3544dc03bc5",
        "value": "qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:45+00:00",
        "timestamp": "1777140165",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d78eb54-8397-4c37-aee1-09f02dbec35e",
        "value": "qjdc65n.over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:45+00:00",
        "timestamp": "1777140165",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad4e73e3-f003-45c6-b64c-f50727afeca9",
        "value": "qjhle.de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:45+00:00",
        "timestamp": "1777140166",
        "to_ids": true,
        "type": "domain",
        "uuid": "bba39287-f637-47b9-bf50-4cb00e99f298",
        "value": "qkxqry9b.ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:46+00:00",
        "timestamp": "1777140166",
        "to_ids": true,
        "type": "domain",
        "uuid": "d97bee29-8de6-4d00-aa25-1c79936e14c8",
        "value": "qu1ck-flow.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:46+00:00",
        "timestamp": "1777140166",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fc7a030-bc58-4e75-858e-abc8df138f70",
        "value": "quarryhaul.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:46+00:00",
        "timestamp": "1777140166",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ebaf8a3-d9c5-4e49-8899-95f2bc6afb46",
        "value": "querprair.sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:46+00:00",
        "timestamp": "1777140166",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8df5f9d-8351-463e-9054-6cff66670969",
        "value": "quickmo-ve5.buckishing-out.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:46+00:00",
        "timestamp": "1777140167",
        "to_ids": true,
        "type": "domain",
        "uuid": "90062991-db29-4f67-b333-6f3ae92a3c81",
        "value": "quickmove5.ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:47+00:00",
        "timestamp": "1777140167",
        "to_ids": true,
        "type": "domain",
        "uuid": "23ad96c9-3b7a-4e1e-a7cf-0875f8e6ca19",
        "value": "quickmove5.wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:47+00:00",
        "timestamp": "1777140167",
        "to_ids": true,
        "type": "domain",
        "uuid": "9deeedbc-3e93-4d41-956a-96c2795ad495",
        "value": "quickque.jordan5nual.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:47+00:00",
        "timestamp": "1777140167",
        "to_ids": true,
        "type": "domain",
        "uuid": "dceb6b8f-9f55-410f-b1d2-85a190fee852",
        "value": "quorforgeet6.zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:47+00:00",
        "timestamp": "1777140167",
        "to_ids": true,
        "type": "domain",
        "uuid": "acf25f13-9c1e-4341-9107-6e2e23cfd11b",
        "value": "quorlineex.rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:47+00:00",
        "timestamp": "1777140167",
        "to_ids": true,
        "type": "domain",
        "uuid": "b73caa47-adaf-40bc-8be0-6c6f77064d3f",
        "value": "quorlith3is.resolut-revening.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:48+00:00",
        "timestamp": "1777140168",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0fb884f-41f9-4d65-a080-9f30ccaf7ad5",
        "value": "quormark6os.polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:48+00:00",
        "timestamp": "1777140168",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d35435f-feb1-4afb-b2f4-01b42a6500bf",
        "value": "quormesh1os.qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:48+00:00",
        "timestamp": "1777140168",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6ba152d-4d37-444f-9376-dfeb2670ac4c",
        "value": "quorvale0os.dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:48+00:00",
        "timestamp": "1777140168",
        "to_ids": true,
        "type": "domain",
        "uuid": "2739edb9-636b-4b5c-968a-d78e6f4731b2",
        "value": "quotaraven.protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:48+00:00",
        "timestamp": "1777140168",
        "to_ids": true,
        "type": "domain",
        "uuid": "69ec047a-0e08-43ac-8b10-02cca6fc5488",
        "value": "r31a6-gate.hearkenw2tman.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:49+00:00",
        "timestamp": "1777140169",
        "to_ids": true,
        "type": "domain",
        "uuid": "4101dd9f-f5bf-4e94-8737-2d5f6cb4d751",
        "value": "r4il2-point.through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:49+00:00",
        "timestamp": "1777140169",
        "to_ids": true,
        "type": "domain",
        "uuid": "99063722-a973-4720-9f55-895b5fdd00dd",
        "value": "ra1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:49+00:00",
        "timestamp": "1777140169",
        "to_ids": true,
        "type": "domain",
        "uuid": "4be4efba-60a7-4763-98c4-49ed5e973633",
        "value": "ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:49+00:00",
        "timestamp": "1777140169",
        "to_ids": true,
        "type": "domain",
        "uuid": "138b389a-2c50-46a1-8be6-22443acb673d",
        "value": "ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:49+00:00",
        "timestamp": "1777140169",
        "to_ids": true,
        "type": "domain",
        "uuid": "8372856f-1572-4bf3-9176-687a09a8401a",
        "value": "ra4xovin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:49+00:00",
        "timestamp": "1777140170",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1bb161d-ab54-4648-8cf6-e74460625828",
        "value": "ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:50+00:00",
        "timestamp": "1777140170",
        "to_ids": true,
        "type": "domain",
        "uuid": "c359de06-a05a-4649-9571-a5e0e32fb27c",
        "value": "ra5xorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:50+00:00",
        "timestamp": "1777140170",
        "to_ids": true,
        "type": "domain",
        "uuid": "e269bb6e-2c9d-4567-ba0b-ab6fedb31453",
        "value": "ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:50+00:00",
        "timestamp": "1777140170",
        "to_ids": true,
        "type": "domain",
        "uuid": "06c3b492-1a00-46e7-ab64-c4036910044f",
        "value": "ra6ximen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:50+00:00",
        "timestamp": "1777140170",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ffee73c-cafb-4f84-addb-1d6516f17f00",
        "value": "ra7ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:50+00:00",
        "timestamp": "1777140170",
        "to_ids": true,
        "type": "domain",
        "uuid": "723e46b9-d6e4-4149-bf7b-cb2690adf189",
        "value": "ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:50+00:00",
        "timestamp": "1777140171",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c366b6a-f498-45a5-936b-9b25c4017544",
        "value": "ra9ximer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:51+00:00",
        "timestamp": "1777140171",
        "to_ids": true,
        "type": "domain",
        "uuid": "89226a40-accc-490c-b3e8-edae50561388",
        "value": "rail-trace.alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:51+00:00",
        "timestamp": "1777140171",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff0d78ad-6ca7-4de1-b605-ab9109ba1a43",
        "value": "rain-line.rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:51+00:00",
        "timestamp": "1777140171",
        "to_ids": true,
        "type": "domain",
        "uuid": "c58f914d-ad51-472a-ae39-eb95fd554743",
        "value": "rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:51+00:00",
        "timestamp": "1777140171",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc3f3d35-564b-4a7a-b21c-f2965b0b9a86",
        "value": "rainy-ni-ght2.qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:51+00:00",
        "timestamp": "1777140171",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d918956-2257-4966-b71b-08d367f97692",
        "value": "rainy-ni-ght2.sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:51+00:00",
        "timestamp": "1777140172",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7932dad-bce9-43d4-a587-6ceda1a76e2f",
        "value": "rainy-ni-ght2.zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:52+00:00",
        "timestamp": "1777140172",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fbee46b-304b-4960-88ec-a3cc8238b8cd",
        "value": "ravenworke.kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:52+00:00",
        "timestamp": "1777140172",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4aa2bc8-fc22-49ff-a2bf-cb7b452af5ce",
        "value": "rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:52+00:00",
        "timestamp": "1777140172",
        "to_ids": true,
        "type": "domain",
        "uuid": "093b6626-4cea-49e3-a491-37950d750970",
        "value": "rax5pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:52+00:00",
        "timestamp": "1777140172",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3319b62-9c18-4a7d-844a-7c05e94fcec4",
        "value": "reagentcore.sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:52+00:00",
        "timestamp": "1777140172",
        "to_ids": true,
        "type": "domain",
        "uuid": "70dd3bdb-124b-49ae-bd05-0ac5cb3e5896",
        "value": "real-fact3.eighth-swollen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:53+00:00",
        "timestamp": "1777140173",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d367fb5-f8b8-46fe-857e-d7a0dfe2c329",
        "value": "realfact3.kymle9rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:53+00:00",
        "timestamp": "1777140173",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dcd26d5-09ae-4783-8039-401d6edc3e8b",
        "value": "rebate-spe.wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:53+00:00",
        "timestamp": "1777140173",
        "to_ids": true,
        "type": "domain",
        "uuid": "48980fd7-95c4-475d-ac0b-657a55a629db",
        "value": "red-fabric4.rus5icabreast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:53+00:00",
        "timestamp": "1777140173",
        "to_ids": true,
        "type": "domain",
        "uuid": "18553919-9fff-4b10-8924-4ce3ea9be389",
        "value": "red-mark3.ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:53+00:00",
        "timestamp": "1777140173",
        "to_ids": true,
        "type": "domain",
        "uuid": "65766888-5d60-43be-abc6-f2db26524f91",
        "value": "redbook6.aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:53+00:00",
        "timestamp": "1777140174",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b384956-4550-434f-986f-766416f10c75",
        "value": "reed-pla.qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:54+00:00",
        "timestamp": "1777140174",
        "to_ids": true,
        "type": "domain",
        "uuid": "84be9b4b-c465-4c7b-9204-09246dc79244",
        "value": "reef-mark.ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:54+00:00",
        "timestamp": "1777140174",
        "to_ids": true,
        "type": "domain",
        "uuid": "537c9d64-a699-4541-883d-0d6961dfc4b3",
        "value": "refinecivil.ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:54+00:00",
        "timestamp": "1777140174",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8e26002-5269-44f5-b1e0-61f081490be1",
        "value": "rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:54+00:00",
        "timestamp": "1777140174",
        "to_ids": true,
        "type": "domain",
        "uuid": "47af87fe-7017-48b2-a1c2-9edb3fa64115",
        "value": "repa1-zone.sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:54+00:00",
        "timestamp": "1777140174",
        "to_ids": true,
        "type": "domain",
        "uuid": "87cb1f81-4c7b-41d5-82d2-a64341a55f71",
        "value": "resolut-revening.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:55+00:00",
        "timestamp": "1777140175",
        "to_ids": true,
        "type": "domain",
        "uuid": "2da063db-8d3c-4449-9714-2285ad42e981",
        "value": "retanetwo.bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:55+00:00",
        "timestamp": "1777140175",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a7ac4db-abb9-4c30-8ca5-7a1f8a3d5b60",
        "value": "revlogi.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:55+00:00",
        "timestamp": "1777140175",
        "to_ids": true,
        "type": "domain",
        "uuid": "b26a889a-0cca-48f1-824d-be7b811647c3",
        "value": "rjhmik2i.kymle2rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:55+00:00",
        "timestamp": "1777140175",
        "to_ids": true,
        "type": "domain",
        "uuid": "723578bf-b170-4708-b5ab-2617a20649ca",
        "value": "rl3xewp1.wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:55+00:00",
        "timestamp": "1777140175",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed617f49-2b69-4adb-8c41-9283b7ec773e",
        "value": "rnoun3-mesh.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:55+00:00",
        "timestamp": "1777140176",
        "to_ids": true,
        "type": "domain",
        "uuid": "cca06166-b263-486c-8e25-044f66578052",
        "value": "rntfvps.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:56+00:00",
        "timestamp": "1777140176",
        "to_ids": true,
        "type": "domain",
        "uuid": "c385ea83-950b-4e0f-bb96-e299b56d6e44",
        "value": "rockconvoy.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:56+00:00",
        "timestamp": "1777140176",
        "to_ids": true,
        "type": "domain",
        "uuid": "921bf31b-c86c-41d9-b006-6517f5a9d63a",
        "value": "rouge-1.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:56+00:00",
        "timestamp": "1777140176",
        "to_ids": true,
        "type": "domain",
        "uuid": "994ff8c1-15af-41df-8f94-7936ad62e192",
        "value": "rouge-3.accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:56+00:00",
        "timestamp": "1777140176",
        "to_ids": true,
        "type": "domain",
        "uuid": "631e0e70-27cf-4c49-98c3-02c0fdc92322",
        "value": "rouge-3.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:56+00:00",
        "timestamp": "1777140176",
        "to_ids": true,
        "type": "domain",
        "uuid": "359ee19d-bad9-4568-8bb9-349f7236d9fd",
        "value": "rouge-4.fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:56+00:00",
        "timestamp": "1777140177",
        "to_ids": true,
        "type": "domain",
        "uuid": "236c5dde-b863-4bba-aeda-ac4b4f306f61",
        "value": "rouge-4.inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:57+00:00",
        "timestamp": "1777140177",
        "to_ids": true,
        "type": "domain",
        "uuid": "b908d1c9-1f51-40b7-8abd-0ada0545390c",
        "value": "rouge-6.caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:57+00:00",
        "timestamp": "1777140177",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4946e18-6c00-4881-a749-49d4ce71a9d3",
        "value": "rouge-7v.geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:57+00:00",
        "timestamp": "1777140177",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eafa472-21cc-4f87-a944-0e8d404f5ad1",
        "value": "rouge-8.slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:57+00:00",
        "timestamp": "1777140177",
        "to_ids": true,
        "type": "domain",
        "uuid": "27f23da3-de8b-4b9e-a141-2e064cf3bb74",
        "value": "rouge-mond-7.limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:57+00:00",
        "timestamp": "1777140177",
        "to_ids": true,
        "type": "domain",
        "uuid": "f721b5b6-7f50-4993-8894-80f0595e2d50",
        "value": "rouge-star-1.after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:57+00:00",
        "timestamp": "1777140178",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f88c047-2c2b-43ca-9157-24973e45480d",
        "value": "roughcomp.zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:58+00:00",
        "timestamp": "1777140178",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e68398e-087b-4e62-ae4c-d9332d68d0e5",
        "value": "roya-node.big2mychild.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:58+00:00",
        "timestamp": "1777140178",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdfb7b98-25fe-4495-adbc-8e928af5dc87",
        "value": "rrdfp.extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:58+00:00",
        "timestamp": "1777140178",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dae7ce1-a1bf-4ba6-a2e2-701b391d6a7c",
        "value": "rs9y.to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:58+00:00",
        "timestamp": "1777140178",
        "to_ids": true,
        "type": "domain",
        "uuid": "a81bb916-a384-47b4-b306-09794f8b6557",
        "value": "rural-drive.ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:58+00:00",
        "timestamp": "1777140179",
        "to_ids": true,
        "type": "domain",
        "uuid": "26205360-c81b-4cc4-9d12-7a2d52da24e8",
        "value": "rus5icabreast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:59+00:00",
        "timestamp": "1777140179",
        "to_ids": true,
        "type": "domain",
        "uuid": "028a0e1f-9a2a-4a53-a181-371fceb34f31",
        "value": "rx64iv.nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:59+00:00",
        "timestamp": "1777140179",
        "to_ids": true,
        "type": "domain",
        "uuid": "163a993b-f3ab-4920-8aee-7fe96538690a",
        "value": "rzeusijc.dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:59+00:00",
        "timestamp": "1777140179",
        "to_ids": true,
        "type": "domain",
        "uuid": "08eec66e-8718-4e09-ba24-52e4377f64b1",
        "value": "sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:59+00:00",
        "timestamp": "1777140179",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ff97717-e73c-494e-a86e-371ee1eb52ff",
        "value": "sand-beach2.wi1msaren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:59+00:00",
        "timestamp": "1777140179",
        "to_ids": true,
        "type": "domain",
        "uuid": "c61b6372-ff0c-4a3f-8117-3b4d4c0d07f5",
        "value": "sandboxrev.blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:02:59+00:00",
        "timestamp": "1777140180",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fca0d95-b972-4110-a0c8-601983208ae7",
        "value": "sapdecode.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:00+00:00",
        "timestamp": "1777140180",
        "to_ids": true,
        "type": "domain",
        "uuid": "a48e1faa-216c-4782-bb7d-8aa41e578423",
        "value": "sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:00+00:00",
        "timestamp": "1777140180",
        "to_ids": true,
        "type": "domain",
        "uuid": "87beb411-ed20-4f69-b399-b034ad7c70cf",
        "value": "sc4nn-point.protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:00+00:00",
        "timestamp": "1777140180",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8d52cd9-835f-4e5b-942c-c06797cf285d",
        "value": "scale-swif.sadfont.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:00+00:00",
        "timestamp": "1777140180",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc6a23e8-b9a1-43b1-bedd-611bd4406a1d",
        "value": "scamanif.de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:00+00:00",
        "timestamp": "1777140180",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba259f03-8cd2-459f-a78a-a7a96ccd7666",
        "value": "scann1-cast.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:01+00:00",
        "timestamp": "1777140181",
        "to_ids": true,
        "type": "domain",
        "uuid": "760be34c-ada9-4d2b-bc0b-632ebf807ee2",
        "value": "scept5tringy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:01+00:00",
        "timestamp": "1777140181",
        "to_ids": true,
        "type": "domain",
        "uuid": "14c5a92c-57d9-4569-b30f-42c8216ecf56",
        "value": "scriptruntime.9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:01+00:00",
        "timestamp": "1777140181",
        "to_ids": true,
        "type": "domain",
        "uuid": "352d8a60-d787-47c0-98b4-32e34c079a9f",
        "value": "sdk-focus.sasdherk.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:01+00:00",
        "timestamp": "1777140181",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c41ab7d-267a-4e07-95cb-e5e835845061",
        "value": "sdsa.light-parcel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:01+00:00",
        "timestamp": "1777140181",
        "to_ids": true,
        "type": "domain",
        "uuid": "02cd1651-ccb6-470f-a652-96d608ddee67",
        "value": "secu-line.drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:01+00:00",
        "timestamp": "1777140182",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe37f9b4-6059-4ccf-873f-936fd41a7469",
        "value": "secure-forge.7zoralix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:02+00:00",
        "timestamp": "1777140182",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b49c1d4-fa6e-4b42-945a-ed3db7480b2e",
        "value": "segmentash.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:02+00:00",
        "timestamp": "1777140182",
        "to_ids": true,
        "type": "domain",
        "uuid": "22ae9bfe-ea5b-41d6-a2d5-6a57f010f85d",
        "value": "segpaylo.de4xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:02+00:00",
        "timestamp": "1777140182",
        "to_ids": true,
        "type": "domain",
        "uuid": "2607bf34-2bcc-410e-9fef-363155f227f1",
        "value": "serlinea8.rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:02+00:00",
        "timestamp": "1777140182",
        "to_ids": true,
        "type": "domain",
        "uuid": "62a0165c-de80-4801-93b9-01a28767ba87",
        "value": "sermarkos.miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:02+00:00",
        "timestamp": "1777140182",
        "to_ids": true,
        "type": "domain",
        "uuid": "95feb1d8-55c7-4f1f-ba14-424c1570ad91",
        "value": "sernex1al.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:02+00:00",
        "timestamp": "1777140183",
        "to_ids": true,
        "type": "domain",
        "uuid": "da2a7557-5eb5-48a2-bc6d-519a99fb3438",
        "value": "sernexor8.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:03+00:00",
        "timestamp": "1777140183",
        "to_ids": true,
        "type": "domain",
        "uuid": "4050c38f-e430-4f4c-8f83-b464c84c59da",
        "value": "serven5um.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:03+00:00",
        "timestamp": "1777140183",
        "to_ids": true,
        "type": "domain",
        "uuid": "20146c52-a85a-4594-b703-42f2cc3d667b",
        "value": "server-scar.to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:03+00:00",
        "timestamp": "1777140183",
        "to_ids": true,
        "type": "domain",
        "uuid": "31d4e842-dfa0-4905-b676-274db8d0b463",
        "value": "sh4d-logic.dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:03+00:00",
        "timestamp": "1777140183",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fc7c7dc-c390-4dad-b238-816f0d7eb524",
        "value": "shal0-mount.ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:03+00:00",
        "timestamp": "1777140184",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c643e49-671e-4613-81dd-5b41ff9cf867",
        "value": "shallo-layer.rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:04+00:00",
        "timestamp": "1777140184",
        "to_ids": true,
        "type": "domain",
        "uuid": "8817abaa-aa05-47f6-9154-3c4e5beae3a1",
        "value": "shapeprivat.qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:04+00:00",
        "timestamp": "1777140184",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebad3c3e-adc1-454f-9672-e083a35765f5",
        "value": "ship-obser.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:04+00:00",
