{
  "Event": {
    "analysis": "1",
    "date": "2026-04-20",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-04-21",
    "publish_timestamp": "1776808802",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1776805207",
    "uuid": "7f785788-f3a8-423a-8cf9-ec8480772460",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T06:00:02+00:00",
        "timestamp": "1776751203",
        "to_ids": false,
        "type": "url",
        "uuid": "87038497-276e-4f26-9751-8aeec63a0f00",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c8a85a031aa9e20a69b338b212d63642d4ec10a0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T06:00:03+00:00",
        "timestamp": "1776751204",
        "to_ids": false,
        "type": "url",
        "uuid": "08c63594-d0f5-458d-970d-5f8b2e19773e",
        "value": "https://intel.breakglass.tech/post/odyssey-macos-stealer-backdoored-panel-scan-tron-credential-harvester",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T06:00:04+00:00",
        "timestamp": "1776751204",
        "to_ids": true,
        "type": "domain",
        "uuid": "130d7ddf-f830-4e3f-9ea5-0a1cbc1bef29",
        "value": "scan-tron.link",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T06:00:04+00:00",
        "timestamp": "1776751204",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b1d81ca-c5bd-4a06-90b4-a118798cf98c",
        "value": "vash-server.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T06:00:04+00:00",
        "timestamp": "1776751205",
        "to_ids": false,
        "type": "url",
        "uuid": "ec0e856f-d549-4efe-bc15-b649e3a52250",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f2e28f34937daa2bd00db8717bd6d48f9292aa90",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T06:00:05+00:00",
        "timestamp": "1776751205",
        "to_ids": true,
        "type": "domain",
        "uuid": "571c6a9a-006b-40bb-a634-f1e2b053d27e",
        "value": "ukdsopas.at",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T07:00:02+00:00",
        "timestamp": "1776754802",
        "to_ids": false,
        "type": "url",
        "uuid": "5837703d-e4c1-41fd-8216-293c78eaa825",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6dcbf443a24a9094ee115c9b9d77def08be85304",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T07:00:02+00:00",
        "timestamp": "1776754803",
        "to_ids": false,
        "type": "url",
        "uuid": "a9a8ff15-4fb3-4a23-987c-7a7705d8648b",
        "value": "https://x.com/RedDrip7/status/2046417026835714239",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T07:00:03+00:00",
        "timestamp": "1776754804",
        "to_ids": false,
        "type": "url",
        "uuid": "01c7559c-4095-4899-bcc3-1321a2142ab0",
        "value": "https://www.virustotal.com/gui/file/0c69637c2f54822a2f6c796a7800192474742d6f309b3d6aa82ecb10690a7097/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_patchwork",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T07:00:04+00:00",
        "timestamp": "1776754805",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdc34a15-5256-416b-876c-3d25781e3cf7",
        "value": "cloudwindowapps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:04+00:00",
        "timestamp": "1776758404",
        "to_ids": false,
        "type": "url",
        "uuid": "9d5799b8-0b92-4f0a-ac6a-64e4b6c888f7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a916efa60fcdf60be9686d11461e87b95c65fa77",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:04+00:00",
        "timestamp": "1776758404",
        "to_ids": true,
        "type": "domain",
        "uuid": "0de5c9cb-a846-4319-be8b-4dff50a39b0f",
        "value": "okfackyourmm.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:04+00:00",
        "timestamp": "1776758404",
        "to_ids": false,
        "type": "url",
        "uuid": "d580a793-9251-4e22-9285-a4500e3115c4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c7afb65626496dfbf88ed6a2c40a8d3f0db85136",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:04+00:00",
        "timestamp": "1776758404",
        "to_ids": false,
        "type": "url",
        "uuid": "0a213c45-0720-4a64-a7eb-edd41d41760a",
        "value": "https://ipinfo.io/AS210006",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "87554c6b-22e5-4230-b8f3-d290960a7215",
        "value": "178.20.210.0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "400dc5a8-d8ea-4d0f-b52c-db8659a1639d",
        "value": "45.87.249.0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4d44ffbb-8fe0-4d8e-b378-d87196d725f4",
        "value": "86.54.25.0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ac76913d-fc17-45c2-a027-8fc3aeba304c",
        "value": "91.227.114.0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "worst_asns",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "2002faaa-80d0-40a7-9cdc-51d1fe19b447",
        "value": "91.92.21.0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758405",
        "to_ids": false,
        "type": "url",
        "uuid": "42e11c68-b60b-41a0-b0f5-519bb6a87198",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f8209f93a0174ca78660d12ce89896a12daa0d70",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:05+00:00",
        "timestamp": "1776758406",
        "to_ids": false,
        "type": "url",
        "uuid": "91dc0670-d3fc-449f-b263-a70f81eef6f9",
        "value": "https://securelist.ru/fakewallet-cryptostealer-ios-app-store/115241",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:06+00:00",
        "timestamp": "1776758406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "32ca2053-1afe-4bdf-9a8d-3107e98ba47f",
        "value": "139.180.139.209",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:06+00:00",
        "timestamp": "1776758406",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1d01c1e-499e-46b4-8596-0a85f2b2053c",
        "value": "6688cf.jhxrpbgq.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:06+00:00",
        "timestamp": "1776758406",
        "to_ids": true,
        "type": "domain",
        "uuid": "878ddf57-8e4c-4f98-981d-6b624660e7f3",
        "value": "api.dc1637.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:06+00:00",
        "timestamp": "1776758406",
        "to_ids": true,
        "type": "domain",
        "uuid": "108beb2a-68ea-4764-8914-9d0eb5932fce",
        "value": "api.npoint.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:06+00:00",
        "timestamp": "1776758406",
        "to_ids": true,
        "type": "domain",
        "uuid": "6878b259-9609-4501-afee-11c278c32149",
        "value": "apps-store.im",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:06+00:00",
        "timestamp": "1776758407",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceea8ed8-0bbf-4d2e-9de0-152b09e101c9",
        "value": "appstoreios.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:07+00:00",
        "timestamp": "1776758407",
        "to_ids": true,
        "type": "domain",
        "uuid": "174e7702-9475-47d7-846c-6b29e6834fc7",
        "value": "crypto-stroe.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:07+00:00",
        "timestamp": "1776758407",
        "to_ids": true,
        "type": "domain",
        "uuid": "6afd7abe-57fc-4ed4-8fbe-3b015ee3ae83",
        "value": "dc1637.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:07+00:00",
        "timestamp": "1776758407",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ec4f4bc-9af6-4ef7-bffa-45d4a0d66cbe",
        "value": "gxzhrc.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:07+00:00",
        "timestamp": "1776758407",
        "to_ids": true,
        "type": "domain",
        "uuid": "312b7669-5814-4c4b-987a-de005df37dbe",
        "value": "helllo2025.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:07+00:00",
        "timestamp": "1776758407",
        "to_ids": true,
        "type": "domain",
        "uuid": "6802628f-f030-4cc1-a368-241b24694e08",
        "value": "iosfc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:07+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "362902de-5db5-44a0-82a4-a1fb882895ab",
        "value": "kkkhhhnnn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:08+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e6785ff-ab86-4797-9528-a930864c4ff1",
