{
  "Event": {
    "analysis": "1",
    "date": "2026-04-22",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-04-23",
    "publish_timestamp": "1776981610",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1776981609",
    "uuid": "465b76fb-42e4-4a02-b5fd-95d4a0e0cb5a",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:18+00:00",
        "timestamp": "1776931218",
        "to_ids": false,
        "type": "url",
        "uuid": "29ac8b20-4582-4ee8-bca1-de4482da229a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3268f88f70ec4d2918decef92a5fbc1104ae61ff",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:18+00:00",
        "timestamp": "1776931218",
        "to_ids": false,
        "type": "url",
        "uuid": "d549e3ff-e92f-431e-92fd-ccde9166640a",
        "value": "https://x.com/pcrisk/status/2047219293197103521",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:18+00:00",
        "timestamp": "1776931218",
        "to_ids": false,
        "type": "url",
        "uuid": "2b4d2974-8a8c-4e88-b8f8-4684436f1979",
        "value": "https://www.virustotal.com/gui/ip-address/144.31.236.66/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:18+00:00",
        "timestamp": "1776931219",
        "to_ids": true,
        "type": "domain",
        "uuid": "907416c3-7171-485f-8972-37537aedb10e",
        "value": "script-dev.buzz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:19+00:00",
        "timestamp": "1776931219",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c7d1008-e444-4fa7-8e92-6a9e5041d985",
        "value": "script-dev.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:19+00:00",
        "timestamp": "1776931219",
        "to_ids": true,
        "type": "domain",
        "uuid": "f47853a7-6067-4718-b8ae-3b43a7ec930f",
        "value": "script-dev.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:19+00:00",
        "timestamp": "1776931219",
        "to_ids": false,
        "type": "url",
        "uuid": "896e3f0e-26ba-492b-ac32-a98b4c94572d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/59d9cf8c4b2e04ff76ab6a91fac1d858850714a1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:19+00:00",
        "timestamp": "1776931219",
        "to_ids": false,
        "type": "url",
        "uuid": "794ccd71-0167-46ce-9a53-18af91e3dea2",
        "value": "https://research.checkpoint.com/2026/dfir-report-the-gentlemen",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:19+00:00",
        "timestamp": "1776931219",
        "to_ids": false,
        "type": "url",
        "uuid": "a0c3fa9f-a53e-4122-9d1e-17748eea93ce",
        "value": "https://www.silentpush.com/blog/gentlemen-ransomware",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:19+00:00",
        "timestamp": "1776931220",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c63e8323-a957-43c1-b050-76c570ee66b8",
        "value": "91.107.247.163",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "systembc",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:23+00:00",
        "timestamp": "1776931223",
        "to_ids": false,
        "type": "url",
        "uuid": "1b09f04b-ba76-4afc-97a9-789d8df3e29f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/99db64587ae2be9bc05df4673955a0758f99d66c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "systembc",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:23+00:00",
        "timestamp": "1776931224",
        "to_ids": false,
        "type": "url",
        "uuid": "64913fc8-a3c5-4503-a95c-c58709b4456f",
        "value": "https://www.virustotal.com/gui/file/992c951f4af57ca7cd8396f5ed69c2199fd6fd4ae5e93726da3e198e78bec0a5/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "systembc",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:24+00:00",
        "timestamp": "1776931224",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e087129a-4a44-485b-9443-92bd28e4d3ee",
        "value": "45.86.230.112",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:24+00:00",
        "timestamp": "1776931224",
        "to_ids": false,
        "type": "url",
        "uuid": "376d580f-3970-494e-9002-cbdaf1d763f0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/af4ab19b27ac3b5474c865c645d85efd950c4567",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:24+00:00",
        "timestamp": "1776931224",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c66984e-b8c6-4dd8-aad4-69759571e7cf",
        "value": "scarecrowcare.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:24+00:00",
        "timestamp": "1776931224",
        "to_ids": false,
        "type": "url",
        "uuid": "10c36f62-287b-4a93-8786-a467037f9ef1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ea67624e705cba6137eeab60f1df0b3a7b38484a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:24+00:00",
        "timestamp": "1776931224",
        "to_ids": true,
        "type": "domain",
        "uuid": "b705636f-ecd2-4185-a79b-94b584768adb",
        "value": "38-54-108-229.nip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:25+00:00",
        "timestamp": "1776931225",
        "to_ids": false,
        "type": "url",
        "uuid": "59862b7f-334d-43db-b31c-1d26adc1cdd8",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/45f6f2f95e6f90340dbed47fb4ed4f108493446c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:25+00:00",
        "timestamp": "1776931225",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a34e82a-d69e-47c1-8bca-6a41d518cd63",
        "value": "bmwservicebestik.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:25+00:00",
        "timestamp": "1776931225",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9dc9c38-a7a2-4bce-9e9d-c4fe4cafd849",
        "value": "newpayerforhomies.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:25+00:00",
        "timestamp": "1776931225",
        "to_ids": true,
        "type": "domain",
        "uuid": "29f0de77-5ccf-47ae-9ad2-08419ac28f4a",
        "value": "trindastal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:29+00:00",
        "timestamp": "1776931229",
        "to_ids": false,
        "type": "url",
        "uuid": "e64e2d2d-517d-47c8-89d7-b637c134d027",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6b5464892c5931ef544714bd16384803bba90d59",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:29+00:00",
        "timestamp": "1776931229",
        "to_ids": true,
        "type": "domain",
        "uuid": "239501d9-32b9-40b2-a364-e9bc4ea5a16b",
        "value": "atagkeukentechniek.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:29+00:00",
        "timestamp": "1776931229",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f27b287-62ad-4a4a-aa44-d720a8455642",
        "value": "ipkdh.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:29+00:00",
        "timestamp": "1776931229",
        "to_ids": false,
        "type": "url",
        "uuid": "2d8fbf02-b412-4873-99f8-9ae8b9f871c4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3321eb3b464e9b1c30ed375b1d17275068bb5381",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:29+00:00",
        "timestamp": "1776931230",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d064ae3-a298-4815-bfb7-aa0aff2cd895",
        "value": "filecrisppear.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931230",
        "to_ids": true,
        "type": "domain",
        "uuid": "63a1da28-9cfd-4fdb-a506-cc0195abcba6",
        "value": "quicksandtrousers.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931230",
        "to_ids": false,
        "type": "url",
        "uuid": "cd690dc6-53e6-486e-a947-8e3e0f99292b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/cf69a822f54ea21fc35d2a3d132ea8912d00346a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931230",
        "to_ids": true,
        "type": "domain",
        "uuid": "9afb96d2-2100-401b-86b8-3615cbc5b98b",
        "value": "kweokdqlwpldpqldpqldq.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931230",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b4dba0f-0e49-4ff3-bc6d-e5275432257c",
        "value": "moonshoottools.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931230",
        "to_ids": true,
        "type": "domain",
        "uuid": "69073461-7110-48e3-8cca-601db21a24aa",
        "value": "moonshootvote.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931230",
        "to_ids": true,
        "type": "domain",
        "uuid": "a167be9b-43ee-48e4-b335-d46c8dfed780",
        "value": "naurok.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:30+00:00",
        "timestamp": "1776931231",
        "to_ids": true,
        "type": "domain",
        "uuid": "61c9e60c-b058-45bf-a8bf-f8036c8b8227",
        "value": "openclawaix.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:31+00:00",
        "timestamp": "1776931231",
        "to_ids": true,
        "type": "domain",
        "uuid": "aede3fb4-3e53-4dc3-b0e5-57c509a551f2",
        "value": "plimp.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:31+00:00",
        "timestamp": "1776931231",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdebaeb2-6571-4cb4-b96e-5524f5bf95b7",
        "value": "pump-guis.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:31+00:00",
        "timestamp": "1776931231",
        "to_ids": true,
        "type": "domain",
        "uuid": "95f20115-0689-4066-b5b5-2fe9eb2605af",
        "value": "pump-token.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:31+00:00",
        "timestamp": "1776931231",
        "to_ids": true,
        "type": "domain",
        "uuid": "9389c6a8-c362-45ea-8cf2-2e48bd08d17b",
        "value": "smilefest.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:31+00:00",
        "timestamp": "1776931231",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f3e507e-31f1-4341-9757-94ef9ad51f69",
        "value": "vseosvita.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:31+00:00",
        "timestamp": "1776931232",
        "to_ids": false,
        "type": "url",
        "uuid": "648a6c5a-89e8-4de1-9f3e-90543d29fe22",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/026781cf8169f4fcd8d3b36a034568af5f4040fc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:32+00:00",
        "timestamp": "1776931232",
        "to_ids": false,
        "type": "url",
        "uuid": "fabc06c2-6f5c-4be6-8e37-72062e9ae128",
        "value": "https://www.virustotal.com/gui/ip-address/91.92.243.46/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:32+00:00",
        "timestamp": "1776931232",
        "to_ids": true,
        "type": "domain",
        "uuid": "fac61d87-bbd4-4651-b70a-46ff76a63772",
        "value": "afejoed.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:32+00:00",
        "timestamp": "1776931232",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f7210e4-25f8-4d34-b8d5-722c7f24aa6e",
        "value": "driplin.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:32+00:00",
        "timestamp": "1776931232",
        "to_ids": true,
        "type": "domain",
        "uuid": "452f7cc6-9a4d-4953-9e83-e9ec463d9282",
        "value": "obnusho.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:32+00:00",
        "timestamp": "1776931232",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c674774-219d-42cf-9da6-23068ad6eb59",
        "value": "plitofa.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:32+00:00",
        "timestamp": "1776931233",
        "to_ids": false,
        "type": "url",
        "uuid": "5004d7f2-3507-44fc-aec3-e42d5293b59a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/df126db1fbb6fc167011d4718adcbb2344e20b70",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:33+00:00",
        "timestamp": "1776931233",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d649c45-ccf4-4bc6-8ccd-fddd4fc24f27",
        "value": "omnivectis.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T08:00:33+00:00",
        "timestamp": "1776931233",
        "to_ids": true,
        "type": "domain",
        "uuid": "171767b2-371c-42e3-a85a-5a443434f153",
        "value": "raventhorp.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:04+00:00",
        "timestamp": "1776934804",
        "to_ids": false,
        "type": "url",
        "uuid": "9828848f-67e1-4133-9b78-168d2f6e9b1a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a7553e49f164771f1382c77c6c7e0b2e75508190",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:04+00:00",
        "timestamp": "1776934804",
        "to_ids": true,
        "type": "domain",
        "uuid": "b739f6fc-f46d-4096-88f8-014b6963e7bb",
        "value": "superdocsoff.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:04+00:00",
        "timestamp": "1776934804",
        "to_ids": false,
        "type": "url",
        "uuid": "b31ce51f-f1f2-49e1-85c4-95688877d07c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5a1a01c095f6e4182c3d7b68ab06b9b749089c27",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:04+00:00",
        "timestamp": "1776934804",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0cd3f9d-8284-497d-bc89-a565380a0f18",
        "value": "astraloraventium.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:04+00:00",
        "timestamp": "1776934804",
        "to_ids": true,
        "type": "domain",
        "uuid": "45cea8b5-1128-4a2d-a066-4abf1e8d417b",
        "value": "draltonemedia.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:04+00:00",
        "timestamp": "1776934805",
        "to_ids": true,
        "type": "domain",
        "uuid": "14cae0af-51f6-42bb-bc2e-f9e34f1cafe7",
        "value": "dramarithenquoq.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:05+00:00",
        "timestamp": "1776934805",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab3e7d48-8dec-4561-907e-8f023376ceb8",
        "value": "dynamiquelivora.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:05+00:00",
        "timestamp": "1776934805",
        "to_ids": true,
        "type": "domain",
        "uuid": "dac4e34a-04d9-4520-a4fb-b419d8d3dcdf",
        "value": "falkremonilab.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:05+00:00",
        "timestamp": "1776934805",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f32fe91-0faa-4ffc-b823-29bd451d6eab",
        "value": "farnodelixstudio.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:05+00:00",
        "timestamp": "1776934805",
        "to_ids": true,
        "type": "domain",
        "uuid": "91225a43-c723-4a01-a9bd-75c27c84535d",
        "value": "felundraxstudio.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:05+00:00",
        "timestamp": "1776934805",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d9b95e0-5c6c-4835-a489-74d4c0d50321",
        "value": "galiaterranovavex.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:05+00:00",
        "timestamp": "1776934806",
        "to_ids": true,
        "type": "domain",
        "uuid": "51d803b2-d083-4208-96df-40a77112e5a9",
        "value": "grandivisioneox.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:06+00:00",
        "timestamp": "1776934806",
        "to_ids": true,
        "type": "domain",
        "uuid": "4003a9d8-ff44-4f90-af77-0befb7d04828",
        "value": "halivormetia.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:06+00:00",