        "timestamp": "1777140184",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed799d05-faab-44cd-b049-8d5463a844bc",
        "value": "shipdat.qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:04+00:00",
        "timestamp": "1777140184",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ec9c67b-242a-4af0-80df-1dfeb2088239",
        "value": "shirela.pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:04+00:00",
        "timestamp": "1777140184",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f28ba5b-af9f-44f1-abb9-93b0c97dca2d",
        "value": "shop-list1.albann0vosel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:04+00:00",
        "timestamp": "1777140185",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb4acd5d-c353-4138-bdc7-c1aa464ead2d",
        "value": "side-vi-ew6.cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:05+00:00",
        "timestamp": "1777140185",
        "to_ids": true,
        "type": "domain",
        "uuid": "041206d5-e9b4-4b39-b114-e88cafc37ce2",
        "value": "side-vi-ew6.kymle2rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:05+00:00",
        "timestamp": "1777140185",
        "to_ids": true,
        "type": "domain",
        "uuid": "789b9962-3e2d-4d7a-aaca-db33ac66a950",
        "value": "sideview6.po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:05+00:00",
        "timestamp": "1777140185",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f7c71e0-15d7-42a0-9045-91fac74d9895",
        "value": "signal-box5.artichf1atly.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:05+00:00",
        "timestamp": "1777140185",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7f7cf68-d992-4210-b4c1-94941a64e703",
        "value": "silentbyt.sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:05+00:00",
        "timestamp": "1777140185",
        "to_ids": true,
        "type": "domain",
        "uuid": "db2e6c67-e551-4614-90d3-9dd86b17e9d1",
        "value": "silver-ra-in6.basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:05+00:00",
        "timestamp": "1777140186",
        "to_ids": true,
        "type": "domain",
        "uuid": "30549ab4-ea67-43dc-ae2c-2687eb7be182",
        "value": "silverrain6.to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:06+00:00",
        "timestamp": "1777140186",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba8a84e-6b88-48af-a2d3-aa81db059a59",
        "value": "silverspecimen.dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:06+00:00",
        "timestamp": "1777140186",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b8696ec-7baa-4de5-9b95-8807d3866f50",
        "value": "sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:06+00:00",
        "timestamp": "1777140186",
        "to_ids": true,
        "type": "domain",
        "uuid": "31dcf579-431c-4225-9b67-e00dc80de1b5",
        "value": "sipzix.acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:06+00:00",
        "timestamp": "1777140186",
        "to_ids": true,
        "type": "domain",
        "uuid": "785fbdb1-157a-46ba-9533-a693a8d59778",
        "value": "sizar-sniffy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:06+00:00",
        "timestamp": "1777140187",
        "to_ids": true,
        "type": "domain",
        "uuid": "db7761fd-433c-4ba7-9b54-5ce7364c653a",
        "value": "sknrzs3z.miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:07+00:00",
        "timestamp": "1777140187",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2536c23-e0d4-4450-a37a-e6d7afbeb714",
        "value": "sku4jn.1zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:07+00:00",
        "timestamp": "1777140187",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd2fce33-3a6b-48ae-a44c-43f17fec0606",
        "value": "skuj.dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:07+00:00",
        "timestamp": "1777140187",
        "to_ids": true,
        "type": "domain",
        "uuid": "daf1062f-555b-4062-a806-597bb6f59217",
        "value": "slanikt7ay.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:07+00:00",
        "timestamp": "1777140187",
        "to_ids": true,
        "type": "domain",
        "uuid": "08673fc0-d80d-4ebd-9570-a02eb9a3326e",
        "value": "small-lamp4.6zoremax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:07+00:00",
        "timestamp": "1777140187",
        "to_ids": true,
        "type": "domain",
        "uuid": "d68120a5-0077-4f6f-9afd-bb724a9986a6",
        "value": "smalllamp3.mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:07+00:00",
        "timestamp": "1777140188",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a8a72bf-99f1-4953-87a3-e560fcf601b6",
        "value": "smart-system1.artichf1atly.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:08+00:00",
        "timestamp": "1777140188",
        "to_ids": true,
        "type": "domain",
        "uuid": "33c8206f-b2bf-4170-b370-5653325d5959",
        "value": "sng2kb.qiv9moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:08+00:00",
        "timestamp": "1777140188",
        "to_ids": true,
        "type": "domain",
        "uuid": "d853c7dc-f597-4f11-b98d-e9da0d0aa5c2",
        "value": "snowbrand.2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:08+00:00",
        "timestamp": "1777140188",
        "to_ids": true,
        "type": "domain",
        "uuid": "a626a3ff-f241-4216-855d-f6851d508133",
        "value": "snowsketc.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:08+00:00",
        "timestamp": "1777140188",
        "to_ids": true,
        "type": "domain",
        "uuid": "e241f55e-38c1-4f6c-9194-1e59c8bd0428",
        "value": "so1id-sheet.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:08+00:00",
        "timestamp": "1777140188",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f3e3bfc-6558-4f0d-a597-4ccbb78c32c5",
        "value": "soft-1.inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:09+00:00",
        "timestamp": "1777140189",
        "to_ids": true,
        "type": "domain",
        "uuid": "49c95aee-4fdc-471f-96df-b63a6a6005a2",
        "value": "soft-4.presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:09+00:00",
        "timestamp": "1777140189",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8c5ecca-771a-4a33-bfbf-b5f83523a1da",
        "value": "soft-4c.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:09+00:00",
        "timestamp": "1777140189",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe7b5a85-eb33-4c1f-972e-7f8486524311",
        "value": "soft-4z.accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:09+00:00",
        "timestamp": "1777140189",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f8f0272-02c5-4578-a6b1-c452e9894ba6",
        "value": "soft-6.fixt-turbine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:09+00:00",
        "timestamp": "1777140189",
        "to_ids": true,
        "type": "domain",
        "uuid": "53588e76-001f-4608-92d9-aeb3b981acb6",
        "value": "soft-ba-g6.sylom5er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:10+00:00",
        "timestamp": "1777140190",
        "to_ids": true,
        "type": "domain",
        "uuid": "90c77808-f260-4b50-bf9c-bc1412170212",
        "value": "soft-cha-ir2.aperitif-form.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:10+00:00",
        "timestamp": "1777140190",
        "to_ids": true,
        "type": "domain",
        "uuid": "9efd564e-a39b-4033-9298-a24c3b3948f7",
        "value": "soft-fire-6q.archit-physiol.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:10+00:00",
        "timestamp": "1777140190",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ebd0344-d5ae-42f4-a24c-24bf602dd5f8",
        "value": "soft-grey2.deser8othic.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:10+00:00",
        "timestamp": "1777140190",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bede8a9-3132-4385-8dc8-193a3d472d25",
        "value": "soft-land-4.caissonnarc0m.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:10+00:00",
        "timestamp": "1777140190",
        "to_ids": true,
        "type": "domain",
        "uuid": "57c84692-0b4f-42dd-a8d8-03638fef59f7",
        "value": "soft-touch5.pulp-turquoise.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:10+00:00",
        "timestamp": "1777140190",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1bce7b1-3530-48ed-a48c-f60c4e857556",
        "value": "soft-wald-2.geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:11+00:00",
        "timestamp": "1777140191",
        "to_ids": true,
        "type": "domain",
        "uuid": "92213648-f3ed-4e33-b4dd-ce7cd5836ea0",
        "value": "softwind2.ra4xilen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:11+00:00",
        "timestamp": "1777140191",
        "to_ids": true,
        "type": "domain",
        "uuid": "777ea032-a5e1-4225-a882-8fb3d78d19f6",
        "value": "sol-coreis.foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:11+00:00",
        "timestamp": "1777140191",
        "to_ids": true,
        "type": "domain",
        "uuid": "54c10b43-1b19-47cd-9d84-b7ff96050f12",
        "value": "sol-spireix.mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:11+00:00",
        "timestamp": "1777140191",
        "to_ids": true,
        "type": "domain",
        "uuid": "41b3292b-fb2c-4335-a41b-b4cdda61f8e6",
        "value": "sol-tideex.boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:11+00:00",
        "timestamp": "1777140192",
        "to_ids": true,
        "type": "domain",
        "uuid": "78286c2c-bfa0-43ad-8f75-2c340ae341e4",
        "value": "solafirmw.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:12+00:00",
        "timestamp": "1777140192",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bbd3d73-abd2-40bc-b654-db6b382772fe",
        "value": "solforge2ar.greecesco7es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:12+00:00",
        "timestamp": "1777140192",
        "to_ids": true,
        "type": "domain",
        "uuid": "d21ac2aa-a4af-4bbe-906c-ad4ddee93835",
        "value": "solid-base64.hai1owhiten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:12+00:00",
        "timestamp": "1777140192",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9291a0e-a24b-49e9-a71c-4e0cb8ab53b6",
        "value": "solline1ix.rainbow7ain.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:12+00:00",
        "timestamp": "1777140192",
        "to_ids": true,
        "type": "domain",
        "uuid": "c595b4c3-1d58-407d-bd30-b04e20f7d4c6",
        "value": "sort5-logic.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:12+00:00",
        "timestamp": "1777140192",
        "to_ids": true,
        "type": "domain",
        "uuid": "079f013d-e5b5-472d-bd01-683b954438df",
        "value": "split-mesh.matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:12+00:00",
        "timestamp": "1777140193",
        "to_ids": true,
        "type": "domain",
        "uuid": "dac02f0a-d168-44e9-b3e1-b7f721ea3515",
        "value": "split-pulse.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:13+00:00",
        "timestamp": "1777140193",
        "to_ids": true,
        "type": "domain",
        "uuid": "541aa332-f01d-437c-b6e8-b94e4c5787d3",
        "value": "splitorche.autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:13+00:00",
        "timestamp": "1777140193",
        "to_ids": true,
        "type": "domain",
        "uuid": "cafdf3da-9fbd-4be9-bf7e-4f299ba5c7c4",
        "value": "sprdec.histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:13+00:00",
        "timestamp": "1777140193",
        "to_ids": true,
        "type": "domain",
        "uuid": "086dabd3-caa3-4eee-bb1d-0362f52aaabb",
        "value": "springledg.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:13+00:00",
        "timestamp": "1777140194",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d4875ec-023a-497c-ac87-227e359c338e",
        "value": "st3r-dock.to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:14+00:00",
        "timestamp": "1777140194",
        "to_ids": true,
        "type": "domain",
        "uuid": "de9a3a33-7369-465b-ab96-4e79aedeb425",
        "value": "st80et3.wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:14+00:00",
        "timestamp": "1777140194",
        "to_ids": true,
        "type": "domain",
        "uuid": "086c3a96-a34c-413a-82ae-013a6c813ebc",
        "value": "stabiliz-watch.kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:14+00:00",
        "timestamp": "1777140194",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ba3b7d7-bd80-4456-b0a3-1ffd98322eb4",
        "value": "star-8v.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:14+00:00",
        "timestamp": "1777140194",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1aa30ab-9066-43a4-a3b2-ed4ef3cbed9d",
        "value": "star-field2.blasph-nimalo.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:14+00:00",
        "timestamp": "1777140194",
        "to_ids": true,
        "type": "domain",
        "uuid": "6aafcce5-215c-40ac-a848-f23e2b87b445",
        "value": "starwinter.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:14+00:00",
        "timestamp": "1777140195",
        "to_ids": true,
        "type": "domain",
        "uuid": "00528730-272f-403f-812b-7f3b699325f5",
        "value": "storsens.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:15+00:00",
        "timestamp": "1777140195",
        "to_ids": true,
        "type": "domain",
        "uuid": "75cbc183-9cea-4831-9606-6b68814031a0",
        "value": "strupt7oupe.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:15+00:00",
        "timestamp": "1777140195",
        "to_ids": true,
        "type": "domain",
        "uuid": "9108048e-7b5e-48c5-8d8b-2036de37cc29",
        "value": "sub-n3uron.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:15+00:00",
        "timestamp": "1777140195",
        "to_ids": true,
        "type": "domain",
        "uuid": "06229a1d-5fac-4b35-9a25-9ff1cc2534e5",
        "value": "sub-p4tt.qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:15+00:00",
        "timestamp": "1777140195",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1766875-f444-4abd-9e13-c650ce2e7585",
        "value": "sub-sal3s.wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:15+00:00",
        "timestamp": "1777140195",
        "to_ids": true,
        "type": "domain",
        "uuid": "858727fe-7746-41bf-9f76-c15e4479410e",
        "value": "summiceda.dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:16+00:00",
        "timestamp": "1777140196",
        "to_ids": true,
        "type": "domain",
        "uuid": "c73160a0-d9cb-49d6-a46c-bd5efdf3a16b",
        "value": "summit1-stream.kymle7rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:16+00:00",
        "timestamp": "1777140196",
        "to_ids": true,
        "type": "domain",
        "uuid": "d53d87d8-78be-4e64-9e24-e22f7d497473",
        "value": "sunauth.ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:16+00:00",
        "timestamp": "1777140196",
        "to_ids": true,
        "type": "domain",
        "uuid": "9740c3ef-38ae-4cc0-beb1-0b0b4ec16994",
        "value": "sunny-d-ay1.sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:16+00:00",
        "timestamp": "1777140196",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b98832a-cf3e-4356-9d9f-00450c0d6f73",
        "value": "sunny-day1.qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:16+00:00",
        "timestamp": "1777140196",
        "to_ids": true,
        "type": "domain",
        "uuid": "099beadb-7b39-4325-915c-39b6ba4a7e94",
        "value": "sunny-day1.zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:16+00:00",
        "timestamp": "1777140197",
        "to_ids": true,
        "type": "domain",
        "uuid": "f516059c-0b13-40fb-8975-c755dc0eef29",
        "value": "sup64h.sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:17+00:00",
        "timestamp": "1777140197",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d409ab9-47a2-409c-b4b3-222a536b87db",
        "value": "supply-basi.plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:17+00:00",
        "timestamp": "1777140197",
        "to_ids": true,
        "type": "domain",
        "uuid": "f878618d-d1f4-460b-ba9e-fdf7b6c45474",
        "value": "supplyalpha.extrav5achkovit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:17+00:00",
        "timestamp": "1777140197",
        "to_ids": true,
        "type": "domain",
        "uuid": "e978f678-87fe-4b99-b0c6-8fcc651782dc",
        "value": "supsensor.sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:17+00:00",
        "timestamp": "1777140197",
        "to_ids": true,
        "type": "domain",
        "uuid": "873aed4a-a22e-4a29-bc7e-ad7e0b8dac86",
        "value": "surv3y7-plate.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:17+00:00",
        "timestamp": "1777140197",
        "to_ids": true,
        "type": "domain",
        "uuid": "f007b4f7-9f31-4b37-9ed7-13e4a4cc0f95",
        "value": "svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:18+00:00",
        "timestamp": "1777140198",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c1f8ecd-cedf-465e-87e2-82885ecdfbdd",
        "value": "svvift5-trace.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:18+00:00",
        "timestamp": "1777140198",
        "to_ids": true,
        "type": "domain",
        "uuid": "15e45d50-8ecd-4807-9d94-fd7d4f3bc5f5",
        "value": "sweet-bun2.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:18+00:00",
        "timestamp": "1777140198",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dd74ce3-b389-4339-8820-59233485c564",
        "value": "sweet-bun2.import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:18+00:00",
        "timestamp": "1777140198",
        "to_ids": true,
        "type": "domain",
        "uuid": "20cb9f91-9b08-4dae-bfe5-4eb0e4730d93",
        "value": "sweet-bun2.jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:18+00:00",
        "timestamp": "1777140198",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ff83b05-1448-4939-9e63-b9b25c098613",
        "value": "sweet-bun2.po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:18+00:00",
        "timestamp": "1777140198",
        "to_ids": true,
        "type": "domain",
        "uuid": "56536067-5440-4368-9b77-d1fcf03df627",
        "value": "sweet-pear2.sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:19+00:00",
        "timestamp": "1777140199",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5283fac-a657-4c09-aeaa-2a38468be67c",
        "value": "switc1-index.po4vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:19+00:00",
        "timestamp": "1777140199",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e4c96fd-ddee-40a7-bbf7-69c04743ba89",
        "value": "switoken.drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:19+00:00",
        "timestamp": "1777140199",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed97bc4d-c787-4ec0-a52d-b9a58a24fe1c",
        "value": "sylo2ven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:19+00:00",
        "timestamp": "1777140199",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0aca0a3-308c-48eb-a730-cd1a2f99b7a4",
        "value": "sylo4mra2t.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:19+00:00",
        "timestamp": "1777140199",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4668f5d-844e-4f14-89b1-0764b595ff3b",
        "value": "sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:19+00:00",
        "timestamp": "1777140199",
        "to_ids": true,
        "type": "domain",
        "uuid": "0087c6c2-09b7-41bd-82b0-6acaba46f212",
        "value": "sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:20+00:00",
        "timestamp": "1777140200",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c90e101-1382-4f7a-a183-93d50e28def9",
        "value": "sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:20+00:00",
        "timestamp": "1777140200",
        "to_ids": true,
        "type": "domain",
        "uuid": "954c85ca-0559-419d-83cd-94d9f48f840e",
        "value": "sylov1er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:20+00:00",
        "timestamp": "1777140200",
        "to_ids": true,
        "type": "domain",
        "uuid": "10265d9a-e8ca-4bfa-b625-8da90c09cf8c",
        "value": "sylov2en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:20+00:00",
        "timestamp": "1777140200",
        "to_ids": true,
        "type": "domain",
        "uuid": "52803f8d-1603-49ce-a669-e6f285ec3260",
        "value": "sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:20+00:00",
        "timestamp": "1777140200",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d96f845-867b-48e1-ad01-06deb4e428e1",
        "value": "sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:20+00:00",
        "timestamp": "1777140201",
        "to_ids": true,
        "type": "domain",
        "uuid": "358c4046-fb0f-472d-b806-7854d626d151",
        "value": "sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:21+00:00",
        "timestamp": "1777140201",
        "to_ids": true,
        "type": "domain",
        "uuid": "7892f651-7ec6-472c-8b46-4e280aeccc1a",
        "value": "sylov9er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:21+00:00",
        "timestamp": "1777140201",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5d8fd02-9aa0-47a3-b776-e9d4ec5582ba",
        "value": "systelaun.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:21+00:00",
        "timestamp": "1777140201",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb8c5bc1-b49b-493b-bd36-3d204aa30b08",
        "value": "t1ny-branch.over-resweat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:21+00:00",
        "timestamp": "1777140201",
        "to_ids": true,
        "type": "domain",
        "uuid": "acfdad08-ccfb-48ba-88cb-fbd6d3011239",
        "value": "t1ny-spool.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:21+00:00",
        "timestamp": "1777140201",
        "to_ids": true,
        "type": "domain",
        "uuid": "95eb4fca-943b-47c0-9f5c-51a8d99e1c11",
        "value": "tal-draon.polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:21+00:00",
        "timestamp": "1777140202",
        "to_ids": true,
        "type": "domain",
        "uuid": "71c2600e-e217-4028-a938-0a26c9c34162",
        "value": "tal-lithet.bovla1xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:22+00:00",
        "timestamp": "1777140202",
        "to_ids": true,
        "type": "domain",
        "uuid": "36b61af8-f90f-4a53-a925-b06aa20b8c16",
        "value": "tal-valeor.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:22+00:00",
        "timestamp": "1777140202",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0a84bc6-5573-4dda-93b8-0d71cb236e8e",
        "value": "talfluxor3.pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:22+00:00",
        "timestamp": "1777140202",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea3cfe27-defd-4a29-931e-3576451084a9",
        "value": "talline5ix.dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:22+00:00",
        "timestamp": "1777140202",
        "to_ids": true,
        "type": "domain",
        "uuid": "68ee0f48-6905-4455-a083-34b5598a3847",
        "value": "talmeshis7.to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:22+00:00",
        "timestamp": "1777140202",
        "to_ids": true,
        "type": "domain",
        "uuid": "d21b5baa-fb88-4daf-8133-38e4048b2429",
        "value": "talnex4on.de8xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:22+00:00",
        "timestamp": "1777140203",
        "to_ids": true,
        "type": "domain",
        "uuid": "85d1206d-3b51-40ef-9298-00ad600a2f64",
        "value": "talspirea9.alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:23+00:00",
        "timestamp": "1777140203",
        "to_ids": true,
        "type": "domain",
        "uuid": "23c4c5a8-f0a0-4bc8-90e0-82dfca3f26b1",
        "value": "talspireos.wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:23+00:00",