        "value": "mgi1y.siyangoil.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:08+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6584642-d496-4e2d-96e7-59da1dc16e3e",
        "value": "mti4ywy4.lahuafa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:08+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "d539851d-9608-431b-b3f7-b6eb4cbd2ea8",
        "value": "mtjln.siyangoil.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:08+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "a84acabc-33d1-474b-9a28-23a6c1f0067f",
        "value": "mziyytm5ytk.ahroar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:08+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1e59991-0e98-42bb-9c50-5f5f281d4f1b",
        "value": "ngy2yjq0otlj.ahroar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:08+00:00",
        "timestamp": "1776758408",
        "to_ids": true,
        "type": "domain",
        "uuid": "73ee2778-bd2c-4dc0-b085-a9da435aa23b",
        "value": "nmu8n.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:09+00:00",
        "timestamp": "1776758409",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c2622b0-6a5e-4a4f-a826-d8329762ac21",
        "value": "ntm0mdkzymy3n.oukwww.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:09+00:00",
        "timestamp": "1776758409",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9ccf0b0-bd44-4a5a-a802-b49a4cba8307",
        "value": "nziwytu5n.lahuafa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:09+00:00",
        "timestamp": "1776758409",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad016ab4-03a0-469d-b41c-92c3bc132005",
        "value": "odm0.siyangoil.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:09+00:00",
        "timestamp": "1776758409",
        "to_ids": true,
        "type": "domain",
        "uuid": "410d071a-dc9a-45cc-8e8e-a9b1e295510f",
        "value": "sxsfcc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:09+00:00",
        "timestamp": "1776758409",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e315450-20c7-4832-abd1-60b9e3b391e1",
        "value": "xz.apps-store.im",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:09+00:00",
        "timestamp": "1776758410",
        "to_ids": true,
        "type": "domain",
        "uuid": "af97e87d-57b0-450a-8ccb-4a3e18d6edf5",
        "value": "yjzhengruol.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:10+00:00",
        "timestamp": "1776758410",
        "to_ids": true,
        "type": "domain",
        "uuid": "1507159f-4822-46c4-b20e-0f135e0b612f",
        "value": "zdrhnmjjndu.ulbcl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:10+00:00",
        "timestamp": "1776758410",
        "to_ids": true,
        "type": "domain",
        "uuid": "63db2c15-e577-4521-9376-9266e5012e5b",
        "value": "zmx6f.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:10+00:00",
        "timestamp": "1776758410",
        "to_ids": false,
        "type": "url",
        "uuid": "3e338f84-5faa-4cfb-a9ab-7a02a81ae8b5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a1c85a4b56770e5931e055cc517c096eba2fcbc9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:10+00:00",
        "timestamp": "1776758410",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8b2e1e9-7b4c-463e-aaa8-b48dffad758b",
        "value": "api.scan-tron.link",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:10+00:00",
        "timestamp": "1776758410",
        "to_ids": false,
        "type": "url",
        "uuid": "8e11a81a-4d1b-4b56-8a27-2f01d6d440bf",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b2b3ed50f6dee92efb305a702262b580a938176b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:10+00:00",
        "timestamp": "1776758410",
        "to_ids": false,
        "type": "url",
        "uuid": "e04bea2e-89d2-425e-9514-f058ba91b7f8",
        "value": "https://x.com/skocherhan/status/2046292771594555463",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758411",
        "to_ids": true,
        "type": "domain",
        "uuid": "497179a5-6aa1-43b5-b968-d7d04b53b1d8",
        "value": "als22nty.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758411",
        "to_ids": true,
        "type": "domain",
        "uuid": "01773c59-70c4-4041-bf90-9cc173a3f3b7",
        "value": "anav.iposepo.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758411",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a9eb112-8839-4bf5-8ace-460de82885b8",
        "value": "bnav.iterpost.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758411",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb5dad2e-326f-4b8b-83a4-e983d79be183",
        "value": "enav.ipspcoep.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758411",
        "to_ids": true,
        "type": "domain",
        "uuid": "c225fcd8-f6dc-4319-a15b-ccfff8e78e7d",
        "value": "iposepo.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758411",
        "to_ids": true,
        "type": "domain",
        "uuid": "f597e424-4fcd-44a4-bcdd-d1efa72d40aa",
        "value": "ipseno10s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:11+00:00",
        "timestamp": "1776758412",
        "to_ids": true,
        "type": "domain",
        "uuid": "20a7ee14-0e50-4fd6-a280-c67993dde342",
        "value": "ipseno15s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:12+00:00",
        "timestamp": "1776758412",
        "to_ids": true,
        "type": "domain",
        "uuid": "fff5cc9f-97d2-4354-8071-45c199e1d279",
        "value": "ipseno31s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:12+00:00",
        "timestamp": "1776758412",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8ad08d4-54e5-49c8-8bed-bce97a953f85",
        "value": "ipseno5s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:12+00:00",
        "timestamp": "1776758412",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ae8011-1f69-4408-9b1c-919e529b1ed2",
        "value": "ipspcoep.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:12+00:00",
        "timestamp": "1776758412",
        "to_ids": true,
        "type": "domain",
        "uuid": "86f49db1-0107-4ac1-abff-123088add5d3",
        "value": "iterpost.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:12+00:00",
        "timestamp": "1776758412",
        "to_ids": true,
        "type": "domain",
        "uuid": "2655363d-4669-4bf4-8318-4f8e8cf77cab",
        "value": "mois0ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:12+00:00",
        "timestamp": "1776758413",
        "to_ids": true,
        "type": "domain",
        "uuid": "2eae40af-2152-43b8-8571-71ff9ef2ca18",
        "value": "mois22ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:13+00:00",
        "timestamp": "1776758413",
        "to_ids": true,
        "type": "domain",
        "uuid": "1de278d0-376e-4b76-aa53-762a07864b58",
        "value": "mois26ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:13+00:00",
        "timestamp": "1776758413",
        "to_ids": true,
        "type": "domain",
        "uuid": "1efec22f-7a3d-451a-909c-6c344087e79a",
        "value": "mois36ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:13+00:00",
        "timestamp": "1776758413",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b7c9fed-f8d6-4a03-ad4a-0e28fc3456f3",
        "value": "mois39ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:13+00:00",
        "timestamp": "1776758413",
        "to_ids": true,
        "type": "domain",
        "uuid": "41549d5b-509f-42de-a78e-d165e89da93e",
        "value": "n-crop.anav.iposepo.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:13+00:00",
        "timestamp": "1776758413",
        "to_ids": true,
        "type": "domain",
        "uuid": "c795718f-d715-44e8-8aa8-1f58b5c44197",
        "value": "n-store.enav.ipspcoep.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:13+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "c30487ee-774d-4cd5-92d9-30978998b617",
        "value": "navipdes.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0366563-8996-4235-9c79-42505ce8d9d0",
        "value": "nid-login.mois26ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "99086d8d-8f9c-474f-854e-92c8c4f833c1",
        "value": "nid-login.ntx25sp.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f27c6a6-d1cb-4b2d-b4d7-ea5d926035e4",