        "timestamp": "1776934806",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8755ebb-9b59-4e7f-841a-bb4a519f7dac",
        "value": "iralophane.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:06+00:00",
        "timestamp": "1776934806",
        "to_ids": true,
        "type": "domain",
        "uuid": "51ad9fc8-cb9d-43fe-a3b8-d5c3c4e39306",
        "value": "jelariscapelyxent.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:06+00:00",
        "timestamp": "1776934806",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cb63e26-c38f-4ab7-a04b-da140ed65b99",
        "value": "lendoriphaze.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:06+00:00",
        "timestamp": "1776934806",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd77f3c1-215e-4c0a-abd0-6ce417fa3c79",
        "value": "lytherionexora.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:06+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "f96c7795-beb9-4335-8a52-146533b7627d",
        "value": "machinesdeivete.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "379e1d10-07f4-45ee-be58-7afb1ec73264",
        "value": "machinesdelek.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "e23f71c6-9277-4023-b6d9-f8a978c56b60",
        "value": "metacytonovafloria.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "30d92fbe-5c86-4da1-b90a-931d78d23b7a",
        "value": "murrelithycapivora.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "69bec86d-5c10-4e2d-82a1-613c29093fe6",
        "value": "myronexalia.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "eaa8e47c-1b81-43e6-8366-801d073940a8",
        "value": "nexoriumtalara.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934807",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d355b4a-c6db-493d-92e1-e5f39ba4c356",
        "value": "nivarenthulios.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:07+00:00",
        "timestamp": "1776934808",
        "to_ids": true,
        "type": "domain",
        "uuid": "75787756-cceb-4ac2-aec5-25c59c6df630",
        "value": "nivorianthusqa.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:08+00:00",
        "timestamp": "1776934808",
        "to_ids": true,
        "type": "domain",
        "uuid": "d35f1c22-eb4c-46e8-9ef2-870be42fe14e",
        "value": "nyloriventra.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:08+00:00",
        "timestamp": "1776934808",
        "to_ids": true,
        "type": "domain",
        "uuid": "4380ea62-ddff-4c83-90e3-cfa49c28e59f",
        "value": "panoramicentivo.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:08+00:00",
        "timestamp": "1776934808",
        "to_ids": true,
        "type": "domain",
        "uuid": "e82ad668-6d6d-4f3a-8420-044a8c282328",
        "value": "pantheonarisentio.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:08+00:00",
        "timestamp": "1776934808",
        "to_ids": true,
        "type": "domain",
        "uuid": "9344950b-8b28-42ff-8b63-94a23985868d",
        "value": "pravanteliso.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:08+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf0ad38a-dc9f-43a3-b86c-dbe5a53755cb",
        "value": "primalunoradiatia.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "11f9d71a-d018-41bb-9c08-9051d9b28fbd",
        "value": "quaralinthovex.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "d227c480-b459-4b89-87c6-5f46f5d9e7f9",
        "value": "quarithaloven.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "13c6fb38-7ab9-464f-b419-13d5f9826b69",
        "value": "quelorithanex.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "287b87c0-ea40-4321-a82e-9da0331f1312",
        "value": "qwenthyronexuslithiq.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "148d80b2-f0cb-4466-b95e-d7fa45cadf37",
        "value": "radianthelioxus.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934809",
        "to_ids": true,
        "type": "domain",
        "uuid": "16b9ce80-6182-48c1-8940-f73cd2cc150e",
        "value": "rmtemachine.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:09+00:00",
        "timestamp": "1776934810",
        "to_ids": true,
        "type": "domain",
        "uuid": "609405f8-7465-4335-aeeb-2746e34dd2ba",
        "value": "solaphioranovient.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:10+00:00",
        "timestamp": "1776934810",
        "to_ids": true,
        "type": "domain",
        "uuid": "989ca722-83a2-4ab8-837e-5a89323aa435",
        "value": "sorelvianthoxa.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:10+00:00",
        "timestamp": "1776934810",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4d57894-fca8-4e9c-a462-1c8ca63d1158",
        "value": "virraoptianexlora.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:10+00:00",
        "timestamp": "1776934810",
        "to_ids": false,
        "type": "url",
        "uuid": "a69e053b-4235-4b7f-8bb1-f767a1422c70",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/991be57411485ea6774d468a67c404d2b37358c0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:10+00:00",
        "timestamp": "1776934810",
        "to_ids": false,
        "type": "url",
        "uuid": "3a4ab291-358d-49eb-afa3-83d6bb026f6d",
        "value": "https://x.com/JAMESWT_WT/status/2047198562300133381",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:10+00:00",
        "timestamp": "1776934810",
        "to_ids": false,
        "type": "url",
        "uuid": "b05ec2a7-901f-4408-8a85-bc464ffbf2e4",
        "value": "https://x.com/JAMESWT_WT/status/2047198565194191049",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:10+00:00",
        "timestamp": "1776934811",
        "to_ids": false,
        "type": "url",
        "uuid": "2eef4eeb-2484-415b-8793-7e46f3ace717",
        "value": "https://www.virustotal.com/gui/file/0e7f985723664de730b9fd27b00148ce0d19b7441989a957d421e33eafd01606/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:11+00:00",
        "timestamp": "1776934811",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c838201-af48-414f-a130-11a554733f11",
        "value": "auth-sharefile.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:11+00:00",
        "timestamp": "1776934811",
        "to_ids": true,
        "type": "domain",
        "uuid": "8aabbe68-013b-4bf6-aed1-c8de4e47a4d8",
        "value": "dd6qg4wn9ejpd.cloudfront.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:11+00:00",
        "timestamp": "1776934811",
        "to_ids": true,
        "type": "domain",
        "uuid": "95410ef5-0a55-4a70-b8a9-352aedc3170e",
        "value": "himachaly17aplr.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:11+00:00",
        "timestamp": "1776934811",
        "to_ids": true,
        "type": "domain",
        "uuid": "15dde8a4-9212-4322-a962-a289a5670bf6",
        "value": "htlwub00k.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:11+00:00",
        "timestamp": "1776934811",
        "to_ids": true,
        "type": "domain",
        "uuid": "201e35f2-778c-46e1-a36a-08b6f68ec6d5",
        "value": "missusecapmrch.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:11+00:00",
        "timestamp": "1776934812",
        "to_ids": true,
        "type": "domain",
        "uuid": "836791b5-d0eb-4a6b-abd7-42a9d8cbd8c1",
        "value": "nadcapfeb25-26.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:12+00:00",
        "timestamp": "1776934812",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a900ba3-91ae-48f8-a353-507012098903",
        "value": "paypal.auth-sharefile.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "agenttesla",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:12+00:00",
        "timestamp": "1776934812",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9914b08-b5a7-4160-b6a7-3a4225b17652",
        "value": "potalgonabunbunsed.blogspot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:12+00:00",
        "timestamp": "1776934812",
        "to_ids": false,
        "type": "url",
        "uuid": "62c7d04c-de1a-4706-a92c-4fee7d7cb927",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a80d61e99864c8b076b7a7447bce1dd0c565aa63",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:12+00:00",
        "timestamp": "1776934812",
        "to_ids": false,
        "type": "url",
        "uuid": "a4189e29-0e88-4412-8b60-d2d304487a25",
        "value": "https://x.com/JAMESWT_WT/status/2047198572672679996",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:12+00:00",
        "timestamp": "1776934812",
        "to_ids": false,
        "type": "url",
        "uuid": "4b0b8125-4d7f-47f0-8627-00a13a42d4dc",
        "value": "https://www.virustotal.com/gui/file/8f17e2954b005d9cc79d11822bd0d237aaef228e54faa13defc318876a36c813/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:12+00:00",
        "timestamp": "1776934813",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b5e3972d-c8c3-450b-8228-1749fb290f95",
        "value": "31.44.4.127",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:13+00:00",
        "timestamp": "1776934813",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8d12883-71d2-4a7b-887a-06e6b954a77f",
        "value": "b00king.org.za",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:13+00:00",
        "timestamp": "1776934813",
        "to_ids": true,
        "type": "domain",
        "uuid": "77086af4-e87a-4f66-801d-d14dbe318e6a",
        "value": "pure.b00king.org.za",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:13+00:00",
        "timestamp": "1776934813",
        "to_ids": false,
        "type": "url",
        "uuid": "d52a7943-e068-4649-80fb-d69c711f1220",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c592b54f2570d403efc95cbce3b9cb51b58a7fb3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T09:00:13+00:00",
        "timestamp": "1776934813",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3e92aab-55cb-404f-b32a-c0bd615228fe",
        "value": "auth-booking.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:05+00:00",
        "timestamp": "1776938405",
        "to_ids": false,
        "type": "url",
        "uuid": "cb40bb9e-5cfa-4a8e-8d1d-0d04385a63e1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0cba2715899ab2d8ccc884aec7a415e2e2226f19",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:05+00:00",
        "timestamp": "1776938405",
        "to_ids": false,
        "type": "url",
        "uuid": "c012ff75-b4ed-491e-9b97-0a66b24a0b8f",
        "value": "https://x.com/malwrhunterteam/status/2047229915389370795",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:05+00:00",
        "timestamp": "1776938406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7c67d8c2-231f-4fc5-a680-aa41454b914f",
        "value": "144.126.148.231",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:06+00:00",
        "timestamp": "1776938406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c9eb1c42-a9fd-4a55-b4de-245e7c172c14",
        "value": "144.126.150.124",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:06+00:00",
        "timestamp": "1776938406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9f540d2e-3719-4049-a8c9-0de31caa504f",
        "value": "147.93.147.227",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:06+00:00",
        "timestamp": "1776938406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "44d7dba5-1bdb-4aaa-8dd5-a143bcad415d",
        "value": "147.93.189.33",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:06+00:00",
        "timestamp": "1776938406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9ceddb9d-2d2f-428a-90ac-cf527cab4a51",
        "value": "147.93.6.169",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:07+00:00",
        "timestamp": "1776938407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f8f2679e-6a6c-4c6e-8473-fc2b1bb1e33c",
        "value": "151.245.32.220",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:07+00:00",
        "timestamp": "1776938407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a722f965-9dee-40de-8e92-8633ca82ba08",
        "value": "154.12.250.22",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:07+00:00",
        "timestamp": "1776938407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4f6cf6fb-24db-442b-b8ba-42280f655196",
        "value": "154.53.34.53",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:07+00:00",
        "timestamp": "1776938407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8c89efda-a125-45b1-8256-db6c1dd0ea97",
        "value": "154.53.39.105",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:07+00:00",
        "timestamp": "1776938407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9725b277-bd9c-40dc-ae16-b511e4714b67",
        "value": "161.97.180.129",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:07+00:00",
        "timestamp": "1776938408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e3a9e686-fba8-45fa-9fce-524af18a7858",
        "value": "194.140.198.217",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:08+00:00",
        "timestamp": "1776938408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "362c8311-84b8-4aba-b164-02fe0bc20fea",
        "value": "195.26.251.196",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:08+00:00",
        "timestamp": "1776938408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "02167680-ed6f-41d5-893d-7f03b10c3eda",
        "value": "212.56.35.114",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:08+00:00",
        "timestamp": "1776938408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1a6dbe77-3f91-48ae-8ea6-66bb96286cd5",
        "value": "217.216.48.217",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:08+00:00",
        "timestamp": "1776938408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d67a5327-343c-4755-bebc-01a120933260",
        "value": "217.216.50.141",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:09+00:00",
        "timestamp": "1776938409",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3e836e2e-e495-4865-8cb7-8c4acf2d1b20",
        "value": "217.216.65.48",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:09+00:00",
        "timestamp": "1776938409",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5201fa0a-1e60-4c3a-aad7-80c1af7979b2",
        "value": "217.216.90.15",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:09+00:00",
        "timestamp": "1776938409",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e5c9a9d5-4981-4983-be53-0557f2feb009",
        "value": "217.216.90.16",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:09+00:00",
        "timestamp": "1776938409",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8e1783ba-149d-45e3-aefc-abb73a1aa9cc",
        "value": "217.216.91.165",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:09+00:00",
        "timestamp": "1776938409",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "32400f5a-00f3-49b2-9a66-988bf848420a",
        "value": "217.216.92.195",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:09+00:00",
        "timestamp": "1776938410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e06b5196-9f05-433e-a969-3527e4de778d",
        "value": "217.77.1.65",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:10+00:00",
        "timestamp": "1776938410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0f5c74cb-edb9-4ee4-b7cd-5025f14691b0",