        "timestamp": "1777140203",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2faa6d8-7009-4dee-b77d-0db4e2908fba",
        "value": "talvaleet.histori-pneumonia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:23+00:00",
        "timestamp": "1777140203",
        "to_ids": true,
        "type": "domain",
        "uuid": "8994d4dd-ab31-429f-aa6f-7b213158455b",
        "value": "tarra4.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:23+00:00",
        "timestamp": "1777140203",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87e7aaf-5345-4861-a415-4b9a4fe743ff",
        "value": "tasty-pi-e1.import8ravitate.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:23+00:00",
        "timestamp": "1777140204",
        "to_ids": true,
        "type": "domain",
        "uuid": "26f87bee-b69b-4b78-903a-ba565e44c9f9",
        "value": "tasty-pie1.de1xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:24+00:00",
        "timestamp": "1777140204",
        "to_ids": true,
        "type": "domain",
        "uuid": "3135890d-fc91-40b5-a78a-8dbf5604e018",
        "value": "tasty-pie1.po7vaten.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:24+00:00",
        "timestamp": "1777140204",
        "to_ids": true,
        "type": "domain",
        "uuid": "797d9f41-cd52-4033-9a91-a632daa223b0",
        "value": "tastyapple1.kymle5rix.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:24+00:00",
        "timestamp": "1777140204",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba45a9c5-7323-430b-a326-30ef43f86632",
        "value": "tastyapple1.sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:24+00:00",
        "timestamp": "1777140204",
        "to_ids": true,
        "type": "domain",
        "uuid": "faa5c16c-dc5d-42c3-9d96-99f3f9d29c83",
        "value": "tbfnru68.arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:24+00:00",
        "timestamp": "1777140204",
        "to_ids": true,
        "type": "domain",
        "uuid": "e57d8567-3817-4895-9994-791237d5bbea",
        "value": "ten5or-point.boa7dswim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:24+00:00",
        "timestamp": "1777140205",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6a64fcf-f612-451c-a0d3-3de9edf7b3c1",
        "value": "tensorextrac.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:25+00:00",
        "timestamp": "1777140205",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cc4550e-2db1-4635-a796-f26b58643e58",
        "value": "ter8k.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:25+00:00",
        "timestamp": "1777140205",
        "to_ids": true,
        "type": "domain",
        "uuid": "81d91644-271a-4ac8-bdc3-41b9a326483f",
        "value": "tercheck.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:25+00:00",
        "timestamp": "1777140205",
        "to_ids": true,
        "type": "domain",
        "uuid": "022fdee8-513a-4368-ab77-971879675706",
        "value": "theormot.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:25+00:00",
        "timestamp": "1777140205",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e0c4ae9-40c3-4146-9a6a-8bbaa5c16853",
        "value": "theorypin.sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:25+00:00",
        "timestamp": "1777140205",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6d5046c-86a5-4cba-abb1-3e3e048b9db9",
        "value": "there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:25+00:00",
        "timestamp": "1777140206",
        "to_ids": true,
        "type": "domain",
        "uuid": "4758fc7a-a0ae-48f3-8e97-50e96b06ab65",
        "value": "thick8-signal.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:26+00:00",
        "timestamp": "1777140206",
        "to_ids": true,
        "type": "domain",
        "uuid": "71f8fb5d-3278-4e32-998f-c2ec6c0f6e70",
        "value": "thinkin-week.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:26+00:00",
        "timestamp": "1777140206",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a044656-7d4c-4e85-8269-a547966303cc",
        "value": "thorneur.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:26+00:00",
        "timestamp": "1777140206",
        "to_ids": true,
        "type": "domain",
        "uuid": "c86f8847-8b1c-4124-a6cc-cec8f0bd4809",
        "value": "through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:26+00:00",
        "timestamp": "1777140206",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2aae002-3e4b-484e-b0d7-bc4e83d250d5",
        "value": "timberexpose.zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:27+00:00",
        "timestamp": "1777140207",
        "to_ids": true,
        "type": "domain",
        "uuid": "73610283-7591-45fc-a4e5-13462e968585",
        "value": "tippyv0lup.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:27+00:00",
        "timestamp": "1777140207",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b847db2-90a5-4292-87be-e20694779a35",
        "value": "to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:27+00:00",
        "timestamp": "1777140207",
        "to_ids": true,
        "type": "domain",
        "uuid": "e838d6f3-81ff-4340-930f-08f1c7dfede1",
        "value": "to1varin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:27+00:00",
        "timestamp": "1777140207",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6b6e477-43f2-4704-9216-bdf7ef53c1f1",
        "value": "to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:27+00:00",
        "timestamp": "1777140207",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2cb362c-c197-494b-a8e3-383acf38ca14",
        "value": "to2virex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:27+00:00",
        "timestamp": "1777140207",
        "to_ids": true,
        "type": "domain",
        "uuid": "2678e0a9-532c-4c4e-9b8e-87df276cf927",
        "value": "to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:28+00:00",
        "timestamp": "1777140208",
        "to_ids": true,
        "type": "domain",
        "uuid": "6edaca38-7616-4da6-8125-c68e65e14076",
        "value": "to6vamil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:28+00:00",
        "timestamp": "1777140208",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c2995c4-1bc0-48e1-8bbf-76fde2edbecb",
        "value": "to6varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:28+00:00",
        "timestamp": "1777140208",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc559cfe-96e0-4175-8522-7c626b5d58f6",
        "value": "to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:28+00:00",
        "timestamp": "1777140208",
        "to_ids": true,
        "type": "domain",
        "uuid": "164c5258-bc59-4eee-83f1-ea4fd91a6bef",
        "value": "to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:28+00:00",
        "timestamp": "1777140208",
        "to_ids": true,
        "type": "domain",
        "uuid": "2edf0373-2da4-4f3d-bdb1-58ae4c92fc55",
        "value": "to9varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:28+00:00",
        "timestamp": "1777140208",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a1e78bd-08e8-4fb5-ac41-5970de934646",
        "value": "tofk4.autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:29+00:00",
        "timestamp": "1777140209",
        "to_ids": true,
        "type": "domain",
        "uuid": "498ec13c-e20a-447e-8c50-e031b0ec1279",
        "value": "tonecalm.clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:29+00:00",
        "timestamp": "1777140209",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc6b022b-2ac8-4238-af1b-f39f4ccd7bb4",
        "value": "top-f-loor1.cr2pskiing.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:29+00:00",
        "timestamp": "1777140209",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7cb659f-0575-4ef1-83a7-c96e6a90dd44",
        "value": "top-floor1.po3vaxil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:29+00:00",
        "timestamp": "1777140210",
        "to_ids": true,
        "type": "domain",
        "uuid": "96f3e652-a681-4971-bd9d-d332693019e1",
        "value": "tqeibj.wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:30+00:00",
        "timestamp": "1777140210",
        "to_ids": true,
        "type": "domain",
        "uuid": "19ee3ecf-ce37-43a4-a230-82f66e15e0d4",
        "value": "tr4ck7-plate.zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:30+00:00",
        "timestamp": "1777140210",
        "to_ids": true,
        "type": "domain",
        "uuid": "b42951a9-d516-4781-a71d-4403a5e22a68",
        "value": "tr4cke-chain.2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:30+00:00",
        "timestamp": "1777140210",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebba6a4a-e10c-4472-8660-d0685aff23f5",
        "value": "tracesound.dex3lavan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:30+00:00",
        "timestamp": "1777140210",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bb87d69-8502-432a-8553-c4e18458a0fe",
        "value": "tracfiel.acquisit-batper.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:30+00:00",
        "timestamp": "1777140210",
        "to_ids": true,
        "type": "domain",
        "uuid": "a647a783-33d5-4cc1-9a03-7427d0afc02c",
        "value": "trans6-stream.2zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:30+00:00",
        "timestamp": "1777140211",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c22ab9c-20ad-4f33-8e4b-c7e3a34f2b00",
        "value": "tri-draa.mongol-replace.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:31+00:00",
        "timestamp": "1777140211",
        "to_ids": true,
        "type": "domain",
        "uuid": "0889490e-2d63-48e4-8f3d-9c492989e63a",
        "value": "tri-draa.plantpo1luter.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:31+00:00",
        "timestamp": "1777140211",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb91160b-b7b3-4231-8375-c052c5d3ed5a",
        "value": "tri-fluxa.miv7sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:31+00:00",
        "timestamp": "1777140211",
        "to_ids": true,
        "type": "domain",
        "uuid": "20a04f5d-3afb-40af-9c74-852f1e481b75",
        "value": "tri-markis.infirmary5care.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:31+00:00",
        "timestamp": "1777140211",
        "to_ids": true,
        "type": "domain",
        "uuid": "81e590d0-f834-4779-8edf-cf4ae7005b6d",
        "value": "tricoreos5.po7vaxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:31+00:00",
        "timestamp": "1777140211",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a4ed17d-2291-4233-bcac-5593da838598",
        "value": "trigg-crest.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:31+00:00",
        "timestamp": "1777140212",
        "to_ids": true,
        "type": "domain",
        "uuid": "adfa42be-9070-4e01-a45d-2f96317a4110",
        "value": "triggerdispatch.sylov4en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:32+00:00",
        "timestamp": "1777140212",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b769bc8-7299-483e-b0d4-71daf166c9de",
        "value": "trusbyt.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:32+00:00",
        "timestamp": "1777140212",
        "to_ids": true,
        "type": "domain",
        "uuid": "8258d3c0-484f-4f65-aee9-8190716357d0",
        "value": "ttgfvj.bovla7xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:32+00:00",
        "timestamp": "1777140213",
        "to_ids": true,
        "type": "domain",
        "uuid": "d636bed9-5f0f-4e5a-9e89-bbf2c1645cfb",
        "value": "tzlajh.decay5obes.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:33+00:00",
        "timestamp": "1777140213",
        "to_ids": true,
        "type": "domain",
        "uuid": "0306e917-8210-4cae-8e9b-563dd3b9928e",
        "value": "ujv18y.mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:33+00:00",
        "timestamp": "1777140213",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aa19c70-54f4-4495-b9c8-d1a756ef5de5",
        "value": "ultra-5ort.qi7mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:33+00:00",
        "timestamp": "1777140213",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ddbccdc-0893-4b2a-a3d6-f188003de06e",
        "value": "ultra-c4ny0n.sylov3er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:33+00:00",
        "timestamp": "1777140213",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ffc37e2-fb90-45db-a6df-af29ab189ae9",
        "value": "ultra-f1rmvva.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:33+00:00",
        "timestamp": "1777140213",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3567ae2-b99c-4b09-96b8-7814d79af254",
        "value": "ultra-g0ld.9zorexal.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:33+00:00",
        "timestamp": "1777140214",
        "to_ids": true,
        "type": "domain",
        "uuid": "0539b77d-bce1-47f5-a23a-8bf92c621a14",
        "value": "ungljmv.qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:34+00:00",
        "timestamp": "1777140214",
        "to_ids": true,
        "type": "domain",
        "uuid": "5034d82b-b040-4088-8135-7e8980313d54",
        "value": "uoovxa.ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:34+00:00",
        "timestamp": "1777140214",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c7fc7f7-173b-4516-809f-5017fccd4fd0",
        "value": "urbanscarle.drumf1esh.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:34+00:00",
        "timestamp": "1777140214",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb4492d4-ce59-44c4-a6b7-b00c14e3f189",
        "value": "uxld.po8vaxen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:34+00:00",
        "timestamp": "1777140214",
        "to_ids": true,
        "type": "domain",
        "uuid": "985847f4-892d-4be1-beb7-0758fea8f0da",
        "value": "v3lve4-core.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:34+00:00",
        "timestamp": "1777140214",
        "to_ids": true,
        "type": "domain",
        "uuid": "029c2340-ab5e-45e9-bd02-2c0f0d92add5",
        "value": "v3lvet-core.matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:35+00:00",
        "timestamp": "1777140215",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8b528a5-dc44-4690-9f88-a1af386e4a49",
        "value": "va11dat-spark.arapnik-nosog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:35+00:00",
        "timestamp": "1777140215",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ac46974-2149-4e83-99bd-764f7ff76359",
        "value": "valeanc.capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:35+00:00",
        "timestamp": "1777140215",
        "to_ids": true,
        "type": "domain",
        "uuid": "85cccfdc-a102-4f6a-ae82-1c7276dae856",
        "value": "valehar.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:35+00:00",
        "timestamp": "1777140215",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dc9a3d9-d272-4d6e-aeaf-8ef36a84583e",
        "value": "validatorgri.miv4soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:35+00:00",
        "timestamp": "1777140215",
        "to_ids": true,
        "type": "domain",
        "uuid": "4eb76a44-b181-422b-a121-b0f24626817d",
        "value": "validatorgus.ra2xemil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:35+00:00",
        "timestamp": "1777140216",
        "to_ids": true,
        "type": "domain",
        "uuid": "63e2019c-6939-475f-9a63-42d3b35b8850",
        "value": "valleymount.foam-take.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:36+00:00",
        "timestamp": "1777140216",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdcb558c-7951-4fea-8bde-0d4c7068f5e8",
        "value": "value-quota.wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:36+00:00",
        "timestamp": "1777140216",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fe20e43-865d-47a8-a805-577023786ec9",
        "value": "vaul2-sheet.de6xamel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:36+00:00",
        "timestamp": "1777140216",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f20dde9-8a9d-4e83-a509-23f0199f8f99",
        "value": "vel-lineet.polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:36+00:00",
        "timestamp": "1777140216",
        "to_ids": true,
        "type": "domain",
        "uuid": "593aff42-cc26-402e-8fc8-62cdf08d7008",
        "value": "vel-markal.de5xorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:36+00:00",
        "timestamp": "1777140216",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcf7f3ac-ae7a-4a1f-944c-96e585260b39",
        "value": "velcrestar5.ra6ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:36+00:00",
        "timestamp": "1777140217",
        "to_ids": true,
        "type": "domain",
        "uuid": "5616d2cf-38f1-442d-944a-bf68ae854f8a",
        "value": "vellith4en.qi4mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:37+00:00",
        "timestamp": "1777140217",
        "to_ids": true,
        "type": "domain",
        "uuid": "87b3dc99-7a54-4099-b5de-69dfca6b6894",
        "value": "vellithal3.rax4pavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:37+00:00",
        "timestamp": "1777140217",
        "to_ids": true,
        "type": "domain",
        "uuid": "07cd6b9b-1198-4836-8e10-bd4954e6c662",
        "value": "velmesh7ix.zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:37+00:00",
        "timestamp": "1777140217",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d1e4ee6-d8e2-4c4f-82d2-8cc1128304cd",
        "value": "velnexor3.dark-hypnosis.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:37+00:00",
        "timestamp": "1777140217",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd3cdb99-ce57-4a7c-b3a5-dbf52640a238",
        "value": "veltide4a.kymle1rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:37+00:00",
        "timestamp": "1777140217",
        "to_ids": true,
        "type": "domain",
        "uuid": "38d072e8-a488-401b-ba8a-151b4c8075c5",
        "value": "veltideen.sylov8en.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:37+00:00",
        "timestamp": "1777140218",
        "to_ids": true,
        "type": "domain",
        "uuid": "74950330-a9c4-4623-8e0f-027e6a3a11bc",
        "value": "velvepastu.cloafade.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:38+00:00",
        "timestamp": "1777140218",
        "to_ids": true,
        "type": "domain",
        "uuid": "86042597-bbef-4985-b062-8217a03915d9",
        "value": "vert-2.cicada-tkacki.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:38+00:00",
        "timestamp": "1777140218",
        "to_ids": true,
        "type": "domain",
        "uuid": "e99ef2d9-166b-470d-aa84-5ce20b7a32db",
        "value": "vert-2.ma8nemezzan.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:38+00:00",
        "timestamp": "1777140218",
        "to_ids": true,
        "type": "domain",
        "uuid": "958d268a-df2b-4236-891d-e7a426d52574",
        "value": "vert-2.melting-torrent.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:38+00:00",
        "timestamp": "1777140218",
        "to_ids": true,
        "type": "domain",
        "uuid": "2df7418c-a706-4324-8215-09ab44c19633",
        "value": "vert-3.ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:38+00:00",
        "timestamp": "1777140219",
        "to_ids": true,
        "type": "domain",
        "uuid": "216e9818-3b93-49de-9ad7-319b53222aac",
        "value": "vert-3.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:39+00:00",
        "timestamp": "1777140219",
        "to_ids": true,
        "type": "domain",
        "uuid": "43ce4ef2-6fb7-4f17-9a95-51a433e46233",
        "value": "vert-3m.svolota-player.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:39+00:00",
        "timestamp": "1777140219",
        "to_ids": true,
        "type": "domain",
        "uuid": "19904413-58e1-45f3-9cf4-f33cd7b1949f",
        "value": "vert-4.geor8eharvest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:39+00:00",
        "timestamp": "1777140219",
        "to_ids": true,
        "type": "domain",
        "uuid": "59ec5a44-124d-49ba-b70a-5217bd52ea4b",
        "value": "vert-4b.blackbirdr0ot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:39+00:00",
        "timestamp": "1777140219",
        "to_ids": true,
        "type": "domain",
        "uuid": "86b86582-8880-404f-9fca-5e68a0ed5e76",
        "value": "vert-4m.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:39+00:00",
        "timestamp": "1777140219",
        "to_ids": true,
        "type": "domain",
        "uuid": "f145af3f-6b23-496b-8d69-21136248e3c3",
        "value": "vert-5.miv6soren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:39+00:00",
        "timestamp": "1777140220",
        "to_ids": true,
        "type": "domain",
        "uuid": "506f01cf-aff3-4f0e-b404-744e001ea798",
        "value": "vert-9.idol-worship.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:40+00:00",
        "timestamp": "1777140220",
        "to_ids": true,
        "type": "domain",
        "uuid": "12a1a40d-1d46-4f4b-a975-80fb7d02d942",
        "value": "vert-9.presidium-spike.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:40+00:00",
        "timestamp": "1777140220",
        "to_ids": true,
        "type": "domain",
        "uuid": "95c30944-c452-40cd-94c9-d934b4c55cbe",
        "value": "vinecarg.to9varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:40+00:00",
        "timestamp": "1777140220",
        "to_ids": true,
        "type": "domain",
        "uuid": "03bb14fc-3875-4227-b5d4-5fe010807571",
        "value": "visualpure.5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:40+00:00",
        "timestamp": "1777140220",
        "to_ids": true,
        "type": "domain",
        "uuid": "694879e5-417d-4ab4-b5a6-327c4fadf10c",
        "value": "vitalpur.sylo8mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:40+00:00",
        "timestamp": "1777140220",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c4b8831-9dc7-40f1-a636-e9cb80586b0c",
        "value": "voicebund.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:41+00:00",
        "timestamp": "1777140221",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f802e48-492b-4c63-833e-a15a13d38d5a",
        "value": "vor-spireos.nov3liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:41+00:00",
        "timestamp": "1777140221",
        "to_ids": true,
        "type": "domain",
        "uuid": "140e2b81-66b0-4195-8214-bcf78ffe8853",
        "value": "vorcrestix.zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:41+00:00",
        "timestamp": "1777140221",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d0d7fc6-b7d7-4c28-bd72-e78e8fbd3136",
        "value": "vorfluxor1.to4ramel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:41+00:00",
        "timestamp": "1777140221",
        "to_ids": true,
        "type": "domain",
        "uuid": "ade2ad49-f048-43e1-8cb5-9c643b45dd04",
        "value": "vorforge7al.bexla9rin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:41+00:00",
        "timestamp": "1777140221",
        "to_ids": true,
        "type": "domain",
        "uuid": "7537987f-6653-4aff-a2eb-9c87d4a34e78",
        "value": "vorlithen4.sylo6mer.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:41+00:00",
        "timestamp": "1777140222",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f07a3c0-fb4b-48bb-8b54-2267ce0639f5",
        "value": "vorlithum.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:42+00:00",
        "timestamp": "1777140222",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ef60707-aecb-45fb-91a6-a30406cfe6ed",
        "value": "vormark6um.to1varil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:42+00:00",
        "timestamp": "1777140222",
        "to_ids": true,
        "type": "domain",
        "uuid": "f99ebf98-956b-4e00-92bf-e0f6eef9e654",
        "value": "w2poohjf.kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:42+00:00",
        "timestamp": "1777140222",
        "to_ids": true,
        "type": "domain",