        "value": "nid.navipdes.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "28196e7a-8d48-47f7-879d-0b7b88bd1bc5",
        "value": "nida.mois22ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "f471d12d-ef6e-4b72-8282-91946cf1bd74",
        "value": "nida.ntx24sp.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758414",
        "to_ids": true,
        "type": "domain",
        "uuid": "7401b35c-3d11-4201-9732-4cf3b681e98a",
        "value": "nidloes.navipdes.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:14+00:00",
        "timestamp": "1776758415",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf0cd3cd-8d95-4d41-bae6-bff801c710dc",
        "value": "nids.bnav.iterpost.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:15+00:00",
        "timestamp": "1776758415",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c2ac365-2652-4ec8-8d15-bfa5c0237e79",
        "value": "nids.navipdes.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:15+00:00",
        "timestamp": "1776758415",
        "to_ids": true,
        "type": "domain",
        "uuid": "71b6b8c1-6c41-4f9d-991d-4560be9c4dac",
        "value": "nids.nts9pops.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:15+00:00",
        "timestamp": "1776758415",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea95ab08-7757-4c9f-b6e8-d6ef9b46243d",
        "value": "nids.tois5ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:15+00:00",
        "timestamp": "1776758415",
        "to_ids": true,
        "type": "domain",
        "uuid": "db64dbce-7db0-4d69-b2e9-793c57acde78",
        "value": "nidservers.als22nty.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:15+00:00",
        "timestamp": "1776758415",
        "to_ids": true,
        "type": "domain",
        "uuid": "091e3cd4-e25e-4697-8601-38ef63f89065",
        "value": "nsc2tx.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:15+00:00",
        "timestamp": "1776758416",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d486d60-4425-4586-840f-f56b9216b7d2",
        "value": "ntrsdos28s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:16+00:00",
        "timestamp": "1776758416",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea91c4ca-dac1-4330-a1af-8b03c89339b7",
        "value": "ntrsdos33s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:16+00:00",
        "timestamp": "1776758416",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d6a643a-5bad-4140-a169-46bc5c595bf7",
        "value": "ntrsdos38s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:16+00:00",
        "timestamp": "1776758416",
        "to_ids": true,
        "type": "domain",
        "uuid": "15dbfa95-7f4e-48cb-a91d-4899dc429d35",
        "value": "ntrsdos3s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:16+00:00",
        "timestamp": "1776758416",
        "to_ids": true,
        "type": "domain",
        "uuid": "e14fe1a3-f35b-4704-bb10-aaa0fc9c815b",
        "value": "nts8pops.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:16+00:00",
        "timestamp": "1776758416",
        "to_ids": true,
        "type": "domain",
        "uuid": "09f894ce-c0bc-43db-b81d-6762ac932459",
        "value": "nts9pops.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:16+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8aebf60-3443-4092-a52c-2c8286d14318",
        "value": "ntx10sp.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:17+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "f69162a5-0cdc-4eda-ab30-77170fe53343",
        "value": "ntx24sp.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:17+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "82267171-8221-4202-9690-7421ea828868",
        "value": "ntx25sp.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:17+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "cde5543e-6a21-4930-89e2-100b16460b10",
        "value": "ntxdoe0s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:17+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ffd572e-bc22-42ba-ae8c-af691bdfe809",
        "value": "ntxdoe2s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:17+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "7be4a929-64e4-4678-8f8e-6289c14b229d",
        "value": "ntxsp11s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:17+00:00",
        "timestamp": "1776758417",
        "to_ids": true,
        "type": "domain",
        "uuid": "d56f8bb9-f739-4baf-a3ae-bc07033bf4a3",
        "value": "ntxsp17s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:18+00:00",
        "timestamp": "1776758418",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f56b58d-7775-4a75-b2a7-ecff0bc0cdb3",
        "value": "ntxsp21s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:18+00:00",
        "timestamp": "1776758418",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3fa4859-01ea-466c-a0eb-e0271c2e1238",
        "value": "ntxsp23s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:18+00:00",
        "timestamp": "1776758418",
        "to_ids": true,
        "type": "domain",
        "uuid": "a09fa9be-57e4-47c0-a3ee-69ae58071ae6",
        "value": "ntxsp27s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:18+00:00",
        "timestamp": "1776758418",
        "to_ids": true,
        "type": "domain",
        "uuid": "728652f6-4d1c-4cad-9ed1-2d0d3edc28ff",
        "value": "ntxsp28s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:18+00:00",
        "timestamp": "1776758419",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4293c77-fab9-4d21-aaed-a909bb20750f",
        "value": "ntxsp2s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:19+00:00",
        "timestamp": "1776758419",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a02768-5497-41d8-ac70-ffd23e7d7398",
        "value": "ntxsp31s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:19+00:00",
        "timestamp": "1776758419",
        "to_ids": true,
        "type": "domain",
        "uuid": "8621ab4e-b9e9-49b7-98a5-64ccba60c978",
        "value": "ntxsp32s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:19+00:00",
        "timestamp": "1776758419",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8e78dbc-4c30-4722-8608-5ec3a3a6b03f",
        "value": "ntxsp33s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:19+00:00",
        "timestamp": "1776758419",
        "to_ids": true,
        "type": "domain",
        "uuid": "42d7fab2-cc12-4573-bbb3-f0cc417bf8d8",
        "value": "ntxsp35s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:19+00:00",
        "timestamp": "1776758419",
        "to_ids": true,
        "type": "domain",
        "uuid": "914c2771-18c5-404c-81bf-edf95ddbd727",
        "value": "ntxsp37s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:19+00:00",
        "timestamp": "1776758420",
        "to_ids": true,
        "type": "domain",
        "uuid": "f75c3c9c-c924-40d6-9bdd-433e89d785c1",
        "value": "ntxsp39s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:20+00:00",
        "timestamp": "1776758420",
        "to_ids": true,
        "type": "domain",
        "uuid": "267d64aa-3057-4637-9419-ba7951e77415",
        "value": "ntxsp4s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:20+00:00",
        "timestamp": "1776758420",
        "to_ids": true,
        "type": "domain",
        "uuid": "62cc3a7e-d031-42c7-a627-8292d61b9677",
        "value": "ntxsp5s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:20+00:00",
        "timestamp": "1776758420",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfbdd9cc-1d2a-429f-a455-50ad47a9bbd7",
        "value": "ntxsp6s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:20+00:00",
        "timestamp": "1776758420",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e235302-d135-4088-9896-0a1c4c800402",
        "value": "ntxsp8s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:20+00:00",
        "timestamp": "1776758420",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0e4c9f3-6f09-4857-90a3-41b33fec090e",
        "value": "ntxsp9s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:20+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "e41313a5-c6c5-416b-bdc6-6e9097037796",