        "value": "62.146.173.226",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:10+00:00",
        "timestamp": "1776938410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "455ff9bc-32eb-48d6-8d74-07795afd29a9",
        "value": "62.146.173.227",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:10+00:00",
        "timestamp": "1776938410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "731d3db6-2681-4a15-8c6d-79938aa3a385",
        "value": "62.146.174.39",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:10+00:00",
        "timestamp": "1776938410",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d807918e-a2c3-4636-ab9b-ee8040bc7f88",
        "value": "66.94.117.214",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:10+00:00",
        "timestamp": "1776938411",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "095e4628-3061-483a-ac68-9777863d3f23",
        "value": "66.94.98.39",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:11+00:00",
        "timestamp": "1776938411",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bb8f0dce-f54a-4253-bf13-268e0717c8a8",
        "value": "82.197.64.164",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:11+00:00",
        "timestamp": "1776938411",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7db83c53-9a14-42aa-a512-cd30d6cdd45c",
        "value": "82.197.64.204",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:11+00:00",
        "timestamp": "1776938411",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6d62163b-93fe-464b-ba78-ece6e0cd9f85",
        "value": "82.39.109.147",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:11+00:00",
        "timestamp": "1776938411",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "50b32dd5-2dd0-412b-af69-b2c38b47d697",
        "value": "82.39.109.150",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:11+00:00",
        "timestamp": "1776938412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e99c1855-3af0-48a7-a981-59a15f4bd3a5",
        "value": "82.39.109.63",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:12+00:00",
        "timestamp": "1776938412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4394b159-1feb-4017-8c5b-2fc298197622",
        "value": "86.48.23.204",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:12+00:00",
        "timestamp": "1776938412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b817ec77-085e-46cb-b62b-f0bff70aaf77",
        "value": "86.48.23.214",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:12+00:00",
        "timestamp": "1776938412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "750c2713-b30e-4f84-aa6d-12a49bbb2fe2",
        "value": "86.48.24.211",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:12+00:00",
        "timestamp": "1776938412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "99a13f39-ca95-400c-8f8a-0c92fca9adf7",
        "value": "86.48.29.68",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "vacbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:12+00:00",
        "timestamp": "1776938412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3c6455c4-4fbd-41e0-a2a5-ed8c2752dc67",
        "value": "94.72.120.162",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:12+00:00",
        "timestamp": "1776938413",
        "to_ids": false,
        "type": "url",
        "uuid": "5f242367-1c7b-43db-9e15-420c838b9f90",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6c914763795e42bef503daf7ee7c8c276502d1f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:13+00:00",
        "timestamp": "1776938413",
        "to_ids": false,
        "type": "url",
        "uuid": "6956d87c-2794-4bb8-b073-f1dbd009edf5",
        "value": "https://x.com/Thisism23567356/status/2047237888799092781",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:13+00:00",
        "timestamp": "1776938413",
        "to_ids": false,
        "type": "url",
        "uuid": "3b5b54a3-3659-4c82-bb47-04ccb2be6354",
        "value": "https://www.virustotal.com/gui/file/ae3348414926ec22db313ccd61b0d78c819325b3c6f364903d88da5404a05ac4/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:13+00:00",
        "timestamp": "1776938413",
        "to_ids": false,
        "type": "url",
        "uuid": "a9e87eb4-775f-4e31-9499-44be40d6dc37",
        "value": "https://www.virustotal.com/gui/file/d375ad74e3f3994f919a68f97d082f796a8dc426083423141d40d5f095cede09/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:13+00:00",
        "timestamp": "1776938413",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "076d206c-84ac-420e-b47a-a352da99e89e",
        "value": "38.60.235.109",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:13+00:00",
        "timestamp": "1776938414",
        "to_ids": true,
        "type": "domain",
        "uuid": "18dda359-9293-42d4-adcb-6f016f56f7f2",
        "value": "driveattachment-mofa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:14+00:00",
        "timestamp": "1776938414",
        "to_ids": false,
        "type": "url",
        "uuid": "3e555d62-3a72-4961-8fe0-9e42d70a6352",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/06307d1ee19b0777cefb9936c182978358249332",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:14+00:00",
        "timestamp": "1776938414",
        "to_ids": true,
        "type": "domain",
        "uuid": "b38b4a0b-9ce3-4d67-af48-10f60bf98e3b",
        "value": "paksecurity.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:14+00:00",
        "timestamp": "1776938414",
        "to_ids": false,
        "type": "url",
        "uuid": "e1843890-5775-40d9-bde9-e9e08a5dd0d4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/934b49ccd9f3141f5eb8ef593eaa61cbf8bb81d3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:14+00:00",
        "timestamp": "1776938414",
        "to_ids": false,
        "type": "url",
        "uuid": "54739c9a-9690-44ef-89a6-da019bf45288",
        "value": "https://x.com/malwrhunterteam/status/2047237436065894594",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:14+00:00",
        "timestamp": "1776938415",
        "to_ids": false,
        "type": "url",
        "uuid": "0416c1ab-6a28-4b5a-958c-7765d4691179",
        "value": "https://www.virustotal.com/gui/file/9b2637b8fefeedf8dca8a0ace491de05b6d937ea7463b48562cd1a0f25abb9f5/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:15+00:00",
        "timestamp": "1776938415",
        "to_ids": false,
        "type": "url",
        "uuid": "187f626a-9ce0-42f1-bb05-9e2f12e773f5",
        "value": "https://www.virustotal.com/gui/file/9d7e12eae6b593e582d8b2c3af3154a989977309dcffc7a85aedf0e047d4ca0b/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T10:00:15+00:00",
        "timestamp": "1776938415",
        "to_ids": true,
        "type": "domain",
        "uuid": "d10b4cfc-1794-4186-9e58-ae58ec419b64",
        "value": "techoption.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:03+00:00",
        "timestamp": "1776945604",
        "to_ids": false,
        "type": "url",
        "uuid": "ee677673-c3bb-41e7-8209-68ae2840ac59",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b6613a374d27125a83b398d974c7fc3c0d7cb0d3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:04+00:00",
        "timestamp": "1776945605",
        "to_ids": false,
        "type": "url",
        "uuid": "30c35ecd-da70-4080-a94c-6298b2d71d3a",
        "value": "https://x.com/smica83/status/2047282842942521762",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:05+00:00",
        "timestamp": "1776945605",
        "to_ids": false,
        "type": "url",
        "uuid": "c7779e5b-5d09-44ae-a414-d8930ee25b09",
        "value": "https://www.virustotal.com/gui/file/2b3127a327318b685677a2d8254bd3d987034627d0e8c0afe1aa05aca6eec643/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:05+00:00",
        "timestamp": "1776945606",
        "to_ids": false,
        "type": "url",
        "uuid": "a5f7abe4-64d5-4a69-9e7c-fa78381adf10",
        "value": "https://www.virustotal.com/gui/file/51c0af52be0b9599dc6b7351a4c9bc21a9a4c2a936c1330ec059c7666a75ed73/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:06+00:00",
        "timestamp": "1776945606",
        "to_ids": false,
        "type": "url",
        "uuid": "4c481af2-3e68-40a5-9c49-0856542dda45",
        "value": "https://www.virustotal.com/gui/file/f41104fbec4506499f3b3b79780a2a605eff6c3e259fc506b2799fc7077e92b1/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "gh0strat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:06+00:00",
        "timestamp": "1776945606",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4532c542-c0ab-449f-adc0-971765fc2094",
        "value": "154.81.37.170",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:06+00:00",
        "timestamp": "1776945606",
        "to_ids": false,
        "type": "url",
        "uuid": "b438941d-e013-4163-909e-348e4d91632d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7018509bfd103e86c684833a2d57c8584ac460f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:06+00:00",
        "timestamp": "1776945607",
        "to_ids": false,
        "type": "url",
        "uuid": "9b66a726-9244-45f3-a2b2-0f7628be0c80",
        "value": "https://x.com/skocherhan/status/2047021479523496153",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:07+00:00",
        "timestamp": "1776945607",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9d78f0a-a08f-4d0f-b35e-428eb977f65c",
        "value": "accstore.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:07+00:00",
        "timestamp": "1776945607",
        "to_ids": true,
        "type": "domain",
        "uuid": "593d3e5e-b30d-43a6-a886-9204f77f307e",
        "value": "alertkr.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:07+00:00",
        "timestamp": "1776945607",
        "to_ids": true,
        "type": "domain",
        "uuid": "df70bf4b-a20d-4b2e-a25a-2bf61a3a9715",
        "value": "almsalert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:07+00:00",
        "timestamp": "1776945607",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4f97b05-6eaa-43b3-adef-00f6ed7584f6",
        "value": "asntml.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:07+00:00",
        "timestamp": "1776945608",
        "to_ids": true,
        "type": "domain",
        "uuid": "30dd490c-b105-48c8-9527-732d4ef76989",
        "value": "bigdeal.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:08+00:00",
        "timestamp": "1776945608",
        "to_ids": true,
        "type": "domain",
        "uuid": "9232e4b0-cbcf-40a8-a784-5b48c53dcc7f",
        "value": "govalert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:08+00:00",
        "timestamp": "1776945608",
        "to_ids": true,
        "type": "domain",
        "uuid": "e45b35f8-4be8-4236-97ae-02ee681c608a",
        "value": "hldsl.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:08+00:00",
        "timestamp": "1776945608",
        "to_ids": true,
        "type": "domain",
        "uuid": "80cdc341-74d3-458e-bdba-86c9145e35af",
        "value": "htax-alert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:08+00:00",
        "timestamp": "1776945608",
        "to_ids": true,
        "type": "domain",
        "uuid": "11e6c3ae-3e43-4eb7-af0c-88f8abeddc69",
        "value": "invoicedoc-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:08+00:00",
        "timestamp": "1776945608",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddea46ff-e61f-411f-b1b7-b26d79b146e4",
        "value": "ips-authcheck.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:08+00:00",
        "timestamp": "1776945609",
        "to_ids": true,
        "type": "domain",
        "uuid": "c00147db-2766-4a4f-8fb7-c8121386e8ed",
        "value": "ips-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:09+00:00",
        "timestamp": "1776945609",
        "to_ids": true,
        "type": "domain",
        "uuid": "81ef1107-1344-4d3c-95b0-537c3f6bc73d",
        "value": "ips-ecorp.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:09+00:00",
        "timestamp": "1776945609",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdd635b9-353c-4b99-b43d-f52e1edf6566",
        "value": "ips-edocdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:09+00:00",
        "timestamp": "1776945609",
        "to_ids": true,
        "type": "domain",
        "uuid": "37657569-37cc-4ad3-a50b-318137f79924",
        "value": "ips-helper.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:09+00:00",
        "timestamp": "1776945609",
        "to_ids": true,
        "type": "domain",
        "uuid": "520a5137-a93a-4fb4-9df0-b46fc04c3b06",
        "value": "ips-helper.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:09+00:00",
        "timestamp": "1776945610",
        "to_ids": true,
        "type": "domain",
        "uuid": "8465c370-8f94-41a8-855b-097dc6a38af8",
        "value": "ips-helpinvoice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:10+00:00",
        "timestamp": "1776945610",
        "to_ids": true,
        "type": "domain",
        "uuid": "d500461c-2f36-45ec-a070-e7678fb20470",
        "value": "ips-invoicestore.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:10+00:00",
        "timestamp": "1776945610",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bfef611-bb7e-47ad-bfb3-690a31405e5d",
        "value": "ips-krgo.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:10+00:00",
        "timestamp": "1776945610",
        "to_ids": true,
        "type": "domain",
        "uuid": "60fe926c-0b6a-443b-b24c-bfe2598a94a0",
        "value": "ips-nidauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:10+00:00",
        "timestamp": "1776945610",
        "to_ids": true,
        "type": "domain",
        "uuid": "60211711-6d23-42e1-aea0-4526c54f186a",
        "value": "ips-nidlg.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:10+00:00",
        "timestamp": "1776945610",
        "to_ids": true,
        "type": "domain",
        "uuid": "58100bb9-72e9-44d9-b564-2663ecca7d32",
        "value": "ips-notice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:11+00:00",
        "timestamp": "1776945611",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb304360-66cf-4095-81b7-32cac9ae4a17",
        "value": "ips-notice.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:11+00:00",
        "timestamp": "1776945611",
        "to_ids": true,
        "type": "domain",
        "uuid": "a627822b-c46e-40cc-a30a-c63031935f99",
        "value": "ips-taxkr.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:11+00:00",
        "timestamp": "1776945611",
        "to_ids": true,
        "type": "domain",
        "uuid": "5065bafe-171b-475b-8bd7-32118de0bda3",
        "value": "ipsdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:15+00:00",
        "timestamp": "1776945615",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7343982-8850-49df-9d30-6e86a4686ade",
        "value": "ipsdeliver.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:15+00:00",
        "timestamp": "1776945615",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6fdc167-9f4f-40c6-a8a5-21888a179c29",
        "value": "ipsdoc-auth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:15+00:00",
        "timestamp": "1776945615",