        "uuid": "10449cee-5c3e-4141-a71f-311fcc56c490",
        "value": "w90084qc.zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:42+00:00",
        "timestamp": "1777140222",
        "to_ids": true,
        "type": "domain",
        "uuid": "01062ad7-dcb5-4712-824c-3d3c5fc9c771",
        "value": "wagcrate.dis1iketerrit.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:42+00:00",
        "timestamp": "1777140222",
        "to_ids": true,
        "type": "domain",
        "uuid": "294f9693-2ff8-4c60-b30f-b7f52dfd9088",
        "value": "wald-2x.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:42+00:00",
        "timestamp": "1777140223",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5850f00-fd71-487e-84e6-f4cd82c5b092",
        "value": "wald-9.credibil-debauch.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:43+00:00",
        "timestamp": "1777140223",
        "to_ids": true,
        "type": "domain",
        "uuid": "4180514d-f0cc-448d-8488-e122e1866331",
        "value": "wald-baum-6w.inject-mitroph.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:43+00:00",
        "timestamp": "1777140223",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbd2413d-0ca2-4c59-8f1a-b7b77482ed32",
        "value": "wald-petit-7.there5econd.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:43+00:00",
        "timestamp": "1777140223",
        "to_ids": true,
        "type": "domain",
        "uuid": "70cad1f4-5379-44fb-9b3f-fb9f191f430e",
        "value": "warm-co-at4.arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:43+00:00",
        "timestamp": "1777140223",
        "to_ids": true,
        "type": "domain",
        "uuid": "7961c161-69ab-4fe1-ab49-be5e774ff235",
        "value": "warm-co-at4.bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:43+00:00",
        "timestamp": "1777140224",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad6cabb3-36c5-403c-899a-f1e0310d7a2c",
        "value": "warm-co-at4.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:44+00:00",
        "timestamp": "1777140224",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc757a2a-800a-42b8-81d3-2b8cff38022a",
        "value": "warm-coat1.rus5icabreast.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:44+00:00",
        "timestamp": "1777140224",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfaabfa5-617b-4b3b-9401-5fb59017fdcf",
        "value": "warm-fi-re5.zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:44+00:00",
        "timestamp": "1777140224",
        "to_ids": true,
        "type": "domain",
        "uuid": "0abbd201-98d9-432c-87c2-e750ba581b13",
        "value": "warm-m-ilk4.jemannik5helma.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:44+00:00",
        "timestamp": "1777140224",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d9fe217-06cc-43cd-8be7-3b760ba8fe2e",
        "value": "warmbr-ead5.sylom2er.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:44+00:00",
        "timestamp": "1777140224",
        "to_ids": true,
        "type": "domain",
        "uuid": "7786bec9-c0d3-4727-a270-71c9bd2e134a",
        "value": "warmcoat4.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:44+00:00",
        "timestamp": "1777140225",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9e273ca-3785-4a08-9645-0d0b1b046841",
        "value": "warmf-ire5.sin8lebreasted.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:45+00:00",
        "timestamp": "1777140225",
        "to_ids": true,
        "type": "domain",
        "uuid": "c07eea73-12a9-4a52-aa0d-f1a25b7f081d",
        "value": "warmfire5.qi9maren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:45+00:00",
        "timestamp": "1777140225",
        "to_ids": true,
        "type": "domain",
        "uuid": "13ae6d75-fff8-4ce9-881e-9c960014dd04",
        "value": "warmlunar.ra8ximel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:45+00:00",
        "timestamp": "1777140225",
        "to_ids": true,
        "type": "domain",
        "uuid": "af0e89b0-cc32-480d-a062-f3bd915c8979",
        "value": "warmprairie.protocave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:45+00:00",
        "timestamp": "1777140225",
        "to_ids": true,
        "type": "domain",
        "uuid": "34f3792b-1412-40f3-9e24-9f78b0ebad98",
        "value": "water-wagged.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:45+00:00",
        "timestamp": "1777140225",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b7e007f-3e4e-4660-8b8a-bc9f1d68881c",
        "value": "wave-netw.pav3lorex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:45+00:00",
        "timestamp": "1777140226",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6a98636-6e88-411c-a0a5-38b786bffb4e",
        "value": "wentreck.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:46+00:00",
        "timestamp": "1777140226",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4e3aaee-3a8a-4e2d-902a-10c0cdcb3972",
        "value": "wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:46+00:00",
        "timestamp": "1777140226",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a946998-5a97-4048-aa8a-b1a26bbbbe99",
        "value": "west-layer.4zoralin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:46+00:00",
        "timestamp": "1777140226",
        "to_ids": true,
        "type": "domain",
        "uuid": "45e4c384-12b6-41ab-9401-210191fa5118",
        "value": "wfamakg.to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:46+00:00",
        "timestamp": "1777140226",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d335205-eefd-4c06-a2eb-32168c55e253",
        "value": "white-pa-per4.mi5demeanwork.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:46+00:00",
        "timestamp": "1777140226",
        "to_ids": true,
        "type": "domain",
        "uuid": "58932328-fe65-479f-a50e-ed795dad3b3c",
        "value": "white-shi-rt2.de8xapil.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:46+00:00",
        "timestamp": "1777140227",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c9b926e-a9ec-4f36-95f8-d31e3fb27e9d",
        "value": "white-shir-t2.arena-plug.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:47+00:00",
        "timestamp": "1777140227",
        "to_ids": true,
        "type": "domain",
        "uuid": "08bc6739-0b0e-402d-b6e4-50e44a913c4e",
        "value": "white-shirt2.bovla5xel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:47+00:00",
        "timestamp": "1777140227",
        "to_ids": true,
        "type": "domain",
        "uuid": "adb41100-33da-4911-bddd-0a1a9da4e75c",
        "value": "white-wa-ll4.9zoravel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:47+00:00",
        "timestamp": "1777140227",
        "to_ids": true,
        "type": "domain",
        "uuid": "825c25fe-37b8-4f98-b276-b6dddf34cd7d",
        "value": "white5lave.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:47+00:00",
        "timestamp": "1777140227",
        "to_ids": true,
        "type": "domain",
        "uuid": "500ec956-1971-42ab-8d03-9dec114b2058",
        "value": "whitecl-oud5.basis-embankment.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:47+00:00",
        "timestamp": "1777140228",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a393f9f-22c4-4803-91c2-6e9c491c186a",
        "value": "whitecl-oud5.to7virel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:48+00:00",
        "timestamp": "1777140228",
        "to_ids": true,
        "type": "domain",
        "uuid": "1657dd7c-71af-4793-9ce4-a4475d48d968",
        "value": "wi1d-array.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:48+00:00",
        "timestamp": "1777140228",
        "to_ids": true,
        "type": "domain",
        "uuid": "03700e08-aa3a-4874-a2f7-89dd07af71aa",
        "value": "wi1msaren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:48+00:00",
        "timestamp": "1777140228",
        "to_ids": true,
        "type": "domain",
        "uuid": "6eb3901b-aa1e-41a9-84de-216c5a03325b",
        "value": "wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:48+00:00",
        "timestamp": "1777140228",
        "to_ids": true,
        "type": "domain",
        "uuid": "418bda28-d937-450d-9982-816a5a141e44",
        "value": "wi3sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:48+00:00",
        "timestamp": "1777140228",
        "to_ids": true,
        "type": "domain",
        "uuid": "f26d1e6a-f833-4b6f-ae85-c95e3176b19f",
        "value": "wi3sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:48+00:00",
        "timestamp": "1777140229",
        "to_ids": true,
        "type": "domain",
        "uuid": "194aed08-60aa-496a-a53a-5c858e867dca",
        "value": "wi7sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:49+00:00",
        "timestamp": "1777140229",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fe2b75c-0ae8-482b-a5e9-53e21ca18bb9",
        "value": "wi8sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:49+00:00",
        "timestamp": "1777140229",
        "to_ids": true,
        "type": "domain",
        "uuid": "b28deefd-748a-4d4a-b668-9a647f89181c",
        "value": "wi9sorin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:49+00:00",
        "timestamp": "1777140229",
        "to_ids": true,
        "type": "domain",
        "uuid": "0da6cf6a-658a-496f-a33c-6c1e68bd1180",
        "value": "wind-3.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:49+00:00",
        "timestamp": "1777140229",
        "to_ids": true,
        "type": "domain",
        "uuid": "96b2d89f-f6d9-42b3-ae24-c166a49de271",
        "value": "wind-3p.dometo1ochy.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:49+00:00",
        "timestamp": "1777140229",
        "to_ids": true,
        "type": "domain",
        "uuid": "4edab546-bbab-45e1-a47c-8d2598256420",
        "value": "wind-5.accustom-unrecog.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:49+00:00",
        "timestamp": "1777140230",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8621a5a-c26f-45fa-b578-6b85e22d9e2f",
        "value": "wind-9q.histor5corching.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:50+00:00",
        "timestamp": "1777140230",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ac2abc3-836e-4d72-b07d-bc6960d66e14",
        "value": "winttra.matri2rchyor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:50+00:00",
        "timestamp": "1777140230",
        "to_ids": true,
        "type": "domain",
        "uuid": "9084b90c-689a-47b5-8f3e-7de031c6dded",
        "value": "work-gran.wi3sorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:50+00:00",
        "timestamp": "1777140230",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d938755-17ac-4016-ae2b-76075fe5119b",
        "value": "workersolar.dex7lavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:50+00:00",
        "timestamp": "1777140230",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1a2c980-df84-46e6-ac1f-806257393d6a",
        "value": "wpckch.dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:50+00:00",
        "timestamp": "1777140230",
        "to_ids": true,
        "type": "domain",
        "uuid": "905e2631-60dd-49ef-a3f1-7a26e1171d38",
        "value": "wwyik.dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:50+00:00",
        "timestamp": "1777140231",
        "to_ids": true,
        "type": "domain",
        "uuid": "e73e9a63-642c-4595-bb0b-9b6d5d62161b",
        "value": "x1ov.to2varon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:51+00:00",
        "timestamp": "1777140231",
        "to_ids": true,
        "type": "domain",
        "uuid": "40c4c40d-7118-424d-9b6e-7ea0d1d4a255",
        "value": "xeeeto.ant5pender.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:51+00:00",
        "timestamp": "1777140231",
        "to_ids": true,
        "type": "domain",
        "uuid": "7810e4cd-0f6a-42ba-8808-c312fc8bbcdf",
        "value": "xg6xtld1.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:51+00:00",
        "timestamp": "1777140231",
        "to_ids": true,
        "type": "domain",
        "uuid": "47fa3874-96f4-4ea6-bc32-efd78d033762",
        "value": "xj15ti.qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:51+00:00",
        "timestamp": "1777140231",
        "to_ids": true,
        "type": "domain",
        "uuid": "ced924ac-b0ea-45ab-be21-8f657eb87d65",
        "value": "xjnorrmf.through7esid.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:51+00:00",
        "timestamp": "1777140231",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcd2528c-b83a-488f-b155-80414374b239",
        "value": "xvy42z.mess-laboratory.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:52+00:00",
        "timestamp": "1777140232",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0dc3154-cc95-4d9b-9614-bb267c6ea008",
        "value": "xwql.rentcad.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:52+00:00",
        "timestamp": "1777140232",
        "to_ids": true,
        "type": "domain",
        "uuid": "123fa531-d1d1-4b52-8f85-25e2b64b030c",
        "value": "xzkgjdst.capriccio-nephew.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:52+00:00",
        "timestamp": "1777140232",
        "to_ids": true,
        "type": "domain",
        "uuid": "04cb5f2a-2194-457c-ba1d-9a481c9eaa48",
        "value": "yeay.kymle6rax.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:52+00:00",
        "timestamp": "1777140232",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a06c8a5-63ab-4a62-a94f-78c182e97248",
        "value": "yjbkbpa.5zorelin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:52+00:00",
        "timestamp": "1777140232",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2f3146c-b28e-4c4b-9b8b-7087db8058b9",
        "value": "ymqzqwf.dependint7amur.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:52+00:00",
        "timestamp": "1777140233",
        "to_ids": true,
        "type": "domain",
        "uuid": "52f08092-6b6a-4b30-aff1-cfaec6fcf3af",
        "value": "yt3oufng.polyate-eye.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:53+00:00",
        "timestamp": "1777140233",
        "to_ids": true,
        "type": "domain",
        "uuid": "afaca316-6737-4ea4-b871-fc66003286ff",
        "value": "yxex4i.alexand-trouble.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:53+00:00",
        "timestamp": "1777140233",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb2c820a-957d-493f-ac0b-63a7b3264e50",
        "value": "z7wb.autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:53+00:00",
        "timestamp": "1777140233",
        "to_ids": true,
        "type": "domain",
        "uuid": "3926ff77-56c6-459d-80cb-210c65d8fcfc",
        "value": "zeit-1.excavat-toponym.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:53+00:00",
        "timestamp": "1777140233",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d7f81b2-97a8-4a3f-9e86-a8411a7616dd",
        "value": "zeit-2k.limbe7revolut.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:53+00:00",
        "timestamp": "1777140233",
        "to_ids": true,
        "type": "domain",
        "uuid": "98186b69-3177-4e8a-8208-7a1a3012d7de",
        "value": "zeit-4k.jazz-password.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:53+00:00",
        "timestamp": "1777140234",
        "to_ids": true,
        "type": "domain",
        "uuid": "03118d3f-9ac1-4665-8ff4-ef32236f6da9",
        "value": "zeit-6x.multi-machine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:54+00:00",
        "timestamp": "1777140234",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bc53aa5-e9ed-42df-b4b5-26fc4932e57d",
        "value": "zeit-8.after-coordinat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:55+00:00",
        "timestamp": "1777140235",
        "to_ids": true,
        "type": "domain",
        "uuid": "a606b499-c194-443c-98fa-acd1c958569f",
        "value": "zeit-9.ales1ine.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:55+00:00",
        "timestamp": "1777140235",
        "to_ids": true,
        "type": "domain",
        "uuid": "67dd6f1f-dae5-4b52-a164-2f855a0590e6",
        "value": "zeit-land-8v.dua1ismmatron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:55+00:00",
        "timestamp": "1777140236",
        "to_ids": true,
        "type": "domain",
        "uuid": "82e00496-03c0-49d1-8480-89897fd68f21",
        "value": "zeit-w2.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:56+00:00",
        "timestamp": "1777140236",
        "to_ids": true,
        "type": "domain",
        "uuid": "21e71384-7de3-4bf1-a406-13fe90cbb901",
        "value": "zen-drais.boatdi1l.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:56+00:00",
        "timestamp": "1777140236",
        "to_ids": true,
        "type": "domain",
        "uuid": "6953dc17-0c50-4070-ab10-7a5c13613c1a",
        "value": "zencorear1.nov7liren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:56+00:00",
        "timestamp": "1777140236",
        "to_ids": true,
        "type": "domain",
        "uuid": "559d56e6-00bf-4b8a-8b90-88105b6c7e19",
        "value": "zencrest8et.dashjore.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:56+00:00",
        "timestamp": "1777140236",
        "to_ids": true,
        "type": "domain",
        "uuid": "7391f764-8550-45c5-b6b3-20603a9de285",
        "value": "zencrest9um.wertbash.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:56+00:00",
        "timestamp": "1777140236",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5e26a03-d852-4a91-9f28-d0921713c2ca",
        "value": "zenfluxum.blockad-creak.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140237",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c8b265a-ee0c-4648-a2c5-313b6fef3ca9",
        "value": "zenmarka.qi2mavel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140237",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3998dc2-b3ab-4190-bf4d-d5a7bccffbc7",
        "value": "zenvale2on.clo5etterebeat.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140237",
        "to_ids": true,
        "type": "domain",
        "uuid": "58d4e340-aa24-4c42-9b9c-8db124c092ff",
        "value": "zex3liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140237",
        "to_ids": true,
        "type": "domain",
        "uuid": "575adf82-fabc-47c8-ad46-b4e6bf00e00a",
        "value": "zex8liron.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140237",
        "to_ids": true,
        "type": "domain",
        "uuid": "8669819c-c531-40ea-91cc-51e9c5ffcad5",
        "value": "zfvhht.pitifrube1la.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140237",
        "to_ids": true,
        "type": "domain",
        "uuid": "85f9e9b1-615f-4324-8777-b88ee0f835e7",
        "value": "zkmoskj.qazsadf.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:57+00:00",
        "timestamp": "1777140238",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3aa62be-e2d1-4bf1-b4f8-5579a88bcd4c",
        "value": "zmxbt7t.kymli6rex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:58+00:00",
        "timestamp": "1777140238",
        "to_ids": true,
        "type": "domain",
        "uuid": "055f7feb-a815-4d02-82cb-21fa6ee68ba8",
        "value": "zom2lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:58+00:00",
        "timestamp": "1777140238",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e2fe65e-ea81-4c9b-a319-aaacf1239c62",
        "value": "zom7lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:58+00:00",
        "timestamp": "1777140238",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f0bfa2c-ad53-4551-a30f-949bfdf58947",
        "value": "zom8lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:58+00:00",
        "timestamp": "1777140238",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8c3c1c0-52d0-42ab-8f4d-422a559c46cf",
        "value": "zom9lirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:58+00:00",
        "timestamp": "1777140239",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4405dd7-1ff7-4e36-b7d8-2da6f5d929ae",
        "value": "zty3nf.autovete7an.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:59+00:00",
        "timestamp": "1777140239",
        "to_ids": true,
        "type": "domain",
        "uuid": "40256874-3ac2-4442-9254-935c0b9aca9e",
        "value": "zxvy.diet-lanolin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:59+00:00",
        "timestamp": "1777140239",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d8c574a-8efe-418d-8ea3-8bf3ff2f9939",
        "value": "zyddq.ra5ximor.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:59+00:00",
        "timestamp": "1777140239",
        "to_ids": true,
        "type": "domain",
        "uuid": "cecfbcf1-6e10-41e0-ac80-ac0ec503be6f",
        "value": "573820-ticket-oauth.portal-wellsfargo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:59+00:00",
        "timestamp": "1777140239",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac58daf3-5c8a-4561-9732-69d3541f1971",
        "value": "kuser-insurance-panel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:59+00:00",
        "timestamp": "1777140239",
        "to_ids": true,
        "type": "domain",
        "uuid": "5085c6aa-e5a2-4eec-8988-b90e0e3f8055",
        "value": "oeisoiuesooqoesb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:03:59+00:00",
        "timestamp": "1777140240",
        "to_ids": true,
        "type": "domain",
        "uuid": "de467ad9-7a29-436d-b45a-ae219d7ba5b8",
        "value": "offsefg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:00+00:00",
        "timestamp": "1777140240",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfb8b41a-96be-420d-ae8d-f162fe0f3466",
        "value": "pin3.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:00+00:00",
        "timestamp": "1777140240",
        "to_ids": true,
        "type": "domain",
        "uuid": "87af2326-4346-458f-941f-b35e16601b0e",
        "value": "portal-wellsfargo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:00+00:00",
        "timestamp": "1777140240",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ab0f538-9dca-4003-a7a4-d34d9fc227d7",
        "value": "update-stage.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:00+00:00",
        "timestamp": "1777140240",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3c760d9-4728-4e11-ba84-66ee8d1b7478",
        "value": "vlewnow.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:00+00:00",
        "timestamp": "1777140240",
        "to_ids": false,
        "type": "url",
        "uuid": "db118ccc-0ad6-425a-ae46-111c779e1964",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5b9cc3365e8a635d5c596475a9474c7c273d8c22",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:00+00:00",
        "timestamp": "1777140241",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d954a61-a4c0-41df-bffa-0e3cb7732d07",
        "value": "109verify-checkguest.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:01+00:00",
        "timestamp": "1777140241",
        "to_ids": true,
        "type": "domain",
        "uuid": "83ee9757-48d5-4509-8b7f-2abee42b3038",
        "value": "49.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:01+00:00",
        "timestamp": "1777140241",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0e4855b-86cb-4b73-8bea-f45232c58a8d",
        "value": "5584131.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:01+00:00",
        "timestamp": "1777140241",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa8705bd-be4d-437f-b7af-e9cfd2e7ccf5",
        "value": "893verify-checkguest.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:01+00:00",
        "timestamp": "1777140241",
        "to_ids": true,
        "type": "domain",
        "uuid": "8464ccb7-7361-4160-8cfe-77e7c77bdf8e",
        "value": "97419363.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:01+00:00",
        "timestamp": "1777140242",
        "to_ids": true,
        "type": "domain",
        "uuid": "f05f33e2-22c6-4997-b6d0-dd872445e67d",
        "value": "accaccess531-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:02+00:00",