        "value": "op10ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "b067c015-bf7b-4f92-8774-b93402546869",
        "value": "op11ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f041fa9-12f5-4dd1-89a5-c7e3caec5702",
        "value": "op12ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2fa01f9-fc37-4731-96c4-d169f9b36061",
        "value": "op15ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "c42489e6-6956-4d70-827a-e8f219c188c2",
        "value": "op17ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "6de3301a-d750-4848-b293-2f4b10076f51",
        "value": "op19ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758421",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9c94fa7-7422-43b3-bbc7-848c9f5095f4",
        "value": "op22ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:21+00:00",
        "timestamp": "1776758422",
        "to_ids": true,
        "type": "domain",
        "uuid": "719672c6-4e71-48fa-a0fc-ee8076680a00",
        "value": "op24ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:22+00:00",
        "timestamp": "1776758422",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd662a45-ec1f-4840-ba1b-6e99e17922b8",
        "value": "op25ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:22+00:00",
        "timestamp": "1776758422",
        "to_ids": true,
        "type": "domain",
        "uuid": "51b61af7-6045-4fd0-94bb-87061b6e6087",
        "value": "op27ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:22+00:00",
        "timestamp": "1776758422",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f296001-e11d-4441-bc53-04d1fe5a271c",
        "value": "op28ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:22+00:00",
        "timestamp": "1776758422",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed7b1278-b782-4999-8d89-85e18c117db5",
        "value": "op29ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:22+00:00",
        "timestamp": "1776758422",
        "to_ids": true,
        "type": "domain",
        "uuid": "43fd2fda-28cc-4c1c-9ddb-ee1266d3acad",
        "value": "op30ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:22+00:00",
        "timestamp": "1776758423",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1e211c5-fc9a-45f8-b143-06c332c44e86",
        "value": "op34ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:23+00:00",
        "timestamp": "1776758423",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad1c6f35-b667-4f80-bb79-abcb9e40e15d",
        "value": "op35ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:23+00:00",
        "timestamp": "1776758423",
        "to_ids": true,
        "type": "domain",
        "uuid": "bae32dd6-51e9-496b-af46-452cf1f04c52",
        "value": "op36ntyx.dns.navy",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:23+00:00",
        "timestamp": "1776758423",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3f23b13-fb03-4e21-bf13-57e77ef1e86c",
        "value": "pntsr27s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:23+00:00",
        "timestamp": "1776758423",
        "to_ids": true,
        "type": "domain",
        "uuid": "803ba3df-96dd-4dcc-802c-873879dfbf7c",
        "value": "pntxes18s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:23+00:00",
        "timestamp": "1776758423",
        "to_ids": true,
        "type": "domain",
        "uuid": "855f1f9d-f800-4de9-aaf9-3d661194d5f8",
        "value": "pntxes20s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:23+00:00",
        "timestamp": "1776758424",
        "to_ids": true,
        "type": "domain",
        "uuid": "379c4a7d-1cd7-4fe1-b673-b7404fc9910a",
        "value": "tois15ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:24+00:00",
        "timestamp": "1776758424",
        "to_ids": true,
        "type": "domain",
        "uuid": "1569bc9b-5b69-4b0e-a955-19c0fb74b93e",
        "value": "tois5ex.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:24+00:00",
        "timestamp": "1776758424",
        "to_ids": true,
        "type": "domain",
        "uuid": "48daf81f-f6a0-457d-a247-58146aa491db",
        "value": "tpe5ie.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T08:00:24+00:00",
        "timestamp": "1776758424",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d784dfc-2724-4320-a57a-395294a6dbce",
        "value": "xto14ic.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:08+00:00",
        "timestamp": "1776762008",
        "to_ids": false,
        "type": "url",
        "uuid": "c10ec039-0b0e-4d49-acd4-4907f76f33de",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1ef6ef28d786c008b618d956d7e4c69b64b49fe5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:08+00:00",
        "timestamp": "1776762008",
        "to_ids": true,
        "type": "domain",
        "uuid": "83858271-a1d6-4529-87db-032362477592",
        "value": "belldinosaurs.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:08+00:00",
        "timestamp": "1776762008",
        "to_ids": true,
        "type": "domain",
        "uuid": "146127ff-ffcd-47e1-af11-fc106b44d42f",
        "value": "peaceadvice.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:08+00:00",
        "timestamp": "1776762009",
        "to_ids": false,
        "type": "url",
        "uuid": "dd44f3e4-b096-4872-982b-9faf0f00ea87",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/048e8c127a459b7657e23d468d683c5d01c6ee80",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:09+00:00",
        "timestamp": "1776762009",
        "to_ids": true,
        "type": "domain",
        "uuid": "54d4e638-1d33-433c-be48-094c224e5833",
        "value": "databui.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:09+00:00",
        "timestamp": "1776762009",
        "to_ids": false,
        "type": "url",
        "uuid": "1e155c57-c6fe-4efc-a0b8-f9f0c95863c1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f8d807de8fc45250e60f2be8494fc270467848f9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:09+00:00",
        "timestamp": "1776762009",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "032bcd03-61b7-4d26-b6ac-291f793a6b62",
        "value": "159.100.22.71",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:09+00:00",
        "timestamp": "1776762010",
        "to_ids": true,
        "type": "domain",
        "uuid": "feb848ed-30d0-4e38-9b41-715152985079",
        "value": "159.100.22.71.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:10+00:00",
        "timestamp": "1776762010",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b4a3fcb-85bb-4b7b-96a5-7882ea231e3b",
        "value": "1c.jinhuoye.mobi",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T09:00:15+00:00",
        "timestamp": "1776762020",
        "to_ids": true,
        "type": "domain",
        "uuid": "4241fcf2-ba60-499b-b343-273cc876ac83",
        "value": "commingforte.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:05+00:00",
        "timestamp": "1776765605",
        "to_ids": true,
        "type": "domain",
        "uuid": "b111b366-80cf-452e-ba74-0fd77a636cce",
        "value": "jinhuoye.mobi",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:05+00:00",
        "timestamp": "1776765606",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed25aa08-207d-4d56-9a06-fad97e27acdd",
        "value": "running-snail.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:06+00:00",
        "timestamp": "1776765606",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d78c35e-3de8-4dd8-8e30-2677d3e83f0a",
        "value": "srv22248035.ultasrv.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:06+00:00",
        "timestamp": "1776765606",
        "to_ids": false,
        "type": "url",
        "uuid": "e06c3b05-3afd-4f61-a2ff-649dee64d259",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/30028f76a0549320070dd72ade301182ac212da0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "adaptix_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:06+00:00",
        "timestamp": "1776765606",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b2e84cf-39aa-452f-b7e1-3963b5056438",
        "value": "arbgpt.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:06+00:00",
        "timestamp": "1776765606",
        "to_ids": false,
        "type": "url",