        "to_ids": true,
        "type": "domain",
        "uuid": "0729c9d6-8a1c-4899-9d1d-1f8b0fe36cf6",
        "value": "ipsntcorp.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:15+00:00",
        "timestamp": "1776945615",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b2ba6d8-901d-4f15-98d0-41b3bde7b206",
        "value": "lgtax.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:15+00:00",
        "timestamp": "1776945616",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b7271d3-01de-45e6-99cc-e8430a01d6ac",
        "value": "mlsqs.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:16+00:00",
        "timestamp": "1776945616",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bce3a7f-b6a4-4be3-bbae-accd02489743",
        "value": "msapw.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:16+00:00",
        "timestamp": "1776945616",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cb1d4dc-26be-444b-bcd9-97f6b9c30db0",
        "value": "n-cloud.asntml.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:16+00:00",
        "timestamp": "1776945616",
        "to_ids": true,
        "type": "domain",
        "uuid": "132b7d9f-8abc-4344-bf18-f5dc2524d09e",
        "value": "n-cloud.invoicedoc-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:16+00:00",
        "timestamp": "1776945616",
        "to_ids": true,
        "type": "domain",
        "uuid": "db2c106d-85c9-4ae2-aedc-ec556d0d6b88",
        "value": "n-cloud.ips-edocdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:16+00:00",
        "timestamp": "1776945617",
        "to_ids": true,
        "type": "domain",
        "uuid": "371e7827-0ab5-4ff0-a4b9-926b86c66fe3",
        "value": "n-cloud.ips-helper.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:17+00:00",
        "timestamp": "1776945617",
        "to_ids": true,
        "type": "domain",
        "uuid": "41715473-f7e0-4ebb-8966-acb9bba5a423",
        "value": "n-cloud.ips-krgo.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:17+00:00",
        "timestamp": "1776945617",
        "to_ids": true,
        "type": "domain",
        "uuid": "f00dae86-f5ad-4b9a-a5e1-2c33a7a1f411",
        "value": "n-cloud.ips-nidlg.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:17+00:00",
        "timestamp": "1776945617",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd028293-301c-4422-98f6-450fa089c9f0",
        "value": "n-cloud.ips-taxkr.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:17+00:00",
        "timestamp": "1776945617",
        "to_ids": true,
        "type": "domain",
        "uuid": "a893350c-cfae-453f-a5b9-4cb594d1eb18",
        "value": "n-cloud.ipsdoc-auth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:17+00:00",
        "timestamp": "1776945618",
        "to_ids": true,
        "type": "domain",
        "uuid": "98082dcc-2963-414a-86f5-57067f08e3f9",
        "value": "n-cloud.nidinvoice-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:18+00:00",
        "timestamp": "1776945618",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2c813d6-e55e-4700-8587-e9d0e4377235",
        "value": "n-cloud.noticeips-nid.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:18+00:00",
        "timestamp": "1776945618",
        "to_ids": true,
        "type": "domain",
        "uuid": "24e83be4-5b3a-4fab-9d3b-073255cbf089",
        "value": "n-cloud.noticekr-ips.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:18+00:00",
        "timestamp": "1776945618",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb897c37-6551-4f69-afae-2a1e1df590ca",
        "value": "n-cloud.nts-authdoc.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:18+00:00",
        "timestamp": "1776945618",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ee2083e-5513-43f3-b979-3447a6b55dd4",
        "value": "n-cloud.reloguser2.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:18+00:00",
        "timestamp": "1776945618",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a8dc054-b3f5-4955-959a-87416abbfaff",
        "value": "n-cloud.tax-nav.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:18+00:00",
        "timestamp": "1776945619",
        "to_ids": true,
        "type": "domain",
        "uuid": "f84b6d88-69ba-4f55-93ea-fa2aeb3a876d",
        "value": "n-corp.accstore.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:19+00:00",
        "timestamp": "1776945619",
        "to_ids": true,
        "type": "domain",
        "uuid": "6495d35d-8204-4ceb-9fad-570730c9167c",
        "value": "n-corp.alertkr.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:19+00:00",
        "timestamp": "1776945619",
        "to_ids": true,
        "type": "domain",
        "uuid": "f039e3a1-04e7-4a8c-9aef-d382522e7459",
        "value": "n-corp.invoicedoc-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:19+00:00",
        "timestamp": "1776945619",
        "to_ids": true,
        "type": "domain",
        "uuid": "1adf50fe-24d9-4988-bfd1-9ecae8bd5890",
        "value": "n-corp.ips-authcheck.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:19+00:00",
        "timestamp": "1776945620",
        "to_ids": true,
        "type": "domain",
        "uuid": "04d4dee9-dffb-4f49-be82-095f68619c71",
        "value": "n-corp.ips-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:20+00:00",
        "timestamp": "1776945620",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa73a577-c719-4c86-84e2-be5632753e1f",
        "value": "n-corp.ips-edocdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:20+00:00",
        "timestamp": "1776945620",
        "to_ids": true,
        "type": "domain",
        "uuid": "43037947-c34f-489b-bafc-a2650e680d88",
        "value": "n-corp.ips-helper.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:20+00:00",
        "timestamp": "1776945620",
        "to_ids": true,
        "type": "domain",
        "uuid": "748ac9a7-b054-40ad-927d-070cfe83ac9e",
        "value": "n-corp.ips-helpinvoice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:20+00:00",
        "timestamp": "1776945620",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7672714-f286-49ec-9283-540b27866578",
        "value": "n-corp.ips-nidauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:20+00:00",
        "timestamp": "1776945620",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bc5f4e5-97be-48b3-b765-cba8095cb3c2",
        "value": "n-corp.ips-nidlg.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:21+00:00",
        "timestamp": "1776945621",
        "to_ids": true,
        "type": "domain",
        "uuid": "3790a1ca-05e3-4af1-b1d9-7adc388a805a",
        "value": "n-corp.ips-notice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:21+00:00",
        "timestamp": "1776945621",
        "to_ids": true,
        "type": "domain",
        "uuid": "6706fce0-11f7-4020-a79a-33d0dce5b2ec",
        "value": "n-corp.ips-notice.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:21+00:00",
        "timestamp": "1776945621",
        "to_ids": true,
        "type": "domain",
        "uuid": "eeca332d-7b20-49b7-8eca-9d2235bd55a9",
        "value": "n-corp.ips-taxkr.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:21+00:00",
        "timestamp": "1776945621",
        "to_ids": true,
        "type": "domain",
        "uuid": "d30650c6-a54c-409e-a8d2-458cfbd221ca",
        "value": "n-corp.ipsdoc-auth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:21+00:00",
        "timestamp": "1776945621",
        "to_ids": true,
        "type": "domain",
        "uuid": "d444ed3c-08bb-4ac2-9ffa-8383f7ff8e4d",
        "value": "n-corp.ipsmkt.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:21+00:00",
        "timestamp": "1776945622",
        "to_ids": true,
        "type": "domain",
        "uuid": "539a9f0f-c296-4155-8e5e-829d8cb28ddf",
        "value": "n-corp.mvtsl.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:22+00:00",
        "timestamp": "1776945622",
        "to_ids": true,
        "type": "domain",
        "uuid": "d47af959-cf74-463c-ac91-7dca6058aa03",
        "value": "n-corp.nidinvoice-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:22+00:00",
        "timestamp": "1776945622",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c1c9fa5-ff57-4e2d-a668-3c8142bdc5aa",
        "value": "n-corp.noticeips-nid.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:22+00:00",
        "timestamp": "1776945622",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf323723-b3c0-4a03-9169-460955e8782a",
        "value": "n-corp.noticekr-ips.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:22+00:00",
        "timestamp": "1776945622",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6160bfa-405b-4b0b-b49e-4d9c790c1217",
        "value": "n-corp.nts-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:23+00:00",
        "timestamp": "1776945623",
        "to_ids": true,
        "type": "domain",
        "uuid": "78c9783c-15d7-4a6a-a9fc-c7fc02bac9b2",
        "value": "n-corp.reloguser2.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:23+00:00",
        "timestamp": "1776945623",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1201cf6-95dc-451e-9004-eac85027eb92",
        "value": "n-corp.tax-sdoc.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:23+00:00",
        "timestamp": "1776945623",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d0c6f6d-9741-4c42-82d4-f6cb2d14f961",
        "value": "n-store.invoicedoc-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:23+00:00",
        "timestamp": "1776945623",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d070774-f332-480d-bca8-84fa4d991e5c",
        "value": "n-store.ips-authcheck.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:23+00:00",
        "timestamp": "1776945623",
        "to_ids": true,
        "type": "domain",
        "uuid": "45551450-16b0-406c-aa72-71bd65e7e812",
        "value": "n-store.ips-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:23+00:00",
        "timestamp": "1776945624",
        "to_ids": true,
        "type": "domain",
        "uuid": "97094691-f71a-45d6-8799-2fde84741977",
        "value": "n-store.ips-edocdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:24+00:00",
        "timestamp": "1776945624",
        "to_ids": true,
        "type": "domain",
        "uuid": "96dbeacd-b33c-49d2-ae0b-edb17d4cd9a9",
        "value": "n-store.ips-helper.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:24+00:00",
        "timestamp": "1776945624",
        "to_ids": true,
        "type": "domain",
        "uuid": "56d9ff14-0ae7-4849-8fa8-0b907407fca9",
        "value": "n-store.ips-invoicestore.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:24+00:00",
        "timestamp": "1776945624",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c8fb5ec-ceb2-4df4-980f-7969b5c981bf",
        "value": "n-store.ips-nidauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:24+00:00",
        "timestamp": "1776945624",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d8c9216-02a5-4108-8696-3ac6ea81b2f6",
        "value": "n-store.ips-taxkr.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:24+00:00",
        "timestamp": "1776945625",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbe0d889-6936-4399-a000-67a299e3258f",
        "value": "n-store.ipsdoc-auth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:25+00:00",
        "timestamp": "1776945625",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7476144-93d9-4d75-b7bb-5dff8107facf",
        "value": "n-store.ipslogin.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:25+00:00",
        "timestamp": "1776945625",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0dcaa41-7c18-4d88-8b01-2abe4e3da3cb",
        "value": "n-store.lgtax.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:25+00:00",
        "timestamp": "1776945625",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6c84cf1-8f77-46da-8528-207b28d756f4",
        "value": "n-store.nidinvoice-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:25+00:00",
        "timestamp": "1776945625",
        "to_ids": true,
        "type": "domain",
        "uuid": "3edd85be-6118-4953-8a58-ef2e3a0e89fa",
        "value": "n-store.noticekr-ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:25+00:00",
        "timestamp": "1776945626",
        "to_ids": true,
        "type": "domain",
        "uuid": "74623440-9d9b-4cc5-8b26-30f401898d62",
        "value": "n-store.nts-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:26+00:00",
        "timestamp": "1776945626",
        "to_ids": true,
        "type": "domain",
        "uuid": "d498467d-e639-4392-bc70-f21afe06cd89",
        "value": "n-store.reloguser2.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:26+00:00",
        "timestamp": "1776945626",
        "to_ids": true,
        "type": "domain",
        "uuid": "3081928a-93b7-49f0-a0e9-e8f9fcc42353",
        "value": "n-store.store-ipscorp.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:26+00:00",
        "timestamp": "1776945626",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2d1ab73-3a7c-4a16-88ee-8b087bcbfd43",
        "value": "nid-user.asntml.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:26+00:00",
        "timestamp": "1776945626",
        "to_ids": true,
        "type": "domain",
        "uuid": "0848ccf9-e2f5-4e59-ab79-46123a3cb92e",
        "value": "nid-user.govalert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:26+00:00",
        "timestamp": "1776945627",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2caed2d-bb83-491b-ace6-ce7d3cacb743",
        "value": "nid-user.invoicedoc-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:27+00:00",
        "timestamp": "1776945627",
        "to_ids": true,
        "type": "domain",
        "uuid": "b69434a1-7c27-4739-bf92-e8cd2ddab070",
        "value": "nid-user.ips-authcheck.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:27+00:00",
        "timestamp": "1776945627",
        "to_ids": true,
        "type": "domain",
        "uuid": "b502d8a4-0c0b-4611-a815-59c70aae6dd3",
        "value": "nid-user.ips-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:27+00:00",
        "timestamp": "1776945627",
        "to_ids": true,
        "type": "domain",
        "uuid": "d783f23b-763a-421a-a6f2-62a6272fab6b",
        "value": "nid-user.ips-edocdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:27+00:00",
        "timestamp": "1776945627",
        "to_ids": true,
        "type": "domain",
        "uuid": "74aab0d8-6e52-4e15-b56f-9d2cd47764ab",
        "value": "nid-user.ips-helper.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:27+00:00",
        "timestamp": "1776945627",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2975f64-16f7-4d78-a180-062c2545f39e",
        "value": "nid-user.ips-helpinvoice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:27+00:00",
        "timestamp": "1776945628",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed879481-2530-4d6a-8c46-0571025f9a80",
        "value": "nid-user.ips-nidauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:28+00:00",
        "timestamp": "1776945628",
        "to_ids": true,
        "type": "domain",
        "uuid": "7eab58f9-c057-4035-9bfa-0431156c20d7",