        "timestamp": "1777140242",
        "to_ids": true,
        "type": "domain",
        "uuid": "facb7fea-945a-4221-9e1d-34aa142dd988",
        "value": "accaccess853-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:02+00:00",
        "timestamp": "1777140242",
        "to_ids": true,
        "type": "domain",
        "uuid": "1295bad1-5d8c-4228-9c2e-91c9c642800e",
        "value": "accaccess864-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:02+00:00",
        "timestamp": "1777140242",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c67d5a2-051f-4129-825b-2b8686732344",
        "value": "accept-verify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:02+00:00",
        "timestamp": "1777140242",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fedb3dd-f3e2-441d-a674-9c4a28fb1156",
        "value": "acptyorrst.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:02+00:00",
        "timestamp": "1777140242",
        "to_ids": true,
        "type": "domain",
        "uuid": "81432dd9-fd37-409e-9fd1-7c23bf0a161f",
        "value": "agstayrs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:02+00:00",
        "timestamp": "1777140243",
        "to_ids": true,
        "type": "domain",
        "uuid": "82740531-3ecc-426e-90f6-5ea8866845ee",
        "value": "aidepxstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:03+00:00",
        "timestamp": "1777140243",
        "to_ids": true,
        "type": "domain",
        "uuid": "23e5a822-7a87-4ee9-b858-c0360ff1c09e",
        "value": "ajvaoyv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:03+00:00",
        "timestamp": "1777140243",
        "to_ids": true,
        "type": "domain",
        "uuid": "01366dad-86ec-4642-b71d-0fd4b841b2b1",
        "value": "analys.extrude.se",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:03+00:00",
        "timestamp": "1777140243",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9088f94-9a56-4490-99d0-ebeba83378b2",
        "value": "anvarkarimov.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:03+00:00",
        "timestamp": "1777140243",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcd67080-2bd1-4330-ad48-5a96955bae90",
        "value": "approve-house03839213.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:03+00:00",
        "timestamp": "1777140243",
        "to_ids": true,
        "type": "domain",
        "uuid": "f60720d3-19d4-45bd-9b30-148b96efd40c",
        "value": "assets-tsurumi-prod.roccommercecloud.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:03+00:00",
        "timestamp": "1777140244",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad9b1c38-122f-489f-b269-1ec6ae71ff06",
        "value": "auracrown.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:04+00:00",
        "timestamp": "1777140244",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e1d839e-e6be-49a2-8df8-8cec4e7824ec",
        "value": "authstep119-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:04+00:00",
        "timestamp": "1777140244",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ee39172-40e0-4a5c-9230-7ae1e044cc8c",
        "value": "authstep32-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:04+00:00",
        "timestamp": "1777140244",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff919941-86de-4fb8-8f9f-3c56085d760f",
        "value": "authstep357-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:04+00:00",
        "timestamp": "1777140244",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2f07ef2-f75d-4151-9d52-f11a3bb3a5c9",
        "value": "authstep419-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:04+00:00",
        "timestamp": "1777140245",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f3dd9a5-dc85-4432-a816-3d770b5336c5",
        "value": "authstep629-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:05+00:00",
        "timestamp": "1777140245",
        "to_ids": true,
        "type": "domain",
        "uuid": "3187f002-a208-41d2-a280-684d35b348fd",
        "value": "balabakers.in",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:05+00:00",
        "timestamp": "1777140245",
        "to_ids": true,
        "type": "domain",
        "uuid": "32de1ce4-70a4-496b-854a-48d1c07b579c",
        "value": "be-dienst.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:05+00:00",
        "timestamp": "1777140245",
        "to_ids": true,
        "type": "domain",
        "uuid": "78a604da-3319-4a15-935a-4cfc8bee33bc",
        "value": "be-gdpr.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:05+00:00",
        "timestamp": "1777140245",
        "to_ids": true,
        "type": "domain",
        "uuid": "c865a8ea-922b-43a8-aa09-0136ca3fffc2",
        "value": "bestayready.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:05+00:00",
        "timestamp": "1777140245",
        "to_ids": true,
        "type": "domain",
        "uuid": "e867ed2a-353a-4b73-b440-89de3f1c8cea",
        "value": "bestwestern-id-ao17vid.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:06+00:00",
        "timestamp": "1777140246",
        "to_ids": true,
        "type": "domain",
        "uuid": "5462c67d-aaad-4185-9e88-00cfc7415055",
        "value": "bestwestern-id-er41ror.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:06+00:00",
        "timestamp": "1777140246",
        "to_ids": true,
        "type": "domain",
        "uuid": "354d60d4-570c-4b0e-b92c-bb42c7be3b88",
        "value": "bestwestern-id-kh27mew.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:06+00:00",
        "timestamp": "1777140246",
        "to_ids": true,
        "type": "domain",
        "uuid": "098b15ec-82fd-45c7-85ea-a167fe49e24f",
        "value": "bestwestern-id-mc88btc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:06+00:00",
        "timestamp": "1777140246",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e6b9a73-49a1-4306-bb26-a6323c155bf7",
        "value": "bestwestern-id-ng57ash.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:06+00:00",
        "timestamp": "1777140246",
        "to_ids": true,
        "type": "domain",
        "uuid": "32f552c5-ef88-4d25-bdcd-4a4b568bf5ca",
        "value": "bestwestern-id-op36bvn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:06+00:00",
        "timestamp": "1777140247",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d4c5a99-ee0b-4d3a-9f74-9e4cf1d3388b",
        "value": "bestwestern-id-ue66off.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:07+00:00",
        "timestamp": "1777140247",
        "to_ids": true,
        "type": "domain",
        "uuid": "97e7dc2a-9a52-4578-ad3c-5688f858defc",
        "value": "bestwestern-id-wt26pod.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:07+00:00",
        "timestamp": "1777140247",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4305e7d-208c-46d0-8c54-057ba6d9e0e5",
        "value": "bestwestern-id-wt54ful.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:07+00:00",
        "timestamp": "1777140247",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5f8f2a2-790f-4e8e-8dc0-58ecb66512f9",
        "value": "bloomsbury-london.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:07+00:00",
        "timestamp": "1777140247",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c1c7d51-4618-45f8-9490-97faada63f88",
        "value": "bonhouse1198.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:07+00:00",
        "timestamp": "1777140247",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ed4a283-e635-448a-b152-50a7b94a8509",
        "value": "booking-confirm4203.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:07+00:00",
        "timestamp": "1777140248",
        "to_ids": true,
        "type": "domain",
        "uuid": "20c4f6e5-dd87-4589-8d0d-b53cbc947ff2",
        "value": "booking-confirm4630.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:08+00:00",
        "timestamp": "1777140248",
        "to_ids": true,
        "type": "domain",
        "uuid": "88b35df3-4d86-4774-a1ad-7a1d8c0db33a",
        "value": "booking-id4205544.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:08+00:00",
        "timestamp": "1777140248",
        "to_ids": true,
        "type": "domain",
        "uuid": "e208bbae-d854-4996-a574-08cbb5de3554",
        "value": "booking-id45364737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:08+00:00",
        "timestamp": "1777140248",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bca2a40-38f9-47f1-b19d-200b967965bb",
        "value": "booking-id48922.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:08+00:00",
        "timestamp": "1777140248",
        "to_ids": true,
        "type": "domain",
        "uuid": "04fbb1d3-a2b2-428a-8a1d-dd2a54023783",
        "value": "booking.confirmation-id75.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:08+00:00",
        "timestamp": "1777140248",
        "to_ids": true,
        "type": "domain",
        "uuid": "92dd4219-e11b-42e9-a2bc-284d9cba2364",
        "value": "checkin-rooom-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:09+00:00",
        "timestamp": "1777140249",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f0cf926-fcb4-4c79-96e9-d24a53b2a817",
        "value": "checkmypay-refer12.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:09+00:00",
        "timestamp": "1777140249",
        "to_ids": true,
        "type": "domain",
        "uuid": "811f0d16-5d28-4beb-9409-ff21b79c47b5",
        "value": "com-5f5hrw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:09+00:00",
        "timestamp": "1777140249",
        "to_ids": true,
        "type": "domain",
        "uuid": "19adf1b7-bb7a-4d6a-8c52-6e2643692d30",
        "value": "confirm-id432224.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:09+00:00",
        "timestamp": "1777140249",
        "to_ids": true,
        "type": "domain",
        "uuid": "74a511b8-6101-43b2-8720-1e49d89f1114",
        "value": "confirm-id43249.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:09+00:00",
        "timestamp": "1777140249",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f113ab3-1171-4418-97a3-ab1bf2012064",
        "value": "confirm-id43252.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:09+00:00",
        "timestamp": "1777140250",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc13424c-b024-4a2d-a8f9-ffacbb528bf1",
        "value": "confirm-id541327.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:10+00:00",
        "timestamp": "1777140250",
        "to_ids": true,
        "type": "domain",
        "uuid": "21ff9041-b715-479e-abe5-4b2f97d3fbe9",
        "value": "confirm-id99434.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:10+00:00",
        "timestamp": "1777140250",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7282cab-3f3d-4140-aa33-225b9ed1996a",
        "value": "confirmation-id044.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:10+00:00",
        "timestamp": "1777140250",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3005a7f-54e2-4fb5-ba89-0bfc11c83165",
        "value": "confirmation-id4374624.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:10+00:00",
        "timestamp": "1777140250",
        "to_ids": true,
        "type": "domain",
        "uuid": "381625f0-8685-4ef9-9465-7c0e7416f3e4",
        "value": "confirmation-id75.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:10+00:00",
        "timestamp": "1777140250",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf9c278-21b0-4d64-a531-24bd343bb9b7",
        "value": "confirmid487-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:10+00:00",
        "timestamp": "1777140251",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b069b96-6358-44e7-989e-54ac8ef686bc",
        "value": "confirmid632-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:11+00:00",
        "timestamp": "1777140251",
        "to_ids": true,
        "type": "domain",
        "uuid": "4743ef0d-308f-4959-9850-2e18d453a8d2",
        "value": "confirmid911-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:11+00:00",
        "timestamp": "1777140251",
        "to_ids": true,
        "type": "domain",
        "uuid": "21b7c074-4ce3-4901-8b47-a65cae09ef03",
        "value": "cont-arivalresercv12.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:11+00:00",
        "timestamp": "1777140251",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e46aefb-e2c9-400e-8d3d-371546adaaaf",
        "value": "cozyapartment2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:11+00:00",
        "timestamp": "1777140251",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f328fe9-9e2f-4c65-bfef-3a8bccec418a",
        "value": "depflowwww.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:11+00:00",
        "timestamp": "1777140251",
        "to_ids": true,
        "type": "domain",
        "uuid": "0db41736-688a-4565-bdbf-bf5275f93f31",
        "value": "details-reservation-id890257.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:11+00:00",
        "timestamp": "1777140252",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8efcd7f-b748-4f46-bb77-b05a5292268c",
        "value": "direct-room-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:12+00:00",
        "timestamp": "1777140252",
        "to_ids": true,
        "type": "domain",
        "uuid": "dba6252b-ebbb-4e8b-90c7-473563c051a9",
        "value": "entrylink15-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:12+00:00",
        "timestamp": "1777140252",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3211869-b25d-4174-9216-d1f1601d2751",
        "value": "expedla-payelent.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:12+00:00",
        "timestamp": "1777140252",
        "to_ids": true,
        "type": "domain",
        "uuid": "95d109e4-56e1-4d76-8627-28c4bd67f7bf",
        "value": "extrgueshouse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:12+00:00",
        "timestamp": "1777140253",
        "to_ids": true,
        "type": "domain",
        "uuid": "4584f7a6-c1ad-4ae0-84ea-c7286962eec6",
        "value": "frinnpagehouse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:13+00:00",
        "timestamp": "1777140253",
        "to_ids": true,
        "type": "domain",
        "uuid": "380cd1dc-a7e2-4bad-9a8b-2db67353e7b3",
        "value": "gstayarrival.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:13+00:00",
        "timestamp": "1777140253",
        "to_ids": true,
        "type": "domain",
        "uuid": "a740a8a9-6fa0-4a4a-8ed9-e4dc091b15c0",
        "value": "guest-entery-hub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:13+00:00",
        "timestamp": "1777140253",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e0dd4bd-e397-4a26-ad45-304fec7f46ea",
        "value": "guest-reservasionhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:13+00:00",
        "timestamp": "1777140253",
        "to_ids": true,
        "type": "domain",
        "uuid": "460b60e2-c792-49c2-8ca5-6ecc6f6c3675",
        "value": "guest-reservationhubz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:13+00:00",
        "timestamp": "1777140253",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a61da41-be08-4963-9667-55e183c0034c",
        "value": "guest-reservationnub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:13+00:00",
        "timestamp": "1777140254",
        "to_ids": true,
        "type": "domain",
        "uuid": "12e35142-fbac-42de-a22c-a1d1ec85f3de",
        "value": "guest-rezervashionhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:14+00:00",
        "timestamp": "1777140254",
        "to_ids": true,
        "type": "domain",
        "uuid": "49e1758f-2e40-49df-ae7f-07096926a9e9",
        "value": "holder724-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:14+00:00",
        "timestamp": "1777140254",
        "to_ids": true,
        "type": "domain",
        "uuid": "99ef4832-07d1-4086-8c1f-44e6970dc5d3",
        "value": "holder930-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:14+00:00",
        "timestamp": "1777140254",
        "to_ids": true,
        "type": "domain",
        "uuid": "d87f89f8-fec2-4db0-9ec1-a22084c43972",
        "value": "home-worlds.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:14+00:00",
        "timestamp": "1777140254",
        "to_ids": true,
        "type": "domain",
        "uuid": "50c02544-86c5-440a-9e6d-5def551dd19c",
        "value": "hostelvix.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:14+00:00",
        "timestamp": "1777140254",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba37df55-d1fb-4244-ae1d-35537b32460a",
        "value": "hotel-acess-link.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:14+00:00",
        "timestamp": "1777140255",
        "to_ids": true,
        "type": "domain",
        "uuid": "95e6c366-f2ee-4889-a9ac-75bea4e9d98f",
        "value": "hotel-entry-portal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:15+00:00",
        "timestamp": "1777140255",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dc9dc5b-30b7-4c97-a31f-cc91d751d960",
        "value": "hotel-guest-entry.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:15+00:00",
        "timestamp": "1777140255",
        "to_ids": true,
        "type": "domain",
        "uuid": "807de646-b84f-4006-9529-5685d986d44c",
        "value": "hotel-stay49201.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:15+00:00",
        "timestamp": "1777140255",
        "to_ids": true,
        "type": "domain",
        "uuid": "73d572d0-9242-41ee-9876-27812d4aaae3",
        "value": "hotelbookingconfirm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:15+00:00",
        "timestamp": "1777140255",
        "to_ids": true,
        "type": "domain",
        "uuid": "294aaf23-a1c8-4f21-9a6c-af706f0ab05d",
        "value": "inattv1298.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:15+00:00",
        "timestamp": "1777140255",
        "to_ids": true,
        "type": "domain",
        "uuid": "b325fc37-b44f-410d-a4b4-2f951611dfcd",
        "value": "inattv1304.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:15+00:00",
        "timestamp": "1777140256",
        "to_ids": true,
        "type": "domain",
        "uuid": "f45bcb39-a4b9-43e8-a11b-26ae64f4e78e",
        "value": "inattv1305.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:16+00:00",
        "timestamp": "1777140256",
        "to_ids": true,
        "type": "domain",
        "uuid": "46094ab0-90fa-4d5f-8d0c-09d8074c3925",
        "value": "inattv1308.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:16+00:00",
        "timestamp": "1777140256",
        "to_ids": true,
        "type": "domain",
        "uuid": "06e91c62-36c0-4079-a5f2-dd7258080b11",
        "value": "inattv1324.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:16+00:00",
        "timestamp": "1777140256",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5c155dc-e1da-4346-876a-7b853019dc98",
        "value": "inattv1326.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:16+00:00",
        "timestamp": "1777140256",
        "to_ids": true,
        "type": "domain",
        "uuid": "39c0cfb2-2370-4891-b56e-5e48eb9e2466",
        "value": "innovatrium.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:16+00:00",
        "timestamp": "1777140256",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a938292-432c-4b36-aee9-129304b3f512",
        "value": "ithub-stayinpge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:16+00:00",
        "timestamp": "1777140257",
        "to_ids": true,
        "type": "domain",
        "uuid": "180e578c-8977-4d73-96b0-9e787e335bc9",
        "value": "itpagestainhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:17+00:00",
        "timestamp": "1777140257",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcd3619e-19b5-4189-b430-8439a59f2edb",
        "value": "jkhomerm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:17+00:00",
        "timestamp": "1777140257",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e87fdcf-3ac6-4628-bd29-4be1810dbb16",
        "value": "jw.confirmation-id75.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:17+00:00",
        "timestamp": "1777140257",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6e67c92-db7f-463a-97b8-6f35da8189d5",
        "value": "ln.potvrdanarudzbe32.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:17+00:00",
        "timestamp": "1777140257",
        "to_ids": true,
        "type": "domain",
        "uuid": "57430ea5-e262-4ac0-8e63-805eb73a5a8f",
        "value": "loginholder586-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:17+00:00",
        "timestamp": "1777140258",
        "to_ids": true,
        "type": "domain",
        "uuid": "85cb24b9-35cf-4357-a1de-f2bf756c7a75",
        "value": "margaehmr.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:18+00:00",
        "timestamp": "1777140258",
        "to_ids": true,
        "type": "domain",
        "uuid": "529cecf8-8633-454f-9df2-bc71556f7e02",
        "value": "modernguestwelcomesystem.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:18+00:00",
        "timestamp": "1777140258",
        "to_ids": true,
        "type": "domain",
        "uuid": "add222cb-0480-4752-a141-5131e7b3c836",
        "value": "myhotelrome2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:18+00:00",
        "timestamp": "1777140258",
        "to_ids": true,
        "type": "domain",
        "uuid": "d10e2ba4-6b55-43aa-a515-e81117627962",
        "value": "nanqiyb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:18+00:00",
        "timestamp": "1777140258",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2dab066-a793-46aa-ab41-12c7fabce2db",
        "value": "odirecs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:18+00:00",
        "timestamp": "1777140258",
        "to_ids": true,
        "type": "domain",
        "uuid": "7578350c-cfd3-45dd-a215-30d92f941b54",
        "value": "okwifu12.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:18+00:00",
        "timestamp": "1777140259",
        "to_ids": true,
        "type": "domain",
        "uuid": "07497df0-1cc7-4892-a4fe-9f5bea9afa08",
        "value": "orderunit611-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:19+00:00",
        "timestamp": "1777140259",
        "to_ids": true,
        "type": "domain",
        "uuid": "0caa93ca-27a7-4be2-9999-df580492bda4",
        "value": "patron45.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:19+00:00",
        "timestamp": "1777140259",
        "to_ids": true,
        "type": "domain",
        "uuid": "791a5dd4-837a-4be5-9e64-59a2c6e5f664",
        "value": "patron50.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:19+00:00",
        "timestamp": "1777140259",
        "to_ids": true,
        "type": "domain",
        "uuid": "14f965e8-93b0-4c59-b50c-37301404f0e5",
        "value": "patronfutbol19.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:19+00:00",
        "timestamp": "1777140259",
        "to_ids": true,
        "type": "domain",
        "uuid": "21c4f2e5-a1b4-4e7c-92ab-0c7af3b1d01a",
        "value": "patrongol19.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:19+00:00",
        "timestamp": "1777140259",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1a077aa-62c3-4103-a0ee-69b9f92470ff",
        "value": "patrongol39.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:19+00:00",
        "timestamp": "1777140260",
        "to_ids": true,
        "type": "domain",
        "uuid": "5226f10b-3df6-4dfb-8f09-e4d218b5a372",
        "value": "patrongol46.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:20+00:00",
        "timestamp": "1777140260",
        "to_ids": true,
        "type": "domain",
        "uuid": "df1e536f-8703-40cd-8c5f-8db9eb56d477",
        "value": "patronhd17.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:20+00:00",
        "timestamp": "1777140260",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfd28fba-bc33-4f97-97da-bcd7db16df29",
        "value": "patronizle48.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:20+00:00",