        "uuid": "0d39406c-9ca4-4fa0-80bc-25649aea3fb4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ecf25fb15ecb9634107ce3b73a60a7565041d92f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:06+00:00",
        "timestamp": "1776765606",
        "to_ids": true,
        "type": "domain",
        "uuid": "deabac3d-cda8-479f-9661-8faf7117e9b6",
        "value": "document.onview.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:06+00:00",
        "timestamp": "1776765606",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd9e05e5-7668-403b-b433-0270b031b740",
        "value": "m97.mailplug.mysaol.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765607",
        "to_ids": true,
        "type": "domain",
        "uuid": "34381377-4ccf-41a1-a615-c587cfdcb25b",
        "value": "mai.docservice.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765607",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5cf5c77-d2a7-4dbd-853f-f15015c56806",
        "value": "my.docedge.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765607",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb654db9-3443-47ee-a967-3539ceb8e137",
        "value": "my.docedger.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765607",
        "to_ids": true,
        "type": "domain",
        "uuid": "299d8d69-fe4f-45dc-aad6-31c61bbde09c",
        "value": "nid-naverhmt.servequake.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765607",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ef7bba8-34d8-486e-8c20-17dcf5369ee1",
        "value": "nid-navermen.bounceme.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765607",
        "to_ids": true,
        "type": "domain",
        "uuid": "93f52430-9e05-462c-b1bf-0965342c55a5",
        "value": "wildcat-hongkong.asuscomm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:07+00:00",
        "timestamp": "1776765608",
        "to_ids": false,
        "type": "url",
        "uuid": "ee3dce75-27b6-4389-a952-3f94706df1cb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/54eb3830cdc7f1c47f3f703bcee4285b3a07c16f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_unc2465",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:08+00:00",
        "timestamp": "1776765608",
        "to_ids": true,
        "type": "domain",
        "uuid": "72956978-3d10-4615-a90b-e6bfc5b523c8",
        "value": "rvtooik.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:08+00:00",
        "timestamp": "1776765608",
        "to_ids": false,
        "type": "url",
        "uuid": "ae84ffc2-d205-462c-8858-4cce312efdee",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/cd21a5c058aaec820de7fb6ec7fbde358dc3fe43",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:08+00:00",
        "timestamp": "1776765608",
        "to_ids": false,
        "type": "url",
        "uuid": "1f621e75-2ff5-41ec-b701-51a84185838e",
        "value": "https://x.com/Fact_Finder03/status/2046505417698918721",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:08+00:00",
        "timestamp": "1776765608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "98458f2d-bbe5-4d63-a4dd-621a34b77f7e",
        "value": "161.97.99.232",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:08+00:00",
        "timestamp": "1776765608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "071dd6f8-3590-46ac-957d-be8435a28da4",
        "value": "179.43.176.111",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:08+00:00",
        "timestamp": "1776765609",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0ba2cece-942d-4f31-961c-e8728ab60d6e",
        "value": "179.43.176.116",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765609",
        "to_ids": true,
        "type": "domain",
        "uuid": "da521fae-0ebd-4c99-91f2-c3614754771f",
        "value": "marvinkuth.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765609",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fb5dd52-7a9c-46d6-9152-930a76531305",
        "value": "git.marvinkuth.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "bad_service",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765609",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d0d7473-24b5-4d80-a32d-e383e3025649",
        "value": "mc.marvinkuth.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765609",
        "to_ids": false,
        "type": "url",
        "uuid": "84161968-5049-47b2-a124-566646535538",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/db8159e39e606b02d0300bd6e289a84cce1065d9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765609",
        "to_ids": true,
        "type": "domain",
        "uuid": "730aeb9a-2223-4640-a744-33c3ca796401",
        "value": "newproject-newworld.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765609",
        "to_ids": false,
        "type": "url",
        "uuid": "8e6035bb-88ff-404b-afe9-0867b5b9aa2e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ea75df89acacdf1a5bba83d70eb53e1f754bb758",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:09+00:00",
        "timestamp": "1776765610",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f21ca91-6276-4867-89b0-b8a61adb2537",
        "value": "iscanlive.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_nova",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:10+00:00",
        "timestamp": "1776765610",
        "to_ids": true,
        "type": "domain",
        "uuid": "432868f3-8c1a-4da6-87f1-e110fbe411b4",
        "value": "pumbl.fun",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:10+00:00",
        "timestamp": "1776765610",
        "to_ids": false,
        "type": "url",
        "uuid": "2c47b32f-4966-4072-986c-932e9be3878a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/bac36e9cdaca51696266fa7e96142f1922e6e56e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:10+00:00",
        "timestamp": "1776765610",
        "to_ids": true,
        "type": "domain",
        "uuid": "942b8748-b16e-4aeb-9411-21d52d2e8f3c",
        "value": "cryptowavematrix8.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:10+00:00",
        "timestamp": "1776765610",
        "to_ids": true,
        "type": "domain",
        "uuid": "40610e1e-3726-4cd0-b92a-e1edd62885d1",
        "value": "filefreshgrape.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:10+00:00",
        "timestamp": "1776765610",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8d19bd0-7622-4bc6-be68-3812bf4e382b",
        "value": "filequickburger.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:10+00:00",
        "timestamp": "1776765611",
        "to_ids": true,
        "type": "domain",
        "uuid": "cada160e-e1e6-4155-bf3c-7c28748d1106",
        "value": "stellarpixelnode4.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:11+00:00",
        "timestamp": "1776765611",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf55184e-04b7-459a-9de9-b5fbfc5574e0",
        "value": "stellarpixelnode5.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:11+00:00",
        "timestamp": "1776765611",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf51276e-59e0-41da-a7ec-6c18ccbb8e18",
        "value": "stellarpixelnode8.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:11+00:00",
        "timestamp": "1776765611",
        "to_ids": true,
        "type": "domain",
        "uuid": "cce55cbd-073a-433c-ae51-29c590689171",
        "value": "vectorpulsemesh8.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:11+00:00",
        "timestamp": "1776765611",
        "to_ids": false,
        "type": "url",
        "uuid": "f04efda4-090d-4bb5-926d-c25e7e808af4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/88e09a7368663a6e5ab2e4da64680db32a6ba561",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:11+00:00",
        "timestamp": "1776765611",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0a95a82-e056-4c6a-9c58-1d9afcff2533",
        "value": "coneogz.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:11+00:00",
        "timestamp": "1776765611",
        "to_ids": true,
        "type": "domain",
        "uuid": "341dda83-12f6-4934-96b9-16b5f45264cc",
        "value": "elgccyx.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765612",
        "to_ids": false,
        "type": "url",