        "value": "nid-user.ips-nidlogin.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:28+00:00",
        "timestamp": "1776945628",
        "to_ids": true,
        "type": "domain",
        "uuid": "c20a5a5c-de88-471a-9c60-65b3adfaee78",
        "value": "nid-user.ips-notice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:28+00:00",
        "timestamp": "1776945628",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ca1e55b-5ad2-4f62-90e2-46f6937779fd",
        "value": "nid-user.ips-taxkr.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:28+00:00",
        "timestamp": "1776945628",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f2d1185-bb9e-41c1-8d07-f4b159c3a97f",
        "value": "nid-user.ipsdeliver.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:29+00:00",
        "timestamp": "1776945629",
        "to_ids": true,
        "type": "domain",
        "uuid": "e19731c8-933d-4587-9cf0-2362c50a64e8",
        "value": "nid-user.ipsdoc-auth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:29+00:00",
        "timestamp": "1776945629",
        "to_ids": true,
        "type": "domain",
        "uuid": "35ca8aa8-2e9a-4b06-a4a2-acd889a5761f",
        "value": "nid-user.ipsgoalert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:29+00:00",
        "timestamp": "1776945629",
        "to_ids": true,
        "type": "domain",
        "uuid": "22b5016e-312d-4e41-a513-3800aabe1430",
        "value": "nid-user.ipsncorp.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:29+00:00",
        "timestamp": "1776945629",
        "to_ids": true,
        "type": "domain",
        "uuid": "97fde7b6-5c19-4a47-9ee7-100e40e2a9bb",
        "value": "nid-user.nidinvoice-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:29+00:00",
        "timestamp": "1776945629",
        "to_ids": true,
        "type": "domain",
        "uuid": "c80bd419-d9d0-437f-9760-f3cc6818cb8c",
        "value": "nid-user.noticekr-ips.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:29+00:00",
        "timestamp": "1776945630",
        "to_ids": true,
        "type": "domain",
        "uuid": "888195c0-59f4-499d-9627-90d460fc73fd",
        "value": "nid-user.nts-authdoc.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:30+00:00",
        "timestamp": "1776945630",
        "to_ids": true,
        "type": "domain",
        "uuid": "a367a1b1-5cae-4331-bec4-2383f962f83e",
        "value": "nid-user.reloguser2.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:30+00:00",
        "timestamp": "1776945630",
        "to_ids": true,
        "type": "domain",
        "uuid": "620b8b83-c1b3-4a97-88bc-887c58ab29da",
        "value": "nid-user.tax-nav.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:30+00:00",
        "timestamp": "1776945630",
        "to_ids": true,
        "type": "domain",
        "uuid": "23217163-8e59-463e-83a6-949ed42a18c7",
        "value": "nid-user.taxalert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:30+00:00",
        "timestamp": "1776945630",
        "to_ids": true,
        "type": "domain",
        "uuid": "af59e30c-2f97-4eba-98ca-7c9dd8e24372",
        "value": "nidinvoice-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:30+00:00",
        "timestamp": "1776945630",
        "to_ids": true,
        "type": "domain",
        "uuid": "345c843e-1f3f-4a44-b36f-bb901c406167",
        "value": "nidinvoice-nts.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:31+00:00",
        "timestamp": "1776945631",
        "to_ids": true,
        "type": "domain",
        "uuid": "0730d62e-9081-4932-ab6c-2fc9f5aac6cb",
        "value": "nidsec-notice.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:31+00:00",
        "timestamp": "1776945631",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c9416b8-843c-48f1-aa75-adb0b3b60120",
        "value": "nmtsv.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:31+00:00",
        "timestamp": "1776945631",
        "to_ids": true,
        "type": "domain",
        "uuid": "034d56a3-f021-4682-b871-d55827aeda2e",
        "value": "noticeips-nid.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:31+00:00",
        "timestamp": "1776945631",
        "to_ids": true,
        "type": "domain",
        "uuid": "9dcb558d-a5dd-43f3-b38b-cb5447d95251",
        "value": "noticekr-ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:31+00:00",
        "timestamp": "1776945631",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3815475-c838-427f-8663-1cf461db2ab4",
        "value": "noticekr-ips.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:31+00:00",
        "timestamp": "1776945632",
        "to_ids": true,
        "type": "domain",
        "uuid": "05ff255d-fb72-4c8c-9253-df40eda16d81",
        "value": "nts-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:32+00:00",
        "timestamp": "1776945632",
        "to_ids": true,
        "type": "domain",
        "uuid": "b57210b8-8c96-400b-b129-1f90de57c083",
        "value": "nts-edocdeliver.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:32+00:00",
        "timestamp": "1776945632",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a207710-bbbb-4bce-b312-f50b0dc2a3b2",
        "value": "nts-govkr.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:32+00:00",
        "timestamp": "1776945632",
        "to_ids": true,
        "type": "domain",
        "uuid": "d02175ce-52bf-4645-970e-bed42dc57d14",
        "value": "ntsgo-auth.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:32+00:00",
        "timestamp": "1776945633",
        "to_ids": true,
        "type": "domain",
        "uuid": "25dad300-791e-4ebf-8070-06a983dc84d9",
        "value": "nuser-login.alertkr.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:33+00:00",
        "timestamp": "1776945633",
        "to_ids": true,
        "type": "domain",
        "uuid": "def8c1d5-8222-4d1e-bcf7-e454b5728771",
        "value": "nuser-login.asntml.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:33+00:00",
        "timestamp": "1776945633",
        "to_ids": true,
        "type": "domain",
        "uuid": "365b451f-e649-4669-a94a-368c03d6bc5c",
        "value": "nuser-login.bigdeal.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:33+00:00",
        "timestamp": "1776945633",
        "to_ids": true,
        "type": "domain",
        "uuid": "60f611b6-008a-484a-8cbc-77f7477fdf3c",
        "value": "nuser-login.invoicedoc-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:33+00:00",
        "timestamp": "1776945633",
        "to_ids": true,
        "type": "domain",
        "uuid": "34f5de62-ef67-44c9-a84e-c1d0ecc50362",
        "value": "nuser-login.ips-checkauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:33+00:00",
        "timestamp": "1776945634",
        "to_ids": true,
        "type": "domain",
        "uuid": "de344815-9c8b-4238-833d-c6d2d30fee19",
        "value": "nuser-login.ips-edocdeliver.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:34+00:00",
        "timestamp": "1776945634",
        "to_ids": true,
        "type": "domain",
        "uuid": "41ad1abc-f625-4f1a-94a4-12c8679543ba",
        "value": "nuser-login.ips-helper.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:34+00:00",
        "timestamp": "1776945634",
        "to_ids": true,
        "type": "domain",
        "uuid": "e323016d-fa31-425f-9b7e-1eddcf0a7351",
        "value": "nuser-login.ips-helper.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:34+00:00",
        "timestamp": "1776945634",
        "to_ids": true,
        "type": "domain",
        "uuid": "26dac9c1-adec-4723-8b1f-30bd405ba602",
        "value": "nuser-login.ips-invoicestore.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:34+00:00",
        "timestamp": "1776945634",
        "to_ids": true,
        "type": "domain",
        "uuid": "fde624bb-e1d0-47ed-b4be-f77b00fca00c",
        "value": "nuser-login.ips-nidauth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:34+00:00",
        "timestamp": "1776945634",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6737bc6-8531-4e6b-a68f-b86639722db3",
        "value": "nuser-login.ips-notice.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:35+00:00",
        "timestamp": "1776945635",
        "to_ids": true,
        "type": "domain",
        "uuid": "84551ca7-8bec-4135-bd19-28e35bdc4229",
        "value": "nuser-login.ipsdoc-auth.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:35+00:00",
        "timestamp": "1776945635",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b926564-c196-4394-b954-35f3a46cf47c",
        "value": "nuser-login.nidinvoice-ips.mydns.vc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:35+00:00",
        "timestamp": "1776945635",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7c38d68-df72-4500-b7b9-4d138e80575d",
        "value": "nuser-login.noticekr-ips.mydns.bz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:35+00:00",
        "timestamp": "1776945635",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2d22739-b691-4a9a-bcf5-25191761cf63",
        "value": "nuser-login.nts-edocdeliver.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:35+00:00",
        "timestamp": "1776945635",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dd226a6-2055-4595-80cb-985d4d81393d",
        "value": "nuser-login.nversf.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:35+00:00",
        "timestamp": "1776945636",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa24d458-7f63-4d71-89e6-7d32fcf6f9bb",
        "value": "nuser-login.tax-sdoc.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:36+00:00",
        "timestamp": "1776945636",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ea1b4ac-7376-4b17-83d8-d1b143f918c8",
        "value": "nwlogn.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:36+00:00",
        "timestamp": "1776945636",
        "to_ids": true,
        "type": "domain",
        "uuid": "347838d5-255f-4727-81f4-087f2aaff9de",
        "value": "reloguser2.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:36+00:00",
        "timestamp": "1776945636",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a011c8a-57e6-4563-b677-cb667ad3ebd8",
        "value": "store-ipscorp.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:36+00:00",
        "timestamp": "1776945636",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e1c3ba4-0a5b-4f98-9e33-5589f574b795",
        "value": "tax-sdoc.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:37+00:00",
        "timestamp": "1776945637",
        "to_ids": true,
        "type": "domain",
        "uuid": "05e5d2f7-67e5-4391-8123-3907680afdd8",
        "value": "tax-store.mydns.jp",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:37+00:00",
        "timestamp": "1776945637",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7168724-7249-4d04-ac5a-662746c9b84c",
        "value": "taxalert.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T12:00:37+00:00",
        "timestamp": "1776945637",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe269df6-c1fb-4ed2-b7bf-633280537961",
        "value": "vpn280621771.softether.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:03+00:00",
        "timestamp": "1776949204",
        "to_ids": false,
        "type": "url",
        "uuid": "68471cc0-9543-4e6c-8d67-2e077f169676",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/dc12a18c2da2dce59d265b480791ac721a29d55e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:04+00:00",
        "timestamp": "1776949205",
        "to_ids": false,
        "type": "url",
        "uuid": "4ee5d255-354a-4643-a37e-c50870ae04b3",
        "value": "https://securityaffairs.com/191135/malware/mirai-botnet-exploits-cve-2025-29635-to-target-legacy-d-link-routers.html",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:05+00:00",
        "timestamp": "1776949206",
        "to_ids": false,
        "type": "url",
        "uuid": "a46b1b67-45f3-41bd-b71a-445367bd7e84",
        "value": "https://www.virustotal.com/gui/file/0ab70183d671b0a054def272c335ee93306e11573e346c59419656f54726aaa1/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:06+00:00",
        "timestamp": "1776949206",
        "to_ids": false,
        "type": "url",
        "uuid": "a1e20cd5-e944-42a4-a730-23549e498729",
        "value": "https://www.virustotal.com/gui/file/0ea71e9bef9eaa4601b2b8738a036492fcf4e7456883def0350bf084dca4392b/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:06+00:00",
        "timestamp": "1776949206",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b776bf66-e8e5-4860-ad16-1df7d591b816",
        "value": "64.89.161.130",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:06+00:00",
        "timestamp": "1776949207",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "75be668b-fb35-41d8-aa9f-0f8e9359d61d",
        "value": "78.142.228.144",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_notnullosx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:07+00:00",
        "timestamp": "1776949207",
        "to_ids": false,
        "type": "url",
        "uuid": "d541f489-f987-4ad6-aeb6-0d3d06d3aa24",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6bc9e96c839d4b02bb5c77e3653d632db4277d9a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_notnullosx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:07+00:00",
        "timestamp": "1776949207",
        "to_ids": false,
        "type": "url",
        "uuid": "9d276cf3-4647-4d3d-89e0-94e708810165",
        "value": "https://moonlock.com/notorious-hacker-returns-notnullosx-stealer",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_notnullosx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:07+00:00",
        "timestamp": "1776949207",
        "to_ids": true,
        "type": "domain",
        "uuid": "c81c6a53-1625-45e0-9899-4941925ef665",
        "value": "mactest-6b2ab-default-rtdb.firebaseio.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_notnullosx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:07+00:00",
        "timestamp": "1776949207",
        "to_ids": true,
        "type": "domain",
        "uuid": "c17722e2-278d-4630-b165-f3a4fb9ede79",
        "value": "wallpapermacos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_notnullosx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:08+00:00",
        "timestamp": "1776949208",
        "to_ids": true,
        "type": "domain",
        "uuid": "09333374-5a7c-4052-a5c9-9a6420a1cb15",
        "value": "wallspaceapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_notnullosx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:08+00:00",
        "timestamp": "1776949208",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f2942de-b724-48d4-9c18-e0c31068d457",
        "value": "wallspacemacos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:08+00:00",
        "timestamp": "1776949208",
        "to_ids": false,
        "type": "url",
        "uuid": "2ba19352-1244-4f93-b861-0d47a8fe63e8",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ab2c6e6c59988972b6fcbcb95a90b7274b15aa23",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:08+00:00",
        "timestamp": "1776949208",
        "to_ids": false,
        "type": "url",
        "uuid": "4ff98f17-7336-4ec5-a309-01c65fa8c094",