        "timestamp": "1777140260",
        "to_ids": true,
        "type": "domain",
        "uuid": "e28aaca7-de4f-49cc-bf5e-01540d56488c",
        "value": "patronlig6.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:20+00:00",
        "timestamp": "1777140260",
        "to_ids": true,
        "type": "domain",
        "uuid": "21d4c513-05e0-4b4b-b9ec-e9e057e5bcd5",
        "value": "patronlive25.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:20+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9be01d2-45db-4d49-9ddb-43c5ae0a8b58",
        "value": "patronlive28.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:21+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6f65cdd-eb98-4a5f-b268-44d23ccf2aca",
        "value": "patronlive30.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:21+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "59f649a4-7f00-439d-ab9c-0d6c0a0a7caa",
        "value": "patronlive33.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:21+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "4513f83c-f980-452b-95cb-fc6303c14a2c",
        "value": "patronvip19.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:21+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d1169e4-84f5-4409-b8d9-a3cb603defc2",
        "value": "patronvip26.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:21+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "56be34d2-5267-414a-b68b-c9ce9237a9f7",
        "value": "pay2payadmin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:21+00:00",
        "timestamp": "1777140261",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a7f0b50-af56-4d14-bd9d-658e1b93d476",
        "value": "payment-vignetten.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:22+00:00",
        "timestamp": "1777140262",
        "to_ids": true,
        "type": "domain",
        "uuid": "26e10b55-0dc7-4cdc-9765-b0faaaa3c27b",
        "value": "pgf-thzvvvo.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:22+00:00",
        "timestamp": "1777140262",
        "to_ids": true,
        "type": "domain",
        "uuid": "efab440b-e203-4b5c-b282-adf138596cb0",
        "value": "pixbet-gratis.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:22+00:00",
        "timestamp": "1777140262",
        "to_ids": true,
        "type": "domain",
        "uuid": "0db7bfa5-c944-4f9f-9890-aa091129b048",
        "value": "potvrdanarudzbe32.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:22+00:00",
        "timestamp": "1777140262",
        "to_ids": true,
        "type": "domain",
        "uuid": "d943ae7a-0b85-44cf-ad24-e609242e2a71",
        "value": "pre-registation-booking08761.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:22+00:00",
        "timestamp": "1777140262",
        "to_ids": true,
        "type": "domain",
        "uuid": "74694651-5197-451e-9f59-a3974dae84f4",
        "value": "pre-registation-booking593182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:23+00:00",
        "timestamp": "1777140263",
        "to_ids": true,
        "type": "domain",
        "uuid": "0941f057-6587-4614-9514-1b1e23d1e979",
        "value": "pre-registration13834.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:23+00:00",
        "timestamp": "1777140263",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e1231ae-cc94-4f97-a03d-c085d427b608",
        "value": "pre-registration93834.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:23+00:00",
        "timestamp": "1777140263",
        "to_ids": true,
        "type": "domain",
        "uuid": "98d436da-f9ca-4d1e-8636-b8ebb460ad35",
        "value": "processing-one.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:23+00:00",
        "timestamp": "1777140263",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef0e4b49-ff6b-4ff0-b715-6d4d1cbdcb94",
        "value": "recetionha.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:23+00:00",
        "timestamp": "1777140263",
        "to_ids": true,
        "type": "domain",
        "uuid": "48a37031-b434-4175-baca-ddd3b4915a12",
        "value": "reservashionsstatusnow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:23+00:00",
        "timestamp": "1777140264",
        "to_ids": true,
        "type": "domain",
        "uuid": "b16658aa-e4d8-485e-91d6-9ca542605d1c",
        "value": "reservathionstatus-aproval.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:24+00:00",
        "timestamp": "1777140264",
        "to_ids": true,
        "type": "domain",
        "uuid": "d459b7ed-a160-4991-8e2c-b7f8ba67dce1",
        "value": "reservation-pay-id3399382.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:24+00:00",
        "timestamp": "1777140264",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c60dfa9-1bc9-49d5-bb75-65ba7af32b0c",
        "value": "rms-pending9219.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:24+00:00",
        "timestamp": "1777140264",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7795d52-285e-44d5-8f99-862240858962",
        "value": "room-entery-hub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:24+00:00",
        "timestamp": "1777140264",
        "to_ids": true,
        "type": "domain",
        "uuid": "84007329-adbe-434c-97ed-8fda8b65aa29",
        "value": "room-entry-hub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:24+00:00",
        "timestamp": "1777140264",
        "to_ids": true,
        "type": "domain",
        "uuid": "26f56276-045c-4428-a875-4e5d4ae1fb21",
        "value": "sa332552331843.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:25+00:00",
        "timestamp": "1777140265",
        "to_ids": true,
        "type": "domain",
        "uuid": "f074701d-49d3-4b7c-9e98-563aab121a6e",
        "value": "safetyunit36-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:25+00:00",
        "timestamp": "1777140265",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bdcfb35-d8be-48ce-8c66-f694e5eda5b9",
        "value": "safeunit406-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:25+00:00",
        "timestamp": "1777140265",
        "to_ids": true,
        "type": "domain",
        "uuid": "a980cff5-0d68-4369-8bb9-8c67ba550175",
        "value": "sd-group.world",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:25+00:00",
        "timestamp": "1777140265",
        "to_ids": true,
        "type": "domain",
        "uuid": "934722ba-d87c-49d8-9a09-09d228358126",
        "value": "secur-guest-entery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:25+00:00",
        "timestamp": "1777140265",
        "to_ids": true,
        "type": "domain",
        "uuid": "f42e0946-0406-4de2-aeca-e4b83da05c11",
        "value": "secur-room-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:25+00:00",
        "timestamp": "1777140266",
        "to_ids": true,
        "type": "domain",
        "uuid": "923d022e-1f78-4826-92b7-002d6fa7dc39",
        "value": "sharpbettingaz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:26+00:00",
        "timestamp": "1777140266",
        "to_ids": true,
        "type": "domain",
        "uuid": "11fd1900-1765-48f1-9947-ab07e1e89067",
        "value": "stay-reserv93881.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:26+00:00",
        "timestamp": "1777140266",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecdd0408-f5b6-49fe-9ba2-935927cd1b69",
        "value": "stayverifycenter.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:26+00:00",
        "timestamp": "1777140266",
        "to_ids": true,
        "type": "domain",
        "uuid": "e094616f-790e-4bc2-ba2d-e96c6e522256",
        "value": "systemgate708-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:26+00:00",
        "timestamp": "1777140266",
        "to_ids": true,
        "type": "domain",
        "uuid": "b98d30e8-062f-47c5-901c-7c8ff0bef9c0",
        "value": "taraftarium1058.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:26+00:00",
        "timestamp": "1777140266",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2af7401-1d78-410c-83b5-927ef5008dc3",
        "value": "taraftarium1059.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:26+00:00",
        "timestamp": "1777140267",
        "to_ids": true,
        "type": "domain",
        "uuid": "9df6b47f-7cab-42ae-867f-c509d75f9b38",
        "value": "theme30.dotname.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:27+00:00",
        "timestamp": "1777140267",
        "to_ids": true,
        "type": "domain",
        "uuid": "7066ed5c-fedf-45eb-be5e-14737c5a4e53",
        "value": "thevacationupdate.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:27+00:00",
        "timestamp": "1777140267",
        "to_ids": true,
        "type": "domain",
        "uuid": "6eca1949-ed94-4203-b425-7d19e90a9625",
        "value": "tipi-stay-update.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:27+00:00",
        "timestamp": "1777140267",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9f9fd66-ced9-4957-bc49-cbe95e4aab2b",
        "value": "trustcontrol203-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:27+00:00",
        "timestamp": "1777140267",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c560971-4b25-424d-9f94-5e57398b3c35",
        "value": "trustcontrol325-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:27+00:00",
        "timestamp": "1777140267",
        "to_ids": true,
        "type": "domain",
        "uuid": "c220a137-674b-4801-b666-08a16b24646f",
        "value": "trustcontrol411-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:27+00:00",
        "timestamp": "1777140268",
        "to_ids": true,
        "type": "domain",
        "uuid": "76f6a63b-9cd4-4a77-8de1-97b259a690e8",
        "value": "trustcontrol871-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:28+00:00",
        "timestamp": "1777140268",
        "to_ids": true,
        "type": "domain",
        "uuid": "7125dc93-e145-4b76-9b38-30f73c4f6030",
        "value": "trustgate516-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:28+00:00",
        "timestamp": "1777140268",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d2e4fcd-5499-4aae-9a27-4e908ed43218",
        "value": "updts-app.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:28+00:00",
        "timestamp": "1777140268",
        "to_ids": true,
        "type": "domain",
        "uuid": "2090b9d7-59c2-484e-8215-57cae3bb594d",
        "value": "veridstatustrip.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:28+00:00",
        "timestamp": "1777140268",
        "to_ids": true,
        "type": "domain",
        "uuid": "927772b6-9ac7-4f6e-8b99-16c4b1a817c1",
        "value": "verifguest-checkinrecep23.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:28+00:00",
        "timestamp": "1777140269",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a33a740-d6d5-4dd0-818d-f27e00cf3c23",
        "value": "verify011-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:29+00:00",
        "timestamp": "1777140269",
        "to_ids": true,
        "type": "domain",
        "uuid": "529843b3-f754-43a9-be19-84b2027bf1ed",
        "value": "web.bestwestern-id-ng57ash.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:29+00:00",
        "timestamp": "1777140269",
        "to_ids": true,
        "type": "domain",
        "uuid": "99420266-4489-4c88-a73c-1bf14a13e330",
        "value": "wlecomemyguest.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:29+00:00",
        "timestamp": "1777140269",
        "to_ids": true,
        "type": "domain",
        "uuid": "51aa1c17-7d3e-4bf7-aa5e-0ebc46b5e4d6",
        "value": "xalnithol.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:29+00:00",
        "timestamp": "1777140269",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ac044c5-9c13-4c03-ab69-54d3c4f94180",
        "value": "xianghaihb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:29+00:00",
        "timestamp": "1777140269",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f9a09ff-fb3f-4d1d-a5bb-2c9b40b9bfbd",
        "value": "your-bwh14.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:29+00:00",
        "timestamp": "1777140270",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cecbb65-1e77-4664-9f1c-027cf2c1ea49",
        "value": "your-bwh19.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:30+00:00",
        "timestamp": "1777140270",
        "to_ids": true,
        "type": "domain",
        "uuid": "031e2933-ccd0-425e-a5d7-72ed43a9bc34",
        "value": "your-bwh27.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:30+00:00",
        "timestamp": "1777140270",
        "to_ids": false,
        "type": "url",
        "uuid": "9fd77861-2f0a-46cb-9252-e27c2c8aa78b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3ea82d1161a440a759d9be6d1cfd9d2433e1a616",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:30+00:00",
        "timestamp": "1777140270",
        "to_ids": false,
        "type": "url",
        "uuid": "72287995-26b1-4e65-9421-85929af0b82a",
        "value": "https://x.com/volrant136/status/2048054426078724126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T18:04:30+00:00",
        "timestamp": "1777140270",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc1b9998-1a01-4539-92d9-5a0baa00d582",
        "value": "webapp-getdocumentodwnload-pacapp.malik-jaani786.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:03+00:00",
        "timestamp": "1777143604",
        "to_ids": false,
        "type": "url",
        "uuid": "c96120e2-59b4-401a-a859-a5306fefa2ce",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3c7e7e2e297fd4ae1855661fc44b997a264805b2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:04+00:00",
        "timestamp": "1777143605",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ff9eab0-b9c1-49cb-9afc-ae441f19ac26",
        "value": "1-apaylo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:05+00:00",
        "timestamp": "1777143605",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b6c0260-08e6-4a48-8b3f-3b2a14d9c961",
        "value": "1stlosstrading.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:05+00:00",
        "timestamp": "1777143605",
        "to_ids": true,
        "type": "domain",
        "uuid": "690d93aa-99fc-4dc5-aa6d-05c5d3e62cf6",
        "value": "78-153-140-17.cprapid.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:05+00:00",
        "timestamp": "1777143605",
        "to_ids": true,
        "type": "domain",
        "uuid": "fea199b0-db8a-4b53-9f1e-9baf157cb21f",
        "value": "9jaarenaxtra.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:05+00:00",
        "timestamp": "1777143605",
        "to_ids": true,
        "type": "domain",
        "uuid": "71e2afed-36e0-4a6a-adc4-74aaa590a395",
        "value": "a6.appstartlabs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:05+00:00",
        "timestamp": "1777143605",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cb3a0b8-85f7-4ba5-859c-2f961f49b781",
        "value": "aabq.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:06+00:00",
        "timestamp": "1777143606",
        "to_ids": true,
        "type": "domain",
        "uuid": "066a664b-e02f-4e97-9a73-2666af12e464",
        "value": "aabstone.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:06+00:00",
        "timestamp": "1777143606",
        "to_ids": true,
        "type": "domain",
        "uuid": "c188ab67-c95a-4d29-9740-ab117112369d",
        "value": "abum.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:06+00:00",
        "timestamp": "1777143606",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c8223e4-2277-4f41-ad63-1cc79c2ffd76",
        "value": "abzs.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:06+00:00",
        "timestamp": "1777143606",
        "to_ids": true,
        "type": "domain",
        "uuid": "951fc673-ab2f-443c-8165-d4c6359481b8",
        "value": "acaringtouchseniorservice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:06+00:00",
        "timestamp": "1777143606",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdcc0b31-4653-48c5-b18c-03f4b34abe4c",
        "value": "accountingandfinancejobs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:06+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc37e339-661b-4c6a-956e-e6f97f799705",
        "value": "acube-contract.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "a96a3c7f-5657-4bbe-8e45-9cdbdc547b0c",
        "value": "ad633dfa41b3a8465b7f195bf5b185a2.appliancerefrigeration.co.za",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7350497-2bfc-4a0a-acaa-95aa88b35324",
        "value": "ager-stp.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "f788e0ad-51b9-483c-9321-0564b9278241",
        "value": "ahdaratlegalservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "44c87ebb-8a05-4bdb-9204-9305283a7fd8",
        "value": "almanastar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "5de64ea5-2550-4ebd-a6d0-5710d7012b13",
        "value": "api-gateway-prod.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143607",
        "to_ids": true,
        "type": "domain",
        "uuid": "b26d7556-c2f8-48c5-8eec-e5d95b91b7a9",
        "value": "api-gateway-softupdate.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:07+00:00",
        "timestamp": "1777143608",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a666c76-a87f-4ea6-9218-6105d49c653f",
        "value": "api.hayesmed.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:08+00:00",
        "timestamp": "1777143608",
        "to_ids": true,
        "type": "domain",
        "uuid": "2618ca6f-f461-4c85-bc04-7f6dc06586e6",
        "value": "app.hayesmed.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:08+00:00",
        "timestamp": "1777143608",
        "to_ids": true,
        "type": "domain",
        "uuid": "29c5166a-9c56-477c-9f87-b141bdf7d143",
        "value": "appistartes.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:08+00:00",
        "timestamp": "1777143608",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e424146-ef89-490a-9e6c-a9aa92ff399e",
        "value": "appstartlabs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:08+00:00",
        "timestamp": "1777143608",
        "to_ids": true,
        "type": "domain",
        "uuid": "c009d63a-d7a8-4199-a47a-c91ad6cc505a",
        "value": "articlehaul.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:08+00:00",
        "timestamp": "1777143608",
        "to_ids": true,
        "type": "domain",
        "uuid": "a48047f6-370a-40b6-96e5-54df15814b6b",
        "value": "atagkeukentechniek.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:08+00:00",
        "timestamp": "1777143609",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3596d1f-ea2c-4359-a424-7422b0082f8a",
        "value": "audvidfisher.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:09+00:00",
        "timestamp": "1777143609",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f798700-0c4d-42f4-9823-8e07ac74b2a5",
        "value": "aurekh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:09+00:00",
        "timestamp": "1777143609",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5d775e4-cc55-436c-9ec0-92fc678113f3",
        "value": "babao.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:09+00:00",
        "timestamp": "1777143609",
        "to_ids": true,
        "type": "domain",
        "uuid": "c07561ef-3018-4136-92fd-860739f795d5",
        "value": "bammi.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:09+00:00",
        "timestamp": "1777143609",
        "to_ids": true,
        "type": "domain",
        "uuid": "3372a6de-b3cc-40ab-be2e-8d8337b20f00",
        "value": "bdstop.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:09+00:00",
        "timestamp": "1777143609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7010f88-b0e0-42ca-819c-dcd21b2a5d60",
        "value": "breakbulkconf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:09+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "70ad4348-c479-4ca3-9033-1d1545034397",
        "value": "bugdroid.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:10+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "f040ba67-1879-4fa6-8d13-743adc476e23",
        "value": "bullabs.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:10+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "4edb7885-e85d-4f8f-a012-0064a89ca694",
        "value": "carkva.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:10+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7e5a7f7-dc9a-4190-9213-bcb47162ba2a",
        "value": "carsaggregator.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:10+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "27219401-6048-438e-b588-cf196322284f",
        "value": "catalog-telegram.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:10+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e5a1ab4-7d59-4b2e-8266-8931ae11f908",
        "value": "cerumo.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:10+00:00",
        "timestamp": "1777143610",
        "to_ids": true,
        "type": "domain",
        "uuid": "2af263f7-84d7-42f8-a504-3f7b866d1fe2",
        "value": "charlyetmax.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143611",
        "to_ids": true,
        "type": "domain",
        "uuid": "88e57cd0-9ccd-4c1a-bc07-451238b05f77",
        "value": "citamx-online.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143611",
        "to_ids": true,
        "type": "domain",
        "uuid": "645b52bd-9360-405b-a06e-cb85bc8df633",
        "value": "citamxpass.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143611",
        "to_ids": true,
        "type": "domain",
        "uuid": "53d34c2a-1aba-459d-987a-e733e80fcf79",
        "value": "citamxpass.social",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143611",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca53c5eb-f1da-4b59-8efc-403b2876530c",
        "value": "codeframe.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143611",
        "to_ids": true,
        "type": "domain",
        "uuid": "2495adf0-9617-444d-b1c8-ad8d7ec86f06",
        "value": "codexa.best",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143611",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a4b0a91-7582-4dc9-95e7-eb7db7b6daad",
        "value": "cpcontacts.appstartlabs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:11+00:00",
        "timestamp": "1777143612",
        "to_ids": true,
        "type": "domain",
        "uuid": "3aae8479-6067-4387-b90b-06f35c5b25e7",
        "value": "d3691308f2a4c2f6983f2880d32e29c84.everest-hcg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:12+00:00",
        "timestamp": "1777143612",
        "to_ids": true,
        "type": "domain",
        "uuid": "273d29aa-6dd0-461f-9715-8691b68a02b8",
        "value": "databui.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:12+00:00",
        "timestamp": "1777143612",
        "to_ids": true,
        "type": "domain",
        "uuid": "4273ff69-1cfa-45e9-8192-804fcbc5bd33",
        "value": "depretory.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:12+00:00",
        "timestamp": "1777143612",
        "to_ids": true,
        "type": "domain",
        "uuid": "95396d06-4c65-4bb9-a082-44b3f0e1c821",
        "value": "detailingoff.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:12+00:00",
        "timestamp": "1777143612",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aabdd60-92ca-4794-acc8-00e5d2e3d97f",
        "value": "devarch.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:12+00:00",
        "timestamp": "1777143612",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7b2656e-3963-43e0-b984-cf7142205159",
        "value": "devsdiamonds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:12+00:00",
        "timestamp": "1777143613",
        "to_ids": true,
        "type": "domain",
        "uuid": "520f41ab-f2b9-4b7d-bb63-2181e028920a",
        "value": "dmors.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:13+00:00",
        "timestamp": "1777143613",