        "uuid": "cd6bf068-c375-4c85-ba80-2b833961cbce",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/34f98652db62cf0c9dee90126d519d60b62cc748",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765612",
        "to_ids": true,
        "type": "domain",
        "uuid": "966b1ff5-3617-45b7-883e-8d246b2c760d",
        "value": "perp.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765612",
        "to_ids": false,
        "type": "url",
        "uuid": "181895f3-5557-407b-9447-a82b741eecc8",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c7460086cf494cbe39c3696d20cd1c3f9749f6ff",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765612",
        "to_ids": false,
        "type": "url",
        "uuid": "11484355-6a4b-4968-9f03-6d4382e88899",
        "value": "https://app.validin.com/detail?find=065a5b6c0db79c78af78fc4f8caeb86f&type=hash&ref_id=9e831742622#tab=host_pairs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765612",
        "to_ids": true,
        "type": "domain",
        "uuid": "f856a36c-8f70-49c1-8d66-76fdcf354823",
        "value": "fimanjournal.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765612",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bb9e989-5963-483b-b255-06855c32dcfb",
        "value": "fimanjournal.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:12+00:00",
        "timestamp": "1776765613",
        "to_ids": true,
        "type": "domain",
        "uuid": "716df7f3-1d59-43b9-984b-c62eff2930d9",
        "value": "gdshare.club",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:13+00:00",
        "timestamp": "1776765613",
        "to_ids": true,
        "type": "domain",
        "uuid": "7751ca36-0dfe-4958-9b63-63830eed18fb",
        "value": "invstproj.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:13+00:00",
        "timestamp": "1776765613",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f890c77-5453-4716-ae1c-bb153ce43327",
        "value": "picanewurim.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T10:00:13+00:00",
        "timestamp": "1776765613",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9e50aeb-9e26-43a6-8820-52039580f6f0",
        "value": "yacuzihaxutecot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:13+00:00",
        "timestamp": "1776769213",
        "to_ids": false,
        "type": "url",
        "uuid": "0397848e-a503-4488-953e-1a620159501a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6b90086dcd9bbf4152b14f6042db5eb7dedf86c3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:13+00:00",
        "timestamp": "1776769213",
        "to_ids": false,
        "type": "url",
        "uuid": "0dd90834-060e-4e47-8865-16f0d17163e0",
        "value": "https://www.lookout.com/threat-intelligence/article/bitter-hack-for-hire",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:13+00:00",
        "timestamp": "1776769213",
        "to_ids": true,
        "type": "domain",
        "uuid": "5beee46b-38bf-43f1-a844-6d5509e69685",
        "value": "clubline.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:13+00:00",
        "timestamp": "1776769214",
        "to_ids": true,
        "type": "domain",
        "uuid": "c32ddda4-61fb-4628-95c7-1e698874069b",
        "value": "track-portal.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:14+00:00",
        "timestamp": "1776769214",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec9d581c-18a6-47dc-b138-1fd59b1fab47",
        "value": "treasuresland.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:14+00:00",
        "timestamp": "1776769214",
        "to_ids": false,
        "type": "url",
        "uuid": "4c35e030-0c4e-4105-867f-215e4626b96b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/44b0f1c92aec60d15c1960f1bbffe0e7249ab494",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:14+00:00",
        "timestamp": "1776769214",
        "to_ids": false,
        "type": "url",
        "uuid": "24bb6254-0b79-4e5f-9e82-182ca4d2dd19",
        "value": "https://x.com/malwrhunterteam/status/2046332562063167853",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:14+00:00",
        "timestamp": "1776769214",
        "to_ids": false,
        "type": "url",
        "uuid": "c88e7f59-d41b-493d-aafd-edff424f76a5",
        "value": "https://www.virustotal.com/gui/file/7c703e26ab284b1803a33688a29ea0acb3cb33e54afd840d57356128428238fa/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:15+00:00",
        "timestamp": "1776769215",
        "to_ids": false,
        "type": "url",
        "uuid": "f1cc61b3-90d0-46ff-8867-a4f98fc2e5fe",
        "value": "https://www.virustotal.com/gui/file/8943217479ee67120f5976de8e558d0aa888f567302c9bde286b9f00e4de2ad1/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:15+00:00",
        "timestamp": "1776769215",
        "to_ids": false,
        "type": "url",
        "uuid": "a74dd1c6-1bec-4807-9c7b-5dcf8a4704a8",
        "value": "https://www.virustotal.com/gui/file/bf02d14921100b717af2f96a11c757b0ef925ccd2344e51d1951ffd35f49d4e8/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:15+00:00",
        "timestamp": "1776769215",
        "to_ids": false,
        "type": "url",
        "uuid": "9eb074d0-ca54-4fcd-aa1d-44becb495e2b",
        "value": "https://www.virustotal.com/gui/file/d0fa0f96fac9ebc671b2516479c5a2058897a8e3e6a527e03af446fe9bbec373/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "xenorat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:15+00:00",
        "timestamp": "1776769215",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a7256f52-efe4-4708-bb51-6f0b879dee68",
        "value": "31.57.201.164",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:15+00:00",
        "timestamp": "1776769215",
        "to_ids": false,
        "type": "url",
        "uuid": "8ca367a4-58d9-4bd0-b7b4-a753a11673d4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c66c12d04ddda6a0128da5a3e143193cf0caa95b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:15+00:00",
        "timestamp": "1776769216",
        "to_ids": false,
        "type": "url",
        "uuid": "2698b171-f87f-41d9-a756-45e61caf38a2",
        "value": "https://www.virustotal.com/gui/file/73b406fccd1d1f87d0b737785e2406ed0c0fd32b8c4ff116f353fe828900df2e/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:16+00:00",
        "timestamp": "1776769216",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "43292828-668e-47ac-a012-5f714cf25c6d",
        "value": "157.20.182.18",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:16+00:00",
        "timestamp": "1776769216",
        "to_ids": true,
        "type": "domain",
        "uuid": "d86e2289-fca8-4ff3-ac7e-e8891a4cd4b7",
        "value": "nayaink1990112.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:16+00:00",
        "timestamp": "1776769216",
        "to_ids": true,
        "type": "domain",
        "uuid": "2454c48c-120c-4b3c-8032-80f8febd6f9a",
        "value": "nayaink199022.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:16+00:00",
        "timestamp": "1776769216",
        "to_ids": true,
        "type": "domain",
        "uuid": "befc6e70-aca4-4678-b364-7af589555595",
        "value": "nayaink199034.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:16+00:00",
        "timestamp": "1776769216",
        "to_ids": false,
        "type": "url",
        "uuid": "ac85d91d-e93c-4577-90b4-fa620ab535f1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3bc13cd2a4617c78f87e5378084aebc7446af0f0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:16+00:00",
        "timestamp": "1776769217",
        "to_ids": false,
        "type": "url",
        "uuid": "94e2fe8a-4b95-461c-ab93-5fd69dd2ab22",
        "value": "https://www.virustotal.com/gui/file/797c54c175ed8a8fcc7015428868c3c20a9cd9f6e1733fd69e3c543c47837a83/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:17+00:00",
        "timestamp": "1776769217",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "af9fd8c1-7c9d-4b74-83d9-a4a99636c9d0",
        "value": "157.20.182.6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "asyncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:17+00:00",
        "timestamp": "1776769217",
        "to_ids": true,
        "type": "domain",
        "uuid": "60c1ba2a-eb83-4bb8-b724-6a4962a0ba27",
        "value": "lovemax.ddnsguru.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:17+00:00",