        "value": "https://www.trendmicro.com/en_us/research/26/d/void-dokkaebi-uses-fake-job-interview-lure-to-spread-malware-via-code-repositories.html",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:08+00:00",
        "timestamp": "1776949208",
        "to_ids": false,
        "type": "url",
        "uuid": "07a194fb-d1a3-4f09-b707-b4664bc3c5f0",
        "value": "https://www.trendmicro.com/content/dam/trendmicro/global/en/research/26/d/void-dokkaebi/Void-Dokkaebi-Uses-Fake-Job-Interview-Lure-to-Spread-Malware-via-Code-Repositories-IoCs.txt",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:08+00:00",
        "timestamp": "1776949208",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "67d379e8-58e3-4003-b669-903eefb7b8c7",
        "value": "154.91.0.196",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949209",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "cb0be233-fe94-4778-8de2-12917291211d",
        "value": "198.105.127.210",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949209",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "dab6da00-3a0c-4ffe-9211-204ca80ec738",
        "value": "83.168.68.219",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949209",
        "to_ids": true,
        "type": "domain",
        "uuid": "da9e8b79-6782-41f1-8301-b78d16e91465",
        "value": "cgbrandh.short.gy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949209",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0d6afdd-59f4-42f1-8221-927b8567eaad",
        "value": "chvsvr.short.gy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949209",
        "to_ids": true,
        "type": "domain",
        "uuid": "feb838f2-4942-49df-9b95-b4225ef117e3",
        "value": "data-kappa.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949209",
        "to_ids": true,
        "type": "domain",
        "uuid": "0699ed19-21c1-45a6-8863-10be2ca0f942",
        "value": "davhub88.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:09+00:00",
        "timestamp": "1776949210",
        "to_ids": true,
        "type": "domain",
        "uuid": "460b973d-53e3-45a7-a046-9301027019f3",
        "value": "default-configuration-sandy.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:10+00:00",
        "timestamp": "1776949210",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7b6c280-ebb8-44c9-9f49-75d5b7b8751d",
        "value": "ext-checkedin.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:10+00:00",
        "timestamp": "1776949210",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bea56a9-66ce-43f4-bb62-2972700dd254",
        "value": "gurucooldown.short.gy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:10+00:00",
        "timestamp": "1776949210",
        "to_ids": true,
        "type": "domain",
        "uuid": "9177eeae-22d4-461c-9cef-65032e49621f",
        "value": "lackservice.short.gy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:10+00:00",
        "timestamp": "1776949210",
        "to_ids": true,
        "type": "domain",
        "uuid": "47a39e01-88f2-4c26-9919-18aa9051b267",
        "value": "pesncv.short.gy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:10+00:00",
        "timestamp": "1776949210",
        "to_ids": true,
        "type": "domain",
        "uuid": "88544b52-938b-4fa2-b6b3-7765004143a5",
        "value": "tailwind-version-4.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:10+00:00",
        "timestamp": "1776949211",
        "to_ids": true,
        "type": "domain",
        "uuid": "462d37ed-61fe-4a6e-81ed-6833dd1177a5",
        "value": "vscode-ext-git.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:11+00:00",
        "timestamp": "1776949211",
        "to_ids": true,
        "type": "domain",
        "uuid": "13cbf369-7c54-4ac8-9dbe-d16b6ddb3e96",
        "value": "vscode-extension-260120.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:11+00:00",
        "timestamp": "1776949211",
        "to_ids": true,
        "type": "domain",
        "uuid": "6222c546-69c0-4798-80b0-d7c794c8ff4e",
        "value": "vscode-extensions-bootstrap.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:11+00:00",
        "timestamp": "1776949211",
        "to_ids": true,
        "type": "domain",
        "uuid": "4295cca8-9f40-40d0-88ba-cf86f52ec7df",
        "value": "vscode-production-setting.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:11+00:00",
        "timestamp": "1776949211",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cb5d8b6-3e37-4e00-b719-dd4a46e26eb3",
        "value": "vscode-settings-config-md.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T13:00:11+00:00",
        "timestamp": "1776949211",
        "to_ids": true,
        "type": "domain",
        "uuid": "184b70f4-d6e4-4b3c-982c-3d0dff31feae",
        "value": "vscode-toolkit-settings.vercel.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T14:00:03+00:00",
        "timestamp": "1776952804",
        "to_ids": false,
        "type": "url",
        "uuid": "8c55174d-64ac-4ffd-bf7e-5b69d65cc389",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ca2af4ea06f4ff373ed6061616b17d5cbd177ddd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T14:00:04+00:00",
        "timestamp": "1776952804",
        "to_ids": false,
        "type": "url",
        "uuid": "951c43f6-e5fa-4513-8d22-bd4f6f6d801b",
        "value": "https://www.aikido.dev/blog/fast-draft-open-vsx-bloktrooper",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T14:00:04+00:00",
        "timestamp": "1776952805",
        "to_ids": false,
        "type": "url",
        "uuid": "c82a5591-5c42-43d4-8f6a-09057feb6f83",
        "value": "https://expel.com/blog/inside-lazarus-how-north-korea-uses-ai-to-industrialize-attacks-on-developers",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T14:00:05+00:00",
        "timestamp": "1776952805",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4b0beac0-08c3-421f-9355-3ba2d2a10593",
        "value": "195.201.104.53",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:03+00:00",
        "timestamp": "1776956403",
        "to_ids": false,
        "type": "url",
        "uuid": "1474e264-f723-40b3-9719-d327a05fe72b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/94cef917c8d2df354eb67c3281f41c3d87fc6a2c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:03+00:00",
        "timestamp": "1776956403",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a59ab434-08d5-4cae-9b87-53787470c4c4",
        "value": "143.92.56.122",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:03+00:00",
        "timestamp": "1776956403",
        "to_ids": false,
        "type": "url",
        "uuid": "b11aeea7-8a9d-4fbc-a82f-b0e39a3d9178",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5aafb9f69362eb1f7b54bc67e8328ec4318ff98e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:04+00:00",
        "timestamp": "1776956404",
        "to_ids": false,
        "type": "url",
        "uuid": "213bbad3-3a64-4b7c-97dc-2a363e47f74c",
        "value": "https://x.com/rifteyy/status/2047303183085482489",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:04+00:00",
        "timestamp": "1776956404",
        "to_ids": false,
        "type": "url",
        "uuid": "14d11729-f1f2-4c6b-b4d5-862d5ac259d5",
        "value": "https://app.any.run/tasks/aabc0c21-3660-4750-a244-500e205331ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:04+00:00",
        "timestamp": "1776956405",
        "to_ids": true,
        "type": "domain",
        "uuid": "f985fbbc-c38d-4639-a94f-6fc5fad0f210",
        "value": "app-winrar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:05+00:00",
        "timestamp": "1776956405",
        "to_ids": true,
        "type": "domain",
        "uuid": "40f39590-a19e-4d0c-93f9-c94d0926933c",
        "value": "free-winrar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:05+00:00",
        "timestamp": "1776956405",
        "to_ids": true,
        "type": "domain",
        "uuid": "873c3d9e-6693-4d2b-a6f2-c59bb20a1980",
        "value": "lbhk4.tk10.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:05+00:00",
        "timestamp": "1776956405",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4fa07f9-c7ed-4aca-a740-da724483253a",
        "value": "rar-lad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:05+00:00",
        "timestamp": "1776956406",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bb3513d-6dab-4b8b-8ea4-c7fc23ecf549",
        "value": "rar-winrar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:06+00:00",
        "timestamp": "1776956406",
        "to_ids": true,
        "type": "domain",
        "uuid": "b67d03a7-a877-4d6e-8aa3-4a1e2db9348b",
        "value": "softonic-winrar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:06+00:00",
        "timestamp": "1776956406",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a5807cf-b290-4dd8-98da-c0f4145e05fb",
        "value": "tradinglvew.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:06+00:00",
        "timestamp": "1776956406",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d06c4c0-606f-4c08-a5f8-fde4118cab06",
        "value": "wim-rara.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:06+00:00",
        "timestamp": "1776956406",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b6479d1-65e5-4514-844a-a0daef610841",
        "value": "win-rar.blog",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:06+00:00",
        "timestamp": "1776956406",
        "to_ids": true,
        "type": "domain",
        "uuid": "f03311f2-764d-47ae-96fc-25b3f5ee38bf",
        "value": "win-rar.com.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:06+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "77a3a2f9-d42d-4082-b6eb-304b0583c409",
        "value": "win-rarx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "c893d98a-8429-41be-95d2-b2a0ae7be4d8",
        "value": "win-rat.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed68aeaf-aee7-4081-bd51-1792d0bedb88",
        "value": "win-winrar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "068f23dc-8c96-4079-be4a-13c288985333",
        "value": "window-rar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8b84fc9-d2cf-47cd-a06b-27e70d010259",
        "value": "windows-rar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2ac99f8-043d-4f93-98ee-17c85e75f4aa",
        "value": "windows-rar.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956407",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f387df5-96f7-414e-a04f-b80c77b154e2",
        "value": "winrar-64bit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:07+00:00",
        "timestamp": "1776956408",
        "to_ids": true,
        "type": "domain",
        "uuid": "a252b1e0-11e4-431e-a190-60caab6bada3",
        "value": "winrar-hl.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:08+00:00",
        "timestamp": "1776956408",
        "to_ids": true,
        "type": "domain",
        "uuid": "d934169b-d5b7-49b4-999e-d664ab5d1c90",
        "value": "winrar-tw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:08+00:00",
        "timestamp": "1776956408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cc5dd5b-5c46-4358-bebd-5644a475610b",
        "value": "winrar-x64.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:08+00:00",
        "timestamp": "1776956408",
        "to_ids": true,
        "type": "domain",
        "uuid": "23120c61-532f-40b9-89b0-90aaa12cbcf1",
        "value": "winrar-zip.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:08+00:00",
        "timestamp": "1776956408",
        "to_ids": true,
        "type": "domain",
        "uuid": "004e9193-60b0-43be-bcc6-0b0befc57450",
        "value": "winrar.im",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:08+00:00",
        "timestamp": "1776956408",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5b64b75-e99a-4537-b12f-77176bd2597f",
        "value": "winrarbet.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:08+00:00",
        "timestamp": "1776956409",
        "to_ids": true,
        "type": "domain",
        "uuid": "01841e1b-96e5-4e95-bc64-ee34912e6cdc",
        "value": "www-rarlab.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:09+00:00",
        "timestamp": "1776956409",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3560120-b8d2-4f78-9a67-0c7f46ba8513",
        "value": "zip-winrar.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T15:00:09+00:00",
        "timestamp": "1776956409",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f196836-155f-49cd-b655-67cd590cb988",
        "value": "zip-winrar.com.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:02+00:00",
        "timestamp": "1776963603",
        "to_ids": false,
        "type": "url",
        "uuid": "bcf607cf-d4cf-49ea-b3cd-d3d95fcf8089",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/66a8e7a3245ce5b61f35ee9a69a68d130d47e371",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:03+00:00",
        "timestamp": "1776963603",
        "to_ids": false,
        "type": "url",
        "uuid": "d2816b46-4531-4db8-9d5a-f7e7e60d0605",
        "value": "https://www.virustotal.com/gui/ip-address/45.45.217.242/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:03+00:00",
        "timestamp": "1776963603",
        "to_ids": true,
        "type": "domain",
        "uuid": "59f9baa4-b846-4547-a2be-148b3d31e943",
        "value": "apple.driver-hub.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:03+00:00",
        "timestamp": "1776963604",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d1e9e06-89f7-428a-b38a-ec148856277a",
        "value": "apple.drivertune.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:04+00:00",
        "timestamp": "1776963605",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2041600-a401-4b4f-8e4d-07538818fc34",
        "value": "dl.driver-updater.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:05+00:00",
        "timestamp": "1776963605",
        "to_ids": true,
        "type": "domain",
        "uuid": "642c3fb3-49ce-415e-9bce-fe0b7d1197b6",
        "value": "driver-hub.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:05+00:00",
        "timestamp": "1776963605",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a2a7889-b327-4280-a032-6e9b121db761",
        "value": "drivertune.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:05+00:00",
        "timestamp": "1776963605",
        "to_ids": true,
        "type": "domain",
        "uuid": "8935da14-14ca-4a95-9349-a1bf87d0fed3",
        "value": "learn.live.ong",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:05+00:00",
        "timestamp": "1776963605",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4d340c6-3d15-451b-91e3-85d57f7976aa",
        "value": "learn.retesta.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:05+00:00",
        "timestamp": "1776963605",
        "to_ids": true,
        "type": "domain",
        "uuid": "7284a651-9e02-46a0-be4c-d24e7125e4a2",
        "value": "learn.teams.us.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:05+00:00",
        "timestamp": "1776963606",
        "to_ids": true,
        "type": "domain",
        "uuid": "2572ecca-468d-47fa-9ce7-b354c4d9c0f9",
        "value": "linux.drivertune.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:06+00:00",