        "to_ids": true,
        "type": "domain",
        "uuid": "872ae2ef-0f97-4417-be54-6c41c88a9456",
        "value": "doclinebox.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:13+00:00",
        "timestamp": "1777143613",
        "to_ids": true,
        "type": "domain",
        "uuid": "69f5d042-7be9-48d1-97ff-591d9cae8353",
        "value": "dreambigworkharddomore.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:13+00:00",
        "timestamp": "1777143613",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7502c10-129a-4e0e-bb03-3cce1233e043",
        "value": "dssence.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:13+00:00",
        "timestamp": "1777143613",
        "to_ids": true,
        "type": "domain",
        "uuid": "b999b12b-1014-4f62-8c6b-03fbaf2ec456",
        "value": "egyptinfo.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:13+00:00",
        "timestamp": "1777143613",
        "to_ids": true,
        "type": "domain",
        "uuid": "972e9336-4411-464d-b878-d7a56a0e6f7e",
        "value": "ersh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:13+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "944776c2-6885-4063-8b61-802cced545fe",
        "value": "essayajewelry.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7d0a333-5b00-4216-b01f-c337895e93bd",
        "value": "exteddex.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "be1fc235-7a2a-4815-b6f8-f1d4d5f6cc43",
        "value": "fluxnet.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec7723d1-9cf2-4f14-b877-65d8b9ca34b6",
        "value": "gateway001kir.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8b26f8e-0e29-4d8a-8877-7290ed5c54c0",
        "value": "globalwork.best",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb5cd5cc-07f9-44d4-929f-f48595785dcf",
        "value": "go.citamxpass.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143614",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5876549-7c1a-4d6e-94ef-527c28e66ec6",
        "value": "go.tramites-mexico.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:14+00:00",
        "timestamp": "1777143615",
        "to_ids": true,
        "type": "domain",
        "uuid": "1df420a4-6aac-4dc5-a54d-fb0c641064ef",
        "value": "gobmx-online.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:15+00:00",
        "timestamp": "1777143615",
        "to_ids": true,
        "type": "domain",
        "uuid": "5846644a-ea3f-470a-92a9-909f8bc4a585",
        "value": "goonus.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:15+00:00",
        "timestamp": "1777143615",
        "to_ids": true,
        "type": "domain",
        "uuid": "36818629-fb03-482d-a50d-9e1c80a8069f",
        "value": "gooogle.today",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:15+00:00",
        "timestamp": "1777143615",
        "to_ids": true,
        "type": "domain",
        "uuid": "2152542f-d942-45d9-9583-32cbb343fba8",
        "value": "hayesmed.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:15+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "a36c0824-8c0c-44b7-962c-151a84e38ebe",
        "value": "honorai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dc067df-f5ef-4a56-b2eb-db85f8ac092e",
        "value": "imata.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3db95cd-98bb-468f-b8f5-a8239524f938",
        "value": "interactiveportraits.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "6aa62bc5-3588-4130-bad4-e39e60198b33",
        "value": "ip55.ip-135-125-255.eu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bf716f9-d6d1-46c3-ba9c-c9f6ad691129",
        "value": "ipkdh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a9b44c2-6438-4205-9cd3-022b70adbf86",
        "value": "islat.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143616",
        "to_ids": true,
        "type": "domain",
        "uuid": "9166cb77-0ae3-4211-819f-8d8f888e1a34",
        "value": "ivyz.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:16+00:00",
        "timestamp": "1777143617",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3d7b6fb-c465-44d1-b376-69bb8c8a99dc",
        "value": "jariosos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:17+00:00",
        "timestamp": "1777143617",
        "to_ids": true,
        "type": "domain",
        "uuid": "f45d791b-e803-412f-821f-bbe569ec7def",
        "value": "jkershaw.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:17+00:00",
        "timestamp": "1777143617",
        "to_ids": true,
        "type": "domain",
        "uuid": "49483257-67dc-4d56-8a19-dbd0e4346077",
        "value": "kadmecnp-643laolmd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:17+00:00",
        "timestamp": "1777143617",
        "to_ids": true,
        "type": "domain",
        "uuid": "b749e75f-ec60-49a9-8548-ef02efe6da2c",
        "value": "keyiwl.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:17+00:00",
        "timestamp": "1777143617",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b77c1ee-79a0-4ab0-af37-a54502512e06",
        "value": "koleknor.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:17+00:00",
        "timestamp": "1777143617",
        "to_ids": true,
        "type": "domain",
        "uuid": "4361940a-6971-4d91-84dd-83f4e691dcb7",
        "value": "laishishi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:17+00:00",
        "timestamp": "1777143618",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fba33a5-6487-4d21-8e01-0cb8abc0bf73",
        "value": "lbimuseum.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:18+00:00",
        "timestamp": "1777143618",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2def8ea-36ed-4c2e-a65b-30edcc20aeff",
        "value": "lepaniermagic.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:18+00:00",
        "timestamp": "1777143618",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ea3f141-d0c7-49fc-ae4a-d9e94cad7072",
        "value": "luminer.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:18+00:00",
        "timestamp": "1777143618",
        "to_ids": true,
        "type": "domain",
        "uuid": "06c4957a-7781-43a0-92d6-e59de370ffdd",
        "value": "lwsirxr.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:18+00:00",
        "timestamp": "1777143618",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa707992-6052-4e23-af58-04f4dd76fd5e",
        "value": "maslovdisign.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:18+00:00",
        "timestamp": "1777143618",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4f8ebe5-6f7a-4251-ba0d-016126de3713",
        "value": "masoretgames.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:18+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "6954fb9a-7a88-4935-b654-b4115880a70c",
        "value": "mastluner.club",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:19+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "04f3e8d9-5fd9-469d-a313-d0951e7c4b93",
        "value": "mbml-writer-info.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:19+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7f379a1-a4d3-4cc5-b4c3-8236cbae6023",
        "value": "mecmatica.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:19+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba4748d5-bbdc-46f4-9d14-2e0a119fbb55",
        "value": "microsoft-tools.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:19+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b0d3417-b49e-4239-b372-bcb55c09009d",
        "value": "millersteel.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:19+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "80d4aa26-df92-424c-8a13-9b9485f5b1c8",
        "value": "mmdis-worls.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:19+00:00",
        "timestamp": "1777143619",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5d05fe5-15d3-4594-a90b-44e43e46eb38",
        "value": "mwsiik.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143620",
        "to_ids": true,
        "type": "domain",
        "uuid": "965f09ce-b815-4e30-ab37-7fb8e6c16f1f",
        "value": "myloyaldoggy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143620",
        "to_ids": true,
        "type": "domain",
        "uuid": "3125d551-3a38-4c3d-8eaa-ea9cd29bd397",
        "value": "mymarathilearning.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143620",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b82170d-3b0f-42ef-a82c-4c41adbc16d5",
        "value": "mymexico.social",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143620",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9101589-9af2-4901-8730-dc97c2962aa4",
        "value": "mysoretgames.club",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143620",
        "to_ids": true,
        "type": "domain",
        "uuid": "90a5efb3-0ca7-4be9-ace9-03b50e21f194",
        "value": "mytkart.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143620",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9f28b03-3f7d-4e9b-852b-9a1360400537",
        "value": "nastilka.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:20+00:00",
        "timestamp": "1777143621",
        "to_ids": true,
        "type": "domain",
        "uuid": "747690a7-6a3d-4f0f-adfe-c99837fc9d97",
        "value": "ncdxbk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:21+00:00",
        "timestamp": "1777143621",
        "to_ids": true,
        "type": "domain",
        "uuid": "800e4d18-7b74-41be-aaec-c2970448ad69",
        "value": "ncwlwtd.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:21+00:00",
        "timestamp": "1777143621",
        "to_ids": true,
        "type": "domain",
        "uuid": "f479b5ac-b328-40ed-a113-9ff484c02798",
        "value": "nevv-mmc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:21+00:00",
        "timestamp": "1777143621",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cb883fc-cd66-434e-9e03-3d223ffcf652",
        "value": "northcroft.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:21+00:00",
        "timestamp": "1777143621",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb1fbefb-0e7a-4faa-8316-80bd0ccfb4e3",
        "value": "nuvilifeglobal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:21+00:00",
        "timestamp": "1777143621",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ca2c3c-0e9a-42d6-8708-41471e527e40",
        "value": "oirac.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:21+00:00",
        "timestamp": "1777143622",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a4b6cbc-5243-4ced-8259-d02ed5b9306d",
        "value": "oqsxv.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:22+00:00",
        "timestamp": "1777143622",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ee44fa1-287b-4e9f-9a24-492368a1f998",
        "value": "orkneygateway.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:22+00:00",
        "timestamp": "1777143622",
        "to_ids": true,
        "type": "domain",
        "uuid": "118fce4c-9cd6-434e-b1cc-d4df10f73eb5",
        "value": "owab.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:22+00:00",
        "timestamp": "1777143622",
        "to_ids": true,
        "type": "domain",
        "uuid": "232a236c-94a3-4a6f-9ba1-23b73e2ae57d",
        "value": "pagedit.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:22+00:00",
        "timestamp": "1777143622",
        "to_ids": true,
        "type": "domain",
        "uuid": "c73a3675-f93a-473d-a11e-101a8ba4d5d2",
        "value": "pass.gooogle.today",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:22+00:00",
        "timestamp": "1777143622",
        "to_ids": true,
        "type": "domain",
        "uuid": "1939b61e-be03-424d-a001-ec7e2d028515",
        "value": "perrine90-deltajohnsons.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:22+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "a11f5ae2-e663-4d5f-b61a-1a44f4965aff",
        "value": "pinimg.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:23+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "ead0a1c3-2334-43de-95ca-60b10174393e",
        "value": "pkrou.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:23+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "6281484d-3a6d-4358-a732-fd51b9386eb7",
        "value": "pmkdds.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:23+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "b98d1fdf-e7e0-4965-b433-21403e9f7c66",
        "value": "publisherresolution.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:23+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "1288cb8b-ca1b-4734-9da9-240284bf7688",
        "value": "remnett.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:23+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "df57f5ad-dfd3-424d-b5aa-deff74dd63d5",
        "value": "rencaihuainan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:23+00:00",
        "timestamp": "1777143623",
        "to_ids": true,
        "type": "domain",
        "uuid": "0be6e6e2-a1e4-47f8-9876-701502dec23f",
        "value": "scooplacrosse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143624",
        "to_ids": true,
        "type": "domain",
        "uuid": "92586109-a2b0-4d38-9169-e47a5ded785f",
        "value": "searchmscon.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143624",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a058ff5-11dc-4f59-b539-2944f280f02e",
        "value": "seoanalitics.marketing",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143624",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccfe9b95-ccaa-4e7c-bffc-312d526ace13",
        "value": "ses6.getsdeal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143624",
        "to_ids": true,
        "type": "domain",
        "uuid": "922025f4-fc64-420c-8dcd-a458780451fb",
        "value": "shaavrty.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143624",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cf78b71-e292-4aef-8802-b6b363b7d9a7",
        "value": "shape-paiement.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143624",
        "to_ids": true,
        "type": "domain",
        "uuid": "42c92863-59da-4a47-8fad-ed532a166a72",
        "value": "sistemablackatz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:24+00:00",
        "timestamp": "1777143625",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fe8b389-8de3-4711-ac17-263f7612cff6",
        "value": "skob.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:25+00:00",
        "timestamp": "1777143625",
        "to_ids": true,
        "type": "domain",
        "uuid": "17c57403-d0b3-463d-a337-4f39ca469c17",
        "value": "solidactivate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:25+00:00",
        "timestamp": "1777143625",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f5f8e98-35de-4266-86dd-a0c003443f24",
        "value": "sslgateway001.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:25+00:00",
        "timestamp": "1777143625",
        "to_ids": true,
        "type": "domain",
        "uuid": "e02cd254-0f75-46f7-988f-0e698db1e7e5",
        "value": "syhmen.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:25+00:00",
        "timestamp": "1777143625",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2b49a9e-3825-4c84-97c2-02ea22a2e090",
        "value": "sysora.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:25+00:00",
        "timestamp": "1777143625",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9fe2de9-24b7-4e58-80ec-2393761e5af3",
        "value": "tel.orkneygateway.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:25+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "f94b6a31-d7e4-421a-b12c-2e735e8b97e9",
        "value": "tokio-sallys.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "da49e364-42bd-47fd-95db-5cf28e6274b9",
        "value": "tramites-mexico.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef69baee-8202-47f1-ab67-1074d6a79391",
        "value": "tramites.today",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b268fe0-e058-4b9c-be59-ed7ab56b4237",
        "value": "tranzed.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad507c79-2303-48ce-a7c8-1b73fad5f21b",
        "value": "twicegrand.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "55e68c18-de5d-434a-8db2-95b1b723b1c5",
        "value": "tyspnnx.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143626",
        "to_ids": true,
        "type": "domain",
        "uuid": "38da9ab4-6e52-4259-a8cf-924d2b72891c",
        "value": "uipvme.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:26+00:00",
        "timestamp": "1777143627",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a9d5bc2-ec56-4912-8aa4-8cf45bf10d1b",
        "value": "uktaxiservice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:27+00:00",
        "timestamp": "1777143627",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c127476-4b1c-4e7a-97d7-53936c20b542",
        "value": "uohiu.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:27+00:00",
        "timestamp": "1777143627",
        "to_ids": true,
        "type": "domain",
        "uuid": "e52cfd99-66a1-4cc1-aef9-0eee0fd79baf",
        "value": "vehu.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:27+00:00",
        "timestamp": "1777143627",
        "to_ids": true,
        "type": "domain",
        "uuid": "38ff9c4e-af50-4acf-9c3b-e24e115a1e88",
        "value": "vmgarage.work",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:27+00:00",
        "timestamp": "1777143627",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8bc7d75-ca0e-481a-8bb9-ce359483c53b",
        "value": "vstoki.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:27+00:00",
        "timestamp": "1777143627",
        "to_ids": true,
        "type": "domain",
        "uuid": "d10e34b1-a826-48c4-aaeb-d90e9ba1bcd5",
        "value": "wideresearcher.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:27+00:00",
        "timestamp": "1777143628",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbd99b61-3e93-401d-a788-b639c6d3393d",
        "value": "www-zinia-consumers.tenacityprop.co.za",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:28+00:00",
        "timestamp": "1777143628",
        "to_ids": true,
        "type": "domain",
        "uuid": "d008f487-19b2-4f5a-9a86-98ce6673e7c2",
        "value": "www-zinia-customer.filipintoucheu.eu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:28+00:00",
        "timestamp": "1777143628",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfddbde7-629b-49c0-9ad5-853256c9d055",
        "value": "www-ziniacuonsumer.pouipoer.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:28+00:00",
        "timestamp": "1777143628",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ce84f8d-78d3-4306-9774-af59c64bd3d6",
        "value": "www-ziniastumers.bazfalao.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:28+00:00",
        "timestamp": "1777143628",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab181bf0-8782-4201-a950-8d153034ba2c",
        "value": "yourboggbag.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:28+00:00",
        "timestamp": "1777143628",
        "to_ids": true,
        "type": "domain",
        "uuid": "da8bd124-9cca-4512-aa9f-b1fca2836ae1",
        "value": "youtuberu.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:28+00:00",
        "timestamp": "1777143629",
        "to_ids": true,
        "type": "domain",
        "uuid": "b28d988e-8dbb-408e-a3e1-815ef8df4b63",
        "value": "zoomnutrition.appstartlabs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:29+00:00",
        "timestamp": "1777143629",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8720892-f791-42c8-b8b9-16ce388cfc5d",
        "value": "cnw2ty.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:29+00:00",
        "timestamp": "1777143629",
        "to_ids": false,
        "type": "url",
        "uuid": "7a4547be-14d0-4e26-950f-8b883e090fb1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4d5461d91e432839190c83283b833c21d044996b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:29+00:00",
        "timestamp": "1777143629",
        "to_ids": false,
        "type": "url",
        "uuid": "272a75f8-5683-4e10-a2fa-8acdb605c65e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/180179d9f1e1f85e9b2321e091a50790b67e62d3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:29+00:00",
        "timestamp": "1777143629",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f41f1802-175f-45c5-8650-3e667b6c7cfd",
        "value": "38.54.108.229",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:29+00:00",
        "timestamp": "1777143630",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0540d6f-20c0-4885-a78a-64f3ea42dc2a",
        "value": "38.54.108.229.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:30+00:00",
        "timestamp": "1777143630",
        "to_ids": true,
        "type": "domain",
        "uuid": "18314413-ff69-467d-8549-0d1c8f09813a",
        "value": "ccdtetsgky.accounts.google.omassent8entryroutineapprovesubscribeuseafixmech.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:30+00:00",
        "timestamp": "1777143630",
        "to_ids": true,
        "type": "domain",
        "uuid": "01cbf108-6e80-4620-9402-9abba48260ba",
        "value": "erktmzrhpn.accounts.google.omassent8entryroutineapprovesubscribeuseafixmech.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:30+00:00",
        "timestamp": "1777143630",
        "to_ids": true,
        "type": "domain",
        "uuid": "24444c3e-b51a-463f-8abf-3f2ad159f473",
        "value": "mzxseexczs.omassent8entryroutineapprovesubscribeuseafixmech.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:30+00:00",
        "timestamp": "1777143630",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ec5cecd-9fa7-45f0-a93e-9f4beb06b082",
        "value": "omassent8entryroutineapprovesubscribeuseafixmech.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:30+00:00",
        "timestamp": "1777143630",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d1bee54-cbab-4e58-8e48-00c7c3031fcf",
        "value": "pancaketoken.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:30+00:00",
        "timestamp": "1777143631",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bdcae9a-a76f-4e7a-bd61-572d4fb93daa",
        "value": "play.gmail.omassent8entryroutineapprovesubscribeuseafixmech.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:31+00:00",
        "timestamp": "1777143631",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b181dd2-36ca-4c11-821c-497192eaa303",
        "value": "sprnetapi.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:31+00:00",
        "timestamp": "1777143631",
        "to_ids": false,
        "type": "url",
        "uuid": "0bb3cfeb-05f9-4c4e-aede-0ab739c8ae2a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d943e2277b00b15f366d3421fc5145001cc7e474",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T19:00:31+00:00",
        "timestamp": "1777143631",
        "to_ids": true,
        "type": "domain",
        "uuid": "1979832b-daac-4c5b-8e01-672131a796f3",
        "value": "bactergy.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:04+00:00",
        "timestamp": "1777147204",
        "to_ids": false,
        "type": "url",
        "uuid": "528e2646-da57-4a88-bd7a-b00b56b54a82",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/cda939c562980152317aff1afc5458e094c8242a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:04+00:00",
        "timestamp": "1777147204",
        "to_ids": true,
        "type": "domain",
        "uuid": "38c7be52-7be1-44f1-abc5-0466a615ba9a",
        "value": "5ya72oy.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:04+00:00",
        "timestamp": "1777147204",
        "to_ids": true,
        "type": "domain",
        "uuid": "089f7041-093e-4c2e-ad64-b5e87114f1b2",
        "value": "algo-indicator.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:04+00:00",
        "timestamp": "1777147204",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b31a6de-639b-4d94-b612-f3d6945f5570",