        "timestamp": "1776769217",
        "to_ids": false,
        "type": "url",
        "uuid": "8491c4b4-bdf6-4b25-b39b-0179216ffb43",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/da5f2bbfd1fbc9c260cb144b0b958091c5f17b4c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:17+00:00",
        "timestamp": "1776769218",
        "to_ids": false,
        "type": "url",
        "uuid": "d4c7a0f3-817a-43fa-af0b-36f6bccd8eb3",
        "value": "https://www.virustotal.com/gui/file/5398dfa9b21d13c9881b8775353022160a05f203b981432c15d0d7ca17e2eb54/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:18+00:00",
        "timestamp": "1776769218",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7849a1cc-d4a4-4202-a466-804f2ea935a1",
        "value": "157.20.182.25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:18+00:00",
        "timestamp": "1776769218",
        "to_ids": true,
        "type": "domain",
        "uuid": "c48e91e9-875a-4dac-9592-2bdf481aca84",
        "value": "lastmin1917.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:18+00:00",
        "timestamp": "1776769218",
        "to_ids": false,
        "type": "url",
        "uuid": "a5f0810a-386d-471c-9859-5028518a3335",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3d007fbddf647144c84c346c06800b98a12679a7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:18+00:00",
        "timestamp": "1776769218",
        "to_ids": false,
        "type": "url",
        "uuid": "609f2d08-7e73-407e-b32f-c9d1944251e7",
        "value": "https://www.trellix.com/blogs/research/purerat-fileless-utilizing-steganography-process-hollowing",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:18+00:00",
        "timestamp": "1776769218",
        "to_ids": false,
        "type": "url",
        "uuid": "14a86b0f-fe92-4667-99ce-b926930be313",
        "value": "https://www.virustotal.com/gui/file/e0c0418d8bad7b4731b7de35059c6a51c49825e6ec841193cd8842220957cff9/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:19+00:00",
        "timestamp": "1776769219",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d9ce57cc-c456-4eeb-b76c-10715ac3950f",
        "value": "178.16.52.58",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:19+00:00",
        "timestamp": "1776769219",
        "to_ids": true,
        "type": "domain",
        "uuid": "67148a12-c081-4e66-a045-e12319c43b71",
        "value": "crixup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "purelogs",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T11:00:19+00:00",
        "timestamp": "1776769219",
        "to_ids": true,
        "type": "domain",
        "uuid": "18b5786f-57d9-4b8d-b919-f08fd56187c3",
        "value": "instantservices1.ddnsguru.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:04+00:00",
        "timestamp": "1776772805",
        "to_ids": false,
        "type": "url",
        "uuid": "12387deb-25c6-4899-b61b-836d2d1b9831",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/79754948f5aa78a8e99ae74b8a1710bb26d5d543",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:05+00:00",
        "timestamp": "1776772806",
        "to_ids": false,
        "type": "url",
        "uuid": "0f9de749-9c44-4f95-a07b-e85fe1dd8859",
        "value": "https://x.com/muha2xmad/status/2046553593394721207",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:06+00:00",
        "timestamp": "1776772806",
        "to_ids": true,
        "type": "domain",
        "uuid": "d821a7e7-6fe8-422f-87bd-319de5f6cfe4",
        "value": "gjqd.livespacezone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:06+00:00",
        "timestamp": "1776772806",
        "to_ids": true,
        "type": "domain",
        "uuid": "442581c6-03ee-4d85-84cc-9fc1cf857b76",
        "value": "mmu6.livespacezone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:06+00:00",
        "timestamp": "1776772806",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dcbb64f-bdbc-4732-b14d-4fda603c13f1",
        "value": "portstringpge.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:06+00:00",
        "timestamp": "1776772806",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a9c8319-04d4-4706-ba0f-a628fc65c1f0",
        "value": "loadingminimalverifv1.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:06+00:00",
        "timestamp": "1776772806",
        "to_ids": true,
        "type": "domain",
        "uuid": "70f30234-cf54-4dfd-a33f-f567b0804d84",
        "value": "7d4ba1ae.loadingminimalverifv1.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:06+00:00",
        "timestamp": "1776772807",
        "to_ids": false,
        "type": "url",
        "uuid": "0f7d92af-36de-4f79-87ed-047c6f0c08f4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/77a9ab05a2d62a4db802e8309714cbae982c5c2e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:07+00:00",
        "timestamp": "1776772807",
        "to_ids": false,
        "type": "url",
        "uuid": "d0ec17c1-1148-41fb-b0bd-5a441a04810a",
        "value": "https://x.com/smica83/status/2046544556603150503",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:07+00:00",
        "timestamp": "1776772807",
        "to_ids": false,
        "type": "url",
        "uuid": "52d6eaef-41c2-4fb9-b534-d2b221d60746",
        "value": "https://x.com/JAMESWT_WT/status/2046551624286388355",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:07+00:00",
        "timestamp": "1776772807",
        "to_ids": false,
        "type": "url",
        "uuid": "a6f4e63c-44d8-449a-a707-b86c81a02039",
        "value": "https://www.virustotal.com/gui/file/0c3d64b1310fe9ce85aae9f250dcb9bca38141dfa7b0f17e0408c6a204dc1846/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:07+00:00",
        "timestamp": "1776772807",
        "to_ids": false,
        "type": "url",
        "uuid": "74fff127-c429-48d7-807f-a5f5e99722e8",
        "value": "https://www.virustotal.com/gui/file/85935099e5616c7c63c6d49c307d15abd1333f8cab69f9c20eb328962f1cb383/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:07+00:00",
        "timestamp": "1776772807",
        "to_ids": true,
        "type": "domain",
        "uuid": "3805a254-18db-4c77-b764-cb966bdce4a5",
        "value": "docshub-secure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:07+00:00",
        "timestamp": "1776772808",
        "to_ids": false,
        "type": "url",
        "uuid": "5cccb77f-7526-4c9f-8f90-562b0329644b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/911db5439063e5ec34623dd497a4d41da4d1d256",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:08+00:00",
        "timestamp": "1776772808",
        "to_ids": false,
        "type": "url",
        "uuid": "277a6d64-e54e-47af-8ab1-b150d980b878",
        "value": "https://x.com/LukasStefanko/status/1973697698248413572",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:08+00:00",
        "timestamp": "1776772808",
        "to_ids": false,
        "type": "url",
        "uuid": "5ea9c228-6020-467e-93a1-b765a56e57ed",
        "value": "https://www.welivesecurity.com/en/eset-research/new-spyware-campaigns-target-privacy-conscious-android-users-uae",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:08+00:00",
        "timestamp": "1776772808",
        "to_ids": false,
        "type": "url",
        "uuid": "a0e9c697-145c-456e-83b1-892322cd739a",
        "value": "https://x.com/volrant136/status/1973812417546367175",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:08+00:00",
        "timestamp": "1776772808",
        "to_ids": false,
        "type": "url",
        "uuid": "ed9d55d5-9a46-4d59-84db-50b7d2508251",
        "value": "https://x.com/volrant136/status/1973812523528032641",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:08+00:00",
        "timestamp": "1776772809",
        "to_ids": false,
        "type": "url",
        "uuid": "cad5f079-ec60-4550-bf09-bf84f4a830dd",
        "value": "https://x.com/volrant136/status/1973813021836464272",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772809",
        "to_ids": false,
        "type": "url",
        "uuid": "5304f9f4-bab9-470d-ac3e-600e0f16a9e6",
        "value": "https://www.virustotal.com/gui/file/9a864f104e7fabb41e65847f78f9fb2fbac0bc1196ea61cafce19334ce28cb44/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772809",
        "to_ids": false,