        "timestamp": "1776963606",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa039a14-83c6-4a0f-8508-dee10f7064d6",
        "value": "live.ong",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:06+00:00",
        "timestamp": "1776963606",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cffe671-9259-4daf-9e48-1b56c337a768",
        "value": "login.retesta.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:06+00:00",
        "timestamp": "1776963606",
        "to_ids": true,
        "type": "domain",
        "uuid": "4624ddd9-075a-43e4-9915-e9d7c5d6d0fc",
        "value": "retesta.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:06+00:00",
        "timestamp": "1776963606",
        "to_ids": true,
        "type": "domain",
        "uuid": "92eca4c9-fe46-4105-ba37-2a72e059134a",
        "value": "teams.live.ong",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:06+00:00",
        "timestamp": "1776963606",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9c00ce1-b327-48e2-84ed-38b022f2fef3",
        "value": "teams.us.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:06+00:00",
        "timestamp": "1776963607",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d72602f-21b2-4ee8-950f-5eac7f66a21e",
        "value": "windows.drivertune.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:07+00:00",
        "timestamp": "1776963607",
        "to_ids": false,
        "type": "url",
        "uuid": "a291bd88-6864-4b67-a69f-29ea58951c21",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/da539425bcf23226a987510a271e6cf207b3bd07",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:07+00:00",
        "timestamp": "1776963607",
        "to_ids": false,
        "type": "url",
        "uuid": "b9eaf031-925f-42f6-8ac7-059701a57707",
        "value": "https://x.com/L0Psec/status/2047337028694450325",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:07+00:00",
        "timestamp": "1776963607",
        "to_ids": false,
        "type": "url",
        "uuid": "6265ec93-af6f-4236-997b-b91111788dc7",
        "value": "https://www.virustotal.com/gui/file/b6cab0b3aa8e56e2427f486c74588d598ae58bb0cbc0eda6939fe171cb0aed17/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:07+00:00",
        "timestamp": "1776963607",
        "to_ids": true,
        "type": "domain",
        "uuid": "88fa8df3-52e1-4de9-8de2-4e2a24958424",
        "value": "driver-updater.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T17:00:07+00:00",
        "timestamp": "1776963607",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f7c9fb5-bb39-4033-9f2f-200ce69af2c0",
        "value": "microsoft.driver-updater.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:03+00:00",
        "timestamp": "1776967204",
        "to_ids": false,
        "type": "url",
        "uuid": "be803849-3680-4e7d-8149-93c8fc99f896",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c75520d8459e1dd88a1b85d0d042ea32451158e4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:04+00:00",
        "timestamp": "1776967205",
        "to_ids": false,
        "type": "url",
        "uuid": "06ee41c4-3ca6-4262-93e8-eef82258e34b",
        "value": "https://cloud.google.com/blog/topics/threat-intelligence/unc6692-social-engineering-custom-malware",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:05+00:00",
        "timestamp": "1776967206",
        "to_ids": true,
        "type": "domain",
        "uuid": "4655f0a4-f556-4922-aa2d-e9be9c2bc181",
        "value": "cloudfront-021.s3.us-west-2.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:06+00:00",
        "timestamp": "1776967206",
        "to_ids": true,
        "type": "domain",
        "uuid": "337953ee-f33c-4020-8726-ae49e2722128",
        "value": "sad4w7h913-b4a57f9c36eb.herokuapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:06+00:00",
        "timestamp": "1776967206",
        "to_ids": true,
        "type": "domain",
        "uuid": "f48b612c-700c-47e0-b9d3-3defc7adfedd",
        "value": "service-page-11369-28315-outlook.s3.us-west-2.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:06+00:00",
        "timestamp": "1776967207",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb028982-68d0-4cb6-805b-c05e7e360180",
        "value": "service-page-18968-2419-outlook.s3.us-west-2.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc6692",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T18:00:07+00:00",
        "timestamp": "1776967207",
        "to_ids": true,
        "type": "domain",
        "uuid": "424af89e-1251-4f6c-a0ba-b0a09445a610",
        "value": "service-page-25144-30466-outlook.s3.us-west-2.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:02+00:00",
        "timestamp": "1776970803",
        "to_ids": false,
        "type": "url",
        "uuid": "ecb8cdc4-d950-42a2-bd74-98cbc588eb38",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3cea37eb63e4e452c1deaaac75a14dc47d9c71f7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:03+00:00",
        "timestamp": "1776970805",
        "to_ids": false,
        "type": "url",
        "uuid": "1e71e651-1275-4de2-bb07-dce022817605",
        "value": "https://x.com/Malwarehunterr/status/2047350707502907621",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:05+00:00",
        "timestamp": "1776970806",
        "to_ids": true,
        "type": "domain",
        "uuid": "b34d3601-d0fc-4057-adc7-5d637c62ee3b",
        "value": "adventure-ham-knew-styles.trycloudflare.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:06+00:00",
        "timestamp": "1776970806",
        "to_ids": true,
        "type": "domain",
        "uuid": "f14881f6-43eb-4619-95a4-986ef5cab08a",
        "value": "authorities-vessel-denver-indie.trycloudflare.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:06+00:00",
        "timestamp": "1776970807",
        "to_ids": true,
        "type": "domain",
        "uuid": "5146cdad-5b10-4f41-bce1-5728a7c6ae57",
        "value": "carroll-anne-mime-realty.trycloudflare.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:07+00:00",
        "timestamp": "1776970807",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a8e8340-dd40-491a-a344-a64b850d27f9",
        "value": "febstatement5248.s3.us-east-1.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:07+00:00",
        "timestamp": "1776970807",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3bf492c-df50-4ff3-b8b5-09e8569b27cd",
        "value": "febstatement777.s3.us-east-1.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:07+00:00",
        "timestamp": "1776970807",
        "to_ids": false,
        "type": "url",
        "uuid": "cbb00ba4-43d4-49e8-971d-098cda912a00",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3a84b9efe25d8c91eb6dc180e7d2fad4cca65980",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:07+00:00",
        "timestamp": "1776970807",
        "to_ids": false,
        "type": "url",
        "uuid": "3f24728c-6fc0-46a1-b70b-ff1a699ebf5b",
        "value": "https://www.virustotal.com/gui/ip-address/163.245.215.46/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:07+00:00",
        "timestamp": "1776970807",
        "to_ids": true,
        "type": "domain",
        "uuid": "14cfcee0-84cc-4bbd-b3bf-2bdf7e4b7465",
        "value": "auth.hrstrotage.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:07+00:00",
        "timestamp": "1776970808",
        "to_ids": true,
        "type": "domain",
        "uuid": "655090c8-4c80-4733-ac85-6ff06ec5c6de",
        "value": "bigfile.navcloudstorage.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:08+00:00",
        "timestamp": "1776970808",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7d232a8-205a-4845-bef2-c963874b9c95",
        "value": "cloudflareproxy.rinet.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:08+00:00",
        "timestamp": "1776970808",
        "to_ids": true,
        "type": "domain",
        "uuid": "44f3ad32-3e70-477d-b775-688f23151320",
        "value": "delfino.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:08+00:00",
        "timestamp": "1776970808",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e925ca5-5a2b-40d8-b775-b37286a282ee",
        "value": "govkorea.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:08+00:00",
        "timestamp": "1776970808",
        "to_ids": true,
        "type": "domain",
        "uuid": "76c844de-87af-4748-9f1a-c8d0ac2c32ec",
        "value": "hrstrotage.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:08+00:00",
        "timestamp": "1776970808",
        "to_ids": true,
        "type": "domain",
        "uuid": "b11642fd-e9f9-47df-a271-3895fc6a45a2",
        "value": "ibizplus.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:08+00:00",
        "timestamp": "1776970809",
        "to_ids": true,
        "type": "domain",
        "uuid": "7281773a-9917-4e87-88f3-02d853fdb0cf",
        "value": "image.fin-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:09+00:00",
        "timestamp": "1776970809",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa438da5-8ddf-4837-b83c-6a24b991478b",
        "value": "ireslution.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:09+00:00",
        "timestamp": "1776970809",
        "to_ids": true,
        "type": "domain",
        "uuid": "a678d339-1c56-4b16-8bbf-aa07154c1310",
        "value": "load.nidonepass.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:09+00:00",
        "timestamp": "1776970809",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b21c69c-71d1-42f1-a507-6ac13f9d4128",
        "value": "navcloudstorage.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:09+00:00",
        "timestamp": "1776970809",
        "to_ids": true,
        "type": "domain",
        "uuid": "7286bd95-11ac-47c0-a940-b8baf1ec309e",
        "value": "navmercorp.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:09+00:00",
        "timestamp": "1776970809",
        "to_ids": true,
        "type": "domain",
        "uuid": "cae523c3-616a-4bf4-8a02-e0f78b81e880",
        "value": "nhls.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:09+00:00",
        "timestamp": "1776970810",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6ee00c6-5e13-47bd-813a-58e07a957312",
        "value": "nid.navmercorp.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:10+00:00",
        "timestamp": "1776970810",
        "to_ids": true,
        "type": "domain",
        "uuid": "708e94d9-3391-4a2c-be2b-5ecaf9a1c3e4",
        "value": "nidonepass.n-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T19:00:10+00:00",
        "timestamp": "1776970810",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8e6062f-6a81-4fa6-8810-21a8dd4867e8",
        "value": "update.delfino.o-r.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_gopherwhisper",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:04+00:00",
        "timestamp": "1776974405",
        "to_ids": false,
        "type": "url",
        "uuid": "fdb9b213-a65b-4e23-b4ce-5dde61287814",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/430858bbb34ad5a6f92903d34337f104e9c6f99e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_gopherwhisper",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:05+00:00",
        "timestamp": "1776974405",
        "to_ids": false,
        "type": "url",
        "uuid": "bfb715bd-3381-48c6-b4a2-49d55695ab30",
        "value": "https://www.welivesecurity.com/en/eset-research/gopherwhisper-burrow-full-malware",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_gopherwhisper",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:05+00:00",
        "timestamp": "1776974405",
        "to_ids": false,
        "type": "url",
        "uuid": "4d4817be-86d7-43bd-80de-873934c2f02e",
        "value": "https://web-assets.esetstatic.com/wls/en/papers/white-papers/gopherwhisper-burrow-full-malware.pdf",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_gopherwhisper",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:05+00:00",
        "timestamp": "1776974406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9f4685bc-1080-4418-918d-6622726c4fb7",
        "value": "43.231.113.50",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:06+00:00",
        "timestamp": "1776974406",
        "to_ids": false,
        "type": "url",
        "uuid": "3781831c-646b-481a-9f68-dbdd290aec79",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fa6c25aeee0050ddcbfb08ee04274c33de97bd06",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:06+00:00",
        "timestamp": "1776974406",
        "to_ids": false,
        "type": "url",
        "uuid": "372c0e57-7efd-4efc-802a-9f96d3bbc971",
        "value": "https://x.com/BlinkzSec/status/2047251938564083899",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:06+00:00",
        "timestamp": "1776974406",
        "to_ids": false,
        "type": "url",
        "uuid": "6fc51ac6-fa8a-454b-8750-9c9dd1e33f88",
        "value": "https://www.virustotal.com/gui/file/ae4c0b90e8abba769c961f0374862ae9114f5a6c7c9ce9e521d845b78234231c/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:06+00:00",
        "timestamp": "1776974406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6470b4af-597d-41fc-b2b5-f52fb63f7527",
        "value": "158.94.210.65",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:07+00:00",
        "timestamp": "1776974407",
        "to_ids": false,
        "type": "url",
        "uuid": "82a836ad-69e3-4876-8454-58f0dec8aa1a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a058baadd4ffc568d75f104e9c8eb4b2777acfdb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:07+00:00",
        "timestamp": "1776974407",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2cbeb45-b6ff-4d20-b045-64c28e56ef10",
        "value": "acuragroup-au.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:07+00:00",
        "timestamp": "1776974407",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4545698-53d5-4c32-99d3-bf9a9a793045",
        "value": "aimc-az.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:08+00:00",
        "timestamp": "1776974408",
        "to_ids": true,
        "type": "domain",
        "uuid": "23794d1e-6cc1-45dc-b128-d9464767b8c3",
        "value": "anbv-bg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:08+00:00",
        "timestamp": "1776974408",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1dab23d-73b4-401b-980e-0b27505d041b",
        "value": "aryesargentina-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:08+00:00",
        "timestamp": "1776974408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f7c0ad7-7340-4675-8a84-90f84eb07da1",
        "value": "autodiscover.johnisagoodboybutheisname.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:08+00:00",
        "timestamp": "1776974408",
        "to_ids": true,
        "type": "domain",
        "uuid": "f73ee433-81e3-41e1-bdfa-5edd00604f67",
        "value": "domser-es.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:08+00:00",
        "timestamp": "1776974409",
        "to_ids": true,
        "type": "domain",
        "uuid": "063c8e17-d966-425c-9589-debe59027f83",
        "value": "dsjh-kr.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:09+00:00",
        "timestamp": "1776974409",
        "to_ids": true,
        "type": "domain",
        "uuid": "45ddf64c-b2b7-4c25-a1cf-ce443ce16ded",