        "value": "besttrip5.wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:05+00:00",
        "timestamp": "1777147205",
        "to_ids": true,
        "type": "domain",
        "uuid": "38dddc2f-95a5-470f-a09b-af6bc337c975",
        "value": "drama-novel.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:05+00:00",
        "timestamp": "1777147205",
        "to_ids": true,
        "type": "domain",
        "uuid": "3639b8d7-eaf8-4bdf-b802-425e3a49ef7f",
        "value": "drama-novel.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:05+00:00",
        "timestamp": "1777147205",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffdd33d3-1719-407f-a727-a08000b672bc",
        "value": "fasttime6.wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:05+00:00",
        "timestamp": "1777147205",
        "to_ids": true,
        "type": "domain",
        "uuid": "555fb8ca-7185-486f-80fa-09cfa54fee49",
        "value": "firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:05+00:00",
        "timestamp": "1777147205",
        "to_ids": true,
        "type": "domain",
        "uuid": "574d43a3-7533-4310-9984-35c73b17ba69",
        "value": "fresh-bloom6.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:05+00:00",
        "timestamp": "1777147206",
        "to_ids": true,
        "type": "domain",
        "uuid": "77f8f3e5-2c01-4831-a45d-63112b57ceda",
        "value": "green-leaf1.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:06+00:00",
        "timestamp": "1777147206",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7d87e4d-f569-406b-bb26-70b33f9e759b",
        "value": "high-stem4.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:06+00:00",
        "timestamp": "1777147206",
        "to_ids": true,
        "type": "domain",
        "uuid": "102a8abd-4735-4d66-b60e-b6487fc9f06f",
        "value": "mainroad1.wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:06+00:00",
        "timestamp": "1777147206",
        "to_ids": true,
        "type": "domain",
        "uuid": "6396fad2-aa10-41ec-9295-747b9bc2535a",
        "value": "news365crypto.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:06+00:00",
        "timestamp": "1777147206",
        "to_ids": true,
        "type": "domain",
        "uuid": "26a7e4f0-a549-4fb7-88d5-c34062b7d9a2",
        "value": "news365crypto.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:06+00:00",
        "timestamp": "1777147206",
        "to_ids": true,
        "type": "domain",
        "uuid": "40c0a7b1-5464-47d5-918e-44e4379950bf",
        "value": "nextstep4.wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:06+00:00",
        "timestamp": "1777147207",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e035bf9-fb47-4e59-a140-3390fa088013",
        "value": "oldmap3.wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:07+00:00",
        "timestamp": "1777147207",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f4bb986-cf75-435b-b49b-af4a5727900f",
        "value": "shortway2.wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:07+00:00",
        "timestamp": "1777147207",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4a133f5-b571-4f46-8c6f-163e8b0c77e5",
        "value": "slowcivi.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:07+00:00",
        "timestamp": "1777147207",
        "to_ids": true,
        "type": "domain",
        "uuid": "e11e3c14-2dbc-4cb9-b0f9-c89c7f74db35",
        "value": "tuitionbalmy.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:07+00:00",
        "timestamp": "1777147207",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c5146be-df6f-4690-9c37-90de7f12d67f",
        "value": "whoopeeaort.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:07+00:00",
        "timestamp": "1777147207",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cada406-64ef-4012-bcf9-12b40be92e25",
        "value": "wi8sorim.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:07+00:00",
        "timestamp": "1777147208",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e21251a-dcc0-44e9-8331-581055cede02",
        "value": "wild-root2.firs-tachycardia.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:08+00:00",
        "timestamp": "1777147208",
        "to_ids": false,
        "type": "url",
        "uuid": "c51fe22f-d89a-4036-9701-e3f92669423e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/253150596256496fc951f0d1fd610ef982394596",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:08+00:00",
        "timestamp": "1777147208",
        "to_ids": false,
        "type": "url",
        "uuid": "ec9207d0-c7e6-4ef0-97e9-c8ae181b41b0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b6cab83f03dc87a238c65adc95f91415ae41b3d6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:08+00:00",
        "timestamp": "1777147208",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6756d0cc-d74e-45f0-9565-01dc5afe927f",
        "value": "114.66.46.76",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:08+00:00",
        "timestamp": "1777147209",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "760b1cd7-e7cd-46ed-90fc-d54841954970",
        "value": "154.9.227.191",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:09+00:00",
        "timestamp": "1777147209",
        "to_ids": false,
        "type": "url",
        "uuid": "09d7f81a-ec6d-4395-8d8e-f441dc31315e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1cfdc5ee9d151c1af4700d0d62b02017b11e7934",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T20:00:09+00:00",
        "timestamp": "1777147209",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e1a547b-9ccf-4112-ae7c-2ce56b645f62",
        "value": "dandsrecruiting.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:03+00:00",
        "timestamp": "1777150805",
        "to_ids": false,
        "type": "url",
        "uuid": "aaf14ab6-50e1-446e-8b4b-567d415e48e4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4c585df5f302115848ad41295e5057c9854c22d2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:05+00:00",
        "timestamp": "1777150805",
        "to_ids": true,
        "type": "domain",
        "uuid": "46c5755f-33bf-420b-aaea-646d1f3687d5",
        "value": "distributionmorning.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:05+00:00",
        "timestamp": "1777150805",
        "to_ids": false,
        "type": "url",
        "uuid": "1bdf8451-45f2-4652-a9f1-360ccca9d095",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/47452506d237a6072c537c39864e5caba8855ce0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:05+00:00",
        "timestamp": "1777150806",
        "to_ids": true,
        "type": "domain",
        "uuid": "468ebe7e-02ef-47ab-952a-4de30638c2e2",
        "value": "creativespy.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:06+00:00",
        "timestamp": "1777150806",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6548b7d-d324-4569-ade1-774b87319545",
        "value": "45-61-136-7.nip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:06+00:00",
        "timestamp": "1777150806",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9361c75-06fd-419a-a819-aafaca985db9",
        "value": "a4.uq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:06+00:00",
        "timestamp": "1777150806",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e42154-b60e-48d2-a3ac-8c5f95c911f0",
        "value": "bvkpn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:06+00:00",
        "timestamp": "1777150806",
        "to_ids": true,
        "type": "domain",
        "uuid": "67afd0d8-5066-4e59-b460-a7498a6e2e9a",
        "value": "bztro-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:06+00:00",
        "timestamp": "1777150806",
        "to_ids": true,
        "type": "domain",
        "uuid": "263f19b6-06d9-4753-9c6b-7ce59ef11637",
        "value": "calebev.best",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:07+00:00",
        "timestamp": "1777150807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3269880-3bcf-46df-8513-252564a23dc4",
        "value": "cjlwm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:07+00:00",
        "timestamp": "1777150807",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f0250ce-d83d-4ab5-8e60-24a39626ecb8",
        "value": "ctzlu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:07+00:00",
        "timestamp": "1777150807",
        "to_ids": true,
        "type": "domain",
        "uuid": "3403a585-72c8-404d-a311-587e4b141418",
        "value": "fgbyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:07+00:00",
        "timestamp": "1777150808",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc74d06b-2aea-4937-bac2-c3339d8b54a5",
        "value": "fmkxe-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:08+00:00",
        "timestamp": "1777150808",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dad9204-3bd2-440e-bf15-0d3b6a4645ad",
        "value": "fzoke-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:08+00:00",
        "timestamp": "1777150808",
        "to_ids": true,
        "type": "domain",
        "uuid": "39c04d2f-6dd3-4e11-abab-c7f69c887fa1",
        "value": "htyoz-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:08+00:00",
        "timestamp": "1777150808",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb4c5cdf-8116-46e3-98b1-7d9f485ec9d0",
        "value": "hzsfdcsh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:08+00:00",
        "timestamp": "1777150808",
        "to_ids": true,
        "type": "domain",
        "uuid": "9328a534-4c12-45b4-bd92-d8232cb419d0",
        "value": "io.plkji-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:08+00:00",
        "timestamp": "1777150808",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e026dc7-30a7-4d51-a459-27b1f57f8747",
        "value": "ir.fgbyu-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:08+00:00",
        "timestamp": "1777150809",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb6885d5-35a1-43c7-bd64-577f94be47af",
        "value": "j3.ctvjr-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:09+00:00",
        "timestamp": "1777150809",
        "to_ids": true,
        "type": "domain",
        "uuid": "d13ad19b-aa81-4381-b16e-0af9fc6d2fd4",
        "value": "j4.axmtp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:09+00:00",
        "timestamp": "1777150809",
        "to_ids": true,
        "type": "domain",
        "uuid": "d164c059-891b-4aee-804d-009515af19d0",
        "value": "j5.lsgxm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:09+00:00",
        "timestamp": "1777150809",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dead538-6048-4fd9-a67d-bb1c3808218c",
        "value": "j7.azkyn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:09+00:00",
        "timestamp": "1777150809",
        "to_ids": true,
        "type": "domain",
        "uuid": "53d02515-423e-4400-9c5a-9815a5a6024f",
        "value": "j8.lpqmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:09+00:00",
        "timestamp": "1777150809",
        "to_ids": true,
        "type": "domain",
        "uuid": "94567382-902e-4ff6-a31d-26b9b8c60df1",
        "value": "jf.jprqx-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:09+00:00",
        "timestamp": "1777150810",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d4d25d6-f25f-475a-90f5-423466ebe90d",
        "value": "jg.qazws-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:10+00:00",
        "timestamp": "1777150810",
        "to_ids": true,
        "type": "domain",
        "uuid": "67b4cd64-e1f3-405f-a58e-0da00d07140b",
        "value": "jj.uytre-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:10+00:00",
        "timestamp": "1777150810",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bcb220d-868d-4b4b-9ae9-ce94dff3e342",
        "value": "jkwdo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:10+00:00",
        "timestamp": "1777150810",
        "to_ids": true,
        "type": "domain",
        "uuid": "12782805-cf80-406b-afd8-bd52ec14b8e3",
        "value": "jl.txrpm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:10+00:00",
        "timestamp": "1777150810",
        "to_ids": true,
        "type": "domain",
        "uuid": "82fb7449-b68b-49ea-859b-6451d715e601",
        "value": "jp.rxqpt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:10+00:00",
        "timestamp": "1777150810",
        "to_ids": true,
        "type": "domain",
        "uuid": "7313d67a-cf00-4667-b27a-f2b650a161fc",
        "value": "jrmqd-whatsapp.org.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:11+00:00",
        "timestamp": "1777150811",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb875964-c9f0-488b-ab45-8b221dcef26d",
        "value": "jw.vzwrm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:11+00:00",
        "timestamp": "1777150811",
        "to_ids": true,
        "type": "domain",
        "uuid": "204626a5-5553-4675-bacb-2ce4277dfa04",
        "value": "jx.zpxqt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:11+00:00",
        "timestamp": "1777150811",
        "to_ids": true,
        "type": "domain",
        "uuid": "a36afed7-1722-41a9-b9c1-eb3890cc8cd5",
        "value": "jy.rtzxp-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:11+00:00",
        "timestamp": "1777150811",
        "to_ids": true,
        "type": "domain",
        "uuid": "d37670ce-0ffb-4449-8061-fe961d459901",
        "value": "jy.wqzrt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:11+00:00",
        "timestamp": "1777150811",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a1b781b-f213-4c5a-8d0b-b6d8ab9e2559",
        "value": "kzqmt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:11+00:00",
        "timestamp": "1777150812",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bbd0e94-c1d3-42a1-957b-6c0cebe51f95",
        "value": "lkpvd-whatsapp.org.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:12+00:00",
        "timestamp": "1777150812",
        "to_ids": true,
        "type": "domain",
        "uuid": "19f717ea-bb23-47d4-ac52-75912f0d4c4a",
        "value": "lkpzvqn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:12+00:00",
        "timestamp": "1777150812",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ff53717-aeab-47fa-ae23-1c21b6a129c5",
        "value": "lp.w-x-web-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:12+00:00",
        "timestamp": "1777150812",
        "to_ids": true,
        "type": "domain",
        "uuid": "24803a9b-457e-4364-9204-de90eb6550ae",
        "value": "m0.jrmqd-whatsapp.org.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:12+00:00",
        "timestamp": "1777150812",
        "to_ids": true,
        "type": "domain",
        "uuid": "388c6d57-957c-489e-84e8-7a9b698df86a",
        "value": "m3.lkpvd-whatsapp.org.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:12+00:00",
        "timestamp": "1777150813",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cfec3ea-e988-4d7e-a8ed-1799902a5078",
        "value": "m5.gkxte-whatsapp.org.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:13+00:00",
        "timestamp": "1777150813",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfce1a12-a5d6-4ec7-9d7a-a2dae04cb229",
        "value": "mg.vbqzt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:13+00:00",
        "timestamp": "1777150813",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e58742f-b7ac-410d-9024-fa464e4a6bea",
        "value": "mj.ytkvc-whatsapp.org.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:13+00:00",
        "timestamp": "1777150813",
        "to_ids": true,
        "type": "domain",
        "uuid": "df200ca2-531e-47b3-9c80-042254ecddde",
        "value": "ml.rmxqt-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:13+00:00",
        "timestamp": "1777150814",
        "to_ids": true,
        "type": "domain",
        "uuid": "36d2378c-9345-4dac-8352-d52052a9d80a",
        "value": "mn.mxqvr-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:14+00:00",
        "timestamp": "1777150814",
        "to_ids": true,
        "type": "domain",
        "uuid": "6380b41f-bb54-48dd-bdee-63a8bdce4cda",
        "value": "nm.45-61-136-7.nip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:14+00:00",
        "timestamp": "1777150814",
        "to_ids": true,
        "type": "domain",
        "uuid": "be7bac97-4418-4ba6-b3d9-c2314ba9dc03",
        "value": "nwdrl-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:14+00:00",
        "timestamp": "1777150814",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef46c496-f3c0-4407-b641-ada28c67b661",
        "value": "ou.qdzmpka-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:14+00:00",
        "timestamp": "1777150814",
        "to_ids": true,
        "type": "domain",
        "uuid": "45c9a3a3-5fe7-4c09-99c9-6b1ed8d50e6f",
        "value": "plkji-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:14+00:00",
        "timestamp": "1777150814",
        "to_ids": true,
        "type": "domain",
        "uuid": "5115813a-f3b4-4db5-8042-6c46c38a76c3",
        "value": "pndvk-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:14+00:00",
        "timestamp": "1777150815",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddf11db5-e92f-4040-970b-e5a6484338d1",
        "value": "prkwnsd-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:15+00:00",
        "timestamp": "1777150815",
        "to_ids": true,
        "type": "domain",
        "uuid": "e128a42a-55d3-42a5-8b7a-14980ba8ee24",
        "value": "qazws-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:15+00:00",
        "timestamp": "1777150815",
        "to_ids": true,
        "type": "domain",
        "uuid": "d85f802a-c00f-4e75-8d7b-2f6cc7cb0880",
        "value": "qlmra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:15+00:00",
        "timestamp": "1777150815",
        "to_ids": true,
        "type": "domain",
        "uuid": "62ab7ced-37be-4ded-a4fb-646a3ae710b1",
        "value": "qpztn-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:15+00:00",
        "timestamp": "1777150815",
        "to_ids": true,
        "type": "domain",
        "uuid": "264b56ef-45b2-4511-8a31-98197d75eedf",
        "value": "rq.web-cn-d-f-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:15+00:00",
        "timestamp": "1777150815",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d1c6e90-3c18-41c2-8f79-18d4be116c8b",
        "value": "rqmvxpa-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:16+00:00",
        "timestamp": "1777150816",
        "to_ids": true,
        "type": "domain",
        "uuid": "18f44ba4-bd63-4ad9-8c0d-2fb8c4a8a606",
        "value": "rzalt-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:16+00:00",
        "timestamp": "1777150816",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6379046-a304-4166-b3e5-c5de25176b2b",
        "value": "rznvpaq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:16+00:00",
        "timestamp": "1777150816",
        "to_ids": true,
        "type": "domain",
        "uuid": "790ba14d-ba23-46d4-bff0-1982394be137",
        "value": "shxkxljy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:16+00:00",
        "timestamp": "1777150816",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b6dbd45-2527-409f-93ca-6e9c901d3e3f",
        "value": "shxwo-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:16+00:00",
        "timestamp": "1777150816",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4fb9f1a-20e7-4398-b067-b6a945660513",
        "value": "tqlva-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:16+00:00",
        "timestamp": "1777150817",
        "to_ids": true,
        "type": "domain",
        "uuid": "23a20a93-5bd1-4fd5-8e78-7f93359230d1",
        "value": "tvqxmra-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:17+00:00",
        "timestamp": "1777150817",
        "to_ids": true,
        "type": "domain",
        "uuid": "36cd6dd3-ea44-4774-88b4-ba705e92c727",
        "value": "ulqet-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:17+00:00",
        "timestamp": "1777150817",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fa24738-786a-49c3-ad1f-e446d8f67faa",
        "value": "uq-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:17+00:00",
        "timestamp": "1777150817",
        "to_ids": true,
        "type": "domain",
        "uuid": "182505cc-941f-4d8f-9134-dad079b4abfc",
        "value": "vprxm-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:17+00:00",
        "timestamp": "1777150817",
        "to_ids": true,
        "type": "domain",
        "uuid": "5da5cdf1-342d-493b-8078-43991c25f1bd",
        "value": "wexla-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:17+00:00",
        "timestamp": "1777150818",
        "to_ids": true,
        "type": "domain",
        "uuid": "64da9ba7-dc2d-4344-9c0f-ac94dce174a7",
        "value": "x1.wss-lrzqa-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:18+00:00",
        "timestamp": "1777150818",
        "to_ids": true,
        "type": "domain",
        "uuid": "836956e7-ba8c-4444-bd25-c3a80afa0cf5",
        "value": "x7.wss-vqmpl-whatsapp.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:18+00:00",
        "timestamp": "1777150818",
        "to_ids": true,
        "type": "domain",
        "uuid": "21e02f89-c2d1-4ce2-9f06-c8e861af5934",
        "value": "xhxz.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:18+00:00",
        "timestamp": "1777150818",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce07e567-1bfd-488b-9ef0-b8c6580171d6",
        "value": "xjpla-whatsapp.hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:18+00:00",
        "timestamp": "1777150819",
        "to_ids": true,
        "type": "domain",
        "uuid": "edfbb725-df44-4df4-b15a-8e0b6ee27fd6",
        "value": "yhgbakxi.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:19+00:00",
        "timestamp": "1777150819",
        "to_ids": false,
        "type": "url",
        "uuid": "8faf7ebc-d111-41b8-b984-2017da13f5f7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/61c5137e906b7dc06056168e44e523bbf29235b0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:19+00:00",
        "timestamp": "1777150819",
        "to_ids": true,
        "type": "domain",
        "uuid": "c617710c-f3f1-445e-a88f-2207ae1583ba",
        "value": "ssw.wliiymn.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:19+00:00",
        "timestamp": "1777150819",
        "to_ids": false,
        "type": "url",
        "uuid": "42c60f21-f1bb-4018-9d0a-8a3e9be24acf",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0d176e5452f987088912da2efb5daf143147dc42",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T21:00:19+00:00",
        "timestamp": "1777150819",
        "to_ids": true,
        "type": "domain",
        "uuid": "05349326-8e09-4d5b-9771-b8b56af9dd35",
        "value": "statlayer.bond",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T22:00:02+00:00",
        "timestamp": "1777154403",
        "to_ids": false,
        "type": "url",
        "uuid": "475eefc8-fcb5-4e2f-865d-48cc1eeb2d87",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/12a0aa17191b54ee13a69ba8e82e8231a19fdb2e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T22:00:03+00:00",
        "timestamp": "1777154404",
        "to_ids": false,
        "type": "url",
        "uuid": "ed95aaca-5812-48d6-8459-30d2cf479088",
        "value": "https://x.com/rifteyy/status/2048126680116473969",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T22:00:04+00:00",
        "timestamp": "1777154404",
        "to_ids": false,
        "type": "url",
        "uuid": "e9e81a52-a2fe-4839-b1eb-73e549ac8e79",
        "value": "https://app.any.run/tasks/6d1ebc90-3f8e-4320-9471-15fa92f5fdb6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-25T22:00:04+00:00",
        "timestamp": "1777154405",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a8b8c45-b1d5-4eea-9fe1-978d5f0ace56",
        "value": "nxbrew.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}