        "value": "engineered-composites-uk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:09+00:00",
        "timestamp": "1776974409",
        "to_ids": true,
        "type": "domain",
        "uuid": "f097fb3f-b549-40b7-830e-adceeec1b8de",
        "value": "finndetectors.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:09+00:00",
        "timestamp": "1776974409",
        "to_ids": true,
        "type": "domain",
        "uuid": "76eb2f58-f336-4e5b-a998-b0e523110782",
        "value": "hzz-lw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:09+00:00",
        "timestamp": "1776974409",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba226851-0ba3-483e-a7e7-c225f7c626d1",
        "value": "jieqaingdoalu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:09+00:00",
        "timestamp": "1776974410",
        "to_ids": true,
        "type": "domain",
        "uuid": "876ce439-22a7-432c-bad2-f0a78e6dd26b",
        "value": "johnisagoodboybutheisname.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:10+00:00",
        "timestamp": "1776974410",
        "to_ids": true,
        "type": "domain",
        "uuid": "544a3962-cc32-4b22-afba-adaac53778d4",
        "value": "kapsi-in.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:10+00:00",
        "timestamp": "1776974410",
        "to_ids": true,
        "type": "domain",
        "uuid": "b393ea04-3c01-4166-90e3-a693fbeeded2",
        "value": "mcdefence.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:10+00:00",
        "timestamp": "1776974410",
        "to_ids": true,
        "type": "domain",
        "uuid": "517139be-7639-4677-bcc6-0ab83673bbe8",
        "value": "nhcrfp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:10+00:00",
        "timestamp": "1776974410",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad652a71-399e-41d3-b508-135420ecf731",
        "value": "sarra-tr.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:11+00:00",
        "timestamp": "1776974411",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fc634f9-13f8-4fa8-9f3c-31922e6f250e",
        "value": "scm-techs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:11+00:00",
        "timestamp": "1776974411",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bf15a50-fe13-4f31-8e82-c0a66821eb20",
        "value": "serttekglobal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:11+00:00",
        "timestamp": "1776974411",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b161216-6fdc-4bc3-b524-23afac5cdb9a",
        "value": "sigma-vent-ru.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:11+00:00",
        "timestamp": "1776974411",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad375a94-3782-4134-ad75-5db7e3edce59",
        "value": "sweecomica.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:11+00:00",
        "timestamp": "1776974411",
        "to_ids": false,
        "type": "url",
        "uuid": "fafae0a8-760e-49ee-b545-ae9ec0367031",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/cc8358999117581d3b7327f5f77387c4582e9207",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:11+00:00",
        "timestamp": "1776974412",
        "to_ids": false,
        "type": "url",
        "uuid": "a3cf77b3-0e10-4df3-b6f2-3e053508277f",
        "value": "https://x.com/smica83/status/2047284078748074151",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:12+00:00",
        "timestamp": "1776974412",
        "to_ids": false,
        "type": "url",
        "uuid": "589a5848-8ec3-4705-b95a-d2dbd611c965",
        "value": "https://www.virustotal.com/gui/file/dca72b265088c1129a616d29b99940f91c5ee33848aecf10ade8a9716c76ec28/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:12+00:00",
        "timestamp": "1776974412",
        "to_ids": false,
        "type": "url",
        "uuid": "07b895d9-2fc6-49aa-a372-41af8d947ddf",
        "value": "https://www.virustotal.com/gui/file/d9c9971bb9a203cd262d7192cc28c33541506c5e6387a1b7f283ffa0d794c182/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:12+00:00",
        "timestamp": "1776974412",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "813700d0-7991-45df-9e26-9f74610a9fdf",
        "value": "107.175.249.142",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:12+00:00",
        "timestamp": "1776974412",
        "to_ids": true,
        "type": "domain",
        "uuid": "09e72e00-909d-4dd8-9532-a5df2718772d",
        "value": "elseweedy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:12+00:00",
        "timestamp": "1776974412",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a883a11-54ae-4053-aca7-c188568d7ff5",
        "value": "mynewraw.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "remcos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:12+00:00",
        "timestamp": "1776974413",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec88dcd9-3e4e-484c-aca7-43b1cfa63399",
        "value": "myrawupdate.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:13+00:00",
        "timestamp": "1776974413",
        "to_ids": false,
        "type": "url",
        "uuid": "1762b075-4438-40bc-8e4d-79c34ebf7eb0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/77d452f83ff417871163ded92b60a33ddb28fe0e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:13+00:00",
        "timestamp": "1776974413",
        "to_ids": false,
        "type": "url",
        "uuid": "843e4afa-6454-40ca-8921-c6fa57675bfa",
        "value": "https://x.com/smica83/status/2047316034114183459",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:13+00:00",
        "timestamp": "1776974413",
        "to_ids": false,
        "type": "url",
        "uuid": "1adebe8e-2ed5-450b-a988-d5e553d7759f",
        "value": "https://tria.ge/260423-rfxffaew2p/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T20:00:13+00:00",
        "timestamp": "1776974413",
        "to_ids": true,
        "type": "domain",
        "uuid": "42d2db64-beda-4ae7-94bd-bf3e94b010c0",
        "value": "quote-texas-son-manufactured.trycloudflare.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:03+00:00",
        "timestamp": "1776978004",
        "to_ids": false,
        "type": "url",
        "uuid": "3dc1380e-cce1-4cf6-b91f-f429fd1af0a2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ccbc187e17b292ccc0d90daca3777cf3f16cc5f1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:04+00:00",
        "timestamp": "1776978004",
        "to_ids": true,
        "type": "domain",
        "uuid": "0744a84b-16c6-4e45-a41f-15399721f595",
        "value": "actade-nacimiento-blog.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:04+00:00",
        "timestamp": "1776978005",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7b82c7b-9eb7-4d73-a897-672e9aa1c862",
        "value": "cldflarecdn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:05+00:00",
        "timestamp": "1776978005",
        "to_ids": false,
        "type": "url",
        "uuid": "16319d93-1c65-4e4f-bfb8-4b079c2a1dde",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9d1ce9bd94f4ea6df206f7265c36fceed0d29403",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:05+00:00",
        "timestamp": "1776978005",
        "to_ids": true,
        "type": "domain",
        "uuid": "85ef50d6-59af-4fba-aeb7-8a048d01ddbf",
        "value": "ethervane.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:05+00:00",
        "timestamp": "1776978005",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f53dd92-8365-4121-b81b-d3ee045a9f2d",
        "value": "fundivox.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:05+00:00",
        "timestamp": "1776978006",
        "to_ids": false,
        "type": "url",
        "uuid": "8156ed67-5fe6-4556-96af-f6e8821076d8",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5e890b5420919b2a704a0a9111ac94f6195b32dc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:06+00:00",
        "timestamp": "1776978006",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7279fe3-ae74-416e-9284-e251d6b2a94f",
        "value": "bradtkr.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:06+00:00",
        "timestamp": "1776978006",
        "to_ids": true,
        "type": "domain",
        "uuid": "2252c99b-4835-4d87-9e98-f985ea7f084e",
        "value": "dialectum.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:06+00:00",
        "timestamp": "1776978006",
        "to_ids": true,
        "type": "domain",
        "uuid": "23294812-6d01-46e0-bf72-0357f25149cf",
        "value": "nonrueden.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:06+00:00",
        "timestamp": "1776978006",
        "to_ids": true,
        "type": "domain",
        "uuid": "034ff46d-e497-40e6-b0e9-4e68a418b63c",
        "value": "northcombe.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:06+00:00",
        "timestamp": "1776978006",
        "to_ids": true,
        "type": "domain",
        "uuid": "860a7c07-0412-46c2-9116-c124b2008e49",
        "value": "oakington.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:06+00:00",
        "timestamp": "1776978007",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dfe7ec1-b615-4721-9c7b-0530914a80b5",
        "value": "quorumix.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_landupdate808",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T21:00:07+00:00",
        "timestamp": "1776978007",
        "to_ids": true,
        "type": "domain",
        "uuid": "10b6c486-0c12-4011-94c3-ac8bc0df73c9",
        "value": "saxonfield.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:03+00:00",
        "timestamp": "1776981604",
        "to_ids": false,
        "type": "url",
        "uuid": "05968082-3ef6-4323-9fbf-e03254e3d7d7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/eb5645cf21289aa776b797ffc03986c7630fc2fc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:04+00:00",
        "timestamp": "1776981604",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2801dba-e033-44e9-a2be-fe5e4f714eb8",
        "value": "buy.tlcketbrasil.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:04+00:00",
        "timestamp": "1776981605",
        "to_ids": true,
        "type": "domain",
        "uuid": "835fc355-b601-4b5d-9147-11cf79b6a7a1",
        "value": "buyticketbrasil.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:05+00:00",
        "timestamp": "1776981605",
        "to_ids": true,
        "type": "domain",
        "uuid": "769c0a58-bd61-4a70-bad5-8feccf4724ee",
        "value": "buyticketbrasil.com.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:05+00:00",
        "timestamp": "1776981605",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb22ef23-3010-45e7-a516-cae51dab4175",
        "value": "buyticketbrasil.com.ngrok.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:05+00:00",
        "timestamp": "1776981605",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0623004-b2ae-4d2e-bd68-40ee6b817973",
        "value": "buyticketbrasil.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:05+00:00",
        "timestamp": "1776981605",
        "to_ids": true,
        "type": "domain",
        "uuid": "a93db695-aedf-4cb0-8188-6f8a91120437",
        "value": "pbvoid.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:05+00:00",
        "timestamp": "1776981606",
        "to_ids": true,
        "type": "domain",
        "uuid": "16d2047f-3854-4ca2-90ef-3aec3a3e5255",
        "value": "tlcketbrasil.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:06+00:00",
        "timestamp": "1776981606",
        "to_ids": false,
        "type": "url",
        "uuid": "140b41d9-0f31-4ee5-803f-0b34bf770428",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/af7ba866888dcd840c5a1003b6b037667144b3fc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:06+00:00",
        "timestamp": "1776981606",
        "to_ids": false,
        "type": "url",
        "uuid": "2b4a2ac1-7d43-477d-960f-76437a84505c",
        "value": "https://x.com/Merlax_/status/2047424019909968257",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:06+00:00",
        "timestamp": "1776981606",
        "to_ids": true,
        "type": "domain",
        "uuid": "a532b81d-2aef-4fb7-b9cc-db4859ef82c4",
        "value": "anteffaadm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:06+00:00",
        "timestamp": "1776981606",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc097747-f447-4460-8342-6153a471455d",
        "value": "buyticketbrasiloficial.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:06+00:00",
        "timestamp": "1776981607",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3ae52d7-ba0e-45fa-889f-4a1d23dd0876",
        "value": "cardcomprotecao.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:07+00:00",
        "timestamp": "1776981607",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a76b756-08db-4d80-8251-260755e7afcf",
        "value": "ingressosflameengo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:07+00:00",
        "timestamp": "1776981607",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad40b352-5e24-405f-a5a1-79d12b506c4e",
        "value": "processo-atendimento.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_ngate",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:07+00:00",
        "timestamp": "1776981607",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2b040b9-4878-42c6-9df1-26c5e6c96ff7",
        "value": "ticket-btsbusiness.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:07+00:00",
        "timestamp": "1776981608",
        "to_ids": false,
        "type": "url",
        "uuid": "c3b45e6f-a8db-44bd-9058-c4c33394858f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2a68381a759ca826c67881511d6b3d478c2c39ee",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:08+00:00",
        "timestamp": "1776981608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6de59176-9978-4215-8876-7dd81a9f2e11",
        "value": "104.214.176.1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:08+00:00",
        "timestamp": "1776981608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "125085f1-afac-4371-ac65-076ab6a402a6",
        "value": "111.92.243.4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:08+00:00",
        "timestamp": "1776981608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "206bab11-5ad6-4d49-99a6-a0b1c736a0dc",
        "value": "124.223.96.116",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:08+00:00",
        "timestamp": "1776981608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3a43110e-2f09-4e86-a038-a92695cc528d",
        "value": "129.204.155.167",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:09+00:00",
        "timestamp": "1776981609",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6154cbe4-fcf8-49bc-8b05-207572813726",
        "value": "149.88.69.171",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:09+00:00",
        "timestamp": "1776981609",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4531c9f2-c2ca-47af-820f-e4f5ac2cfdcb",
        "value": "47.111.99.76",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T22:00:09+00:00",
        "timestamp": "1776981609",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8c885b4e-0d3f-4f91-ab05-393a4cb01d72",
        "value": "81.22.132.145",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}