        "type": "url",
        "uuid": "681776b6-c7b5-4286-86f6-46220d367148",
        "value": "https://www.virustotal.com/gui/file/2a7a3c72afcbc0d7804696e6dc96f69e775df235544d264e130976d1f95964a9/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772809",
        "to_ids": true,
        "type": "domain",
        "uuid": "cda7773a-af7a-4072-bbad-96cdfedcbe8c",
        "value": "027b1003-dd24-4e93-b74b-8282ff4d6586.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772809",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cd2934e-43bc-4c94-8e34-b44e5debcfb4",
        "value": "2.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772809",
        "to_ids": true,
        "type": "domain",
        "uuid": "21bc7283-02e5-4383-bab9-566527283625",
        "value": "2fa-manage.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772809",
        "to_ids": true,
        "type": "domain",
        "uuid": "daa40e31-4b62-42f8-95a9-35ae29305dc5",
        "value": "2fa-mange.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:09+00:00",
        "timestamp": "1776772810",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a7c1c24-b726-44da-8e7a-3e88e9d9b280",
        "value": "2fa-sgnl.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:10+00:00",
        "timestamp": "1776772810",
        "to_ids": true,
        "type": "domain",
        "uuid": "6de4d902-b417-47dc-9759-9305991c9e40",
        "value": "2fa-sgnl.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:10+00:00",
        "timestamp": "1776772810",
        "to_ids": true,
        "type": "domain",
        "uuid": "287888eb-23c4-4afc-b7a9-16b58979a41a",
        "value": "2fa-signal.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:10+00:00",
        "timestamp": "1776772810",
        "to_ids": true,
        "type": "domain",
        "uuid": "79c54b03-bea5-46e2-ab03-b91209281b33",
        "value": "349383a5-557c-43e0-a3e8-85ca92fc70d8.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:10+00:00",
        "timestamp": "1776772810",
        "to_ids": true,
        "type": "domain",
        "uuid": "07c2ab58-c3d5-4882-a061-c828883a97fc",
        "value": "3aac32aa-df99-47f8-90c3-697dc9d98442.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:10+00:00",
        "timestamp": "1776772810",
        "to_ids": true,
        "type": "domain",
        "uuid": "75a5ff0d-fb1f-42ff-a073-3318b731ab3d",
        "value": "3e8ce93b-34eb-4d31-9243-4481ffb98cd3.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:10+00:00",
        "timestamp": "1776772811",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e5d3eeb-845a-4df7-b055-5fe71de3afcb",
        "value": "43e92d22-0923-4424-8e4c-6f1aa0397af4.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:11+00:00",
        "timestamp": "1776772811",
        "to_ids": true,
        "type": "domain",
        "uuid": "880eb372-fe42-47e9-9f99-033753741ca5",
        "value": "4f66072b-2276-4136-acaa-a1a88e294e4f.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:11+00:00",
        "timestamp": "1776772811",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c650ccc-5aea-4a82-845b-81693c5b58ce",
        "value": "4instalments.web-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:11+00:00",
        "timestamp": "1776772811",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfe23cb9-37d0-48d9-b6bb-b461a11645d2",
        "value": "53aef03b-0a86-4497-8c1e-23cfcd9f96e5.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:11+00:00",
        "timestamp": "1776772811",
        "to_ids": true,
        "type": "domain",
        "uuid": "970ecc6b-5f08-4350-bdc0-566ef54e4a0e",
        "value": "54864-ov.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:11+00:00",
        "timestamp": "1776772811",
        "to_ids": true,
        "type": "domain",
        "uuid": "9673774a-93c0-4aa2-a394-5e9270508b3f",
        "value": "58352d6a-e1a4-489f-b46e-e74535bf677c.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:11+00:00",
        "timestamp": "1776772812",
        "to_ids": true,
        "type": "domain",
        "uuid": "313453ef-d43f-458c-b005-92482f3a98bc",
        "value": "5be54f27-d133-4414-ab97-a28460472e9a.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:12+00:00",
        "timestamp": "1776772812",
        "to_ids": true,
        "type": "domain",
        "uuid": "626e18cf-70ff-4f02-84dd-71eccecefcb5",
        "value": "60d22c9b-8946-4d84-b73c-3ff6610e49a1.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:12+00:00",
        "timestamp": "1776772812",
        "to_ids": true,
        "type": "domain",
        "uuid": "016f37b3-748e-4635-8368-8e7c7a61e01c",
        "value": "6441056b613c32a9.appleid-number.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:12+00:00",
        "timestamp": "1776772812",
        "to_ids": true,
        "type": "domain",
        "uuid": "2da6b813-d98c-4eff-9627-53356de1390c",
        "value": "67f34c48-a901-44f1-af9d-81c80b03b5ea.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:12+00:00",
        "timestamp": "1776772812",
        "to_ids": true,
        "type": "domain",
        "uuid": "70c29691-9030-460c-91c1-1425d2a64ad6",
        "value": "69f65276-f9bc-40d9-9b53-c3afe3abf4fb.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:12+00:00",
        "timestamp": "1776772812",
        "to_ids": true,
        "type": "domain",
        "uuid": "41d9eb79-e6b9-4518-a86b-b60bc4c5d069",
        "value": "734yhihudnsifsdf.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:12+00:00",
        "timestamp": "1776772813",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a5f90ca-29a5-48ab-bb85-a02be2f7c2d4",
        "value": "7381d8b7-6549-4c38-8f8e-069e1c25a577.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:13+00:00",
        "timestamp": "1776772813",
        "to_ids": true,
        "type": "domain",
        "uuid": "20b5e628-2561-4a2f-bbbb-448d247c08b9",
        "value": "74d1f32b-1098-43c1-99ae-3d1d6e14afd7.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:13+00:00",
        "timestamp": "1776772813",
        "to_ids": true,
        "type": "domain",
        "uuid": "842383c6-2352-4b95-8067-1412d0176202",
        "value": "76194fdc-fde2-4128-b4e5-6e185e89d224.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:13+00:00",
        "timestamp": "1776772813",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d1e735e-c5d1-4e0c-9c59-4adddb5ba61f",
        "value": "7d89036a-0e91-426f-b629-516286d7b053.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:13+00:00",
        "timestamp": "1776772813",
        "to_ids": true,
        "type": "domain",
        "uuid": "37d44c6e-4e85-4855-a070-b69ff7d292a3",
        "value": "8437ee10-9da5-44b0-897c-749b07c47f41.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:13+00:00",
        "timestamp": "1776772814",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c9b5adf-811e-4c99-ae78-f63d8251064f",
        "value": "84d4d991-f6cf-4225-b72a-0123fc2508f3.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:14+00:00",
        "timestamp": "1776772814",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddfd002c-e57a-476b-a958-d60e28b4b88e",
        "value": "8e968722-92c0-4944-93da-58c9ad8f7eeb.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:14+00:00",
        "timestamp": "1776772814",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc7146a6-d70f-4bd6-b1e4-e7814a2c70ef",
        "value": "952cd7f5-55c2-472f-bc9d-08487ef75661.random.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:14+00:00",
        "timestamp": "1776772814",
        "to_ids": true,
        "type": "domain",
        "uuid": "6779d5a8-f606-4aa4-b325-9c84e175b524",
        "value": "963d2ae3-9d60-4704-8262-5854b6c02d29.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:14+00:00",
        "timestamp": "1776772814",
        "to_ids": true,
        "type": "domain",
        "uuid": "6721d668-0b0e-4d58-a59b-7d5a4865c7b4",
        "value": "978c6bd2-fcba-4758-917e-dc6298b61632.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:14+00:00",
        "timestamp": "1776772814",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9136ff7-0175-4395-a499-61e1d36133b6",
        "value": "98798hnuyf8diufsd.ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:14+00:00",
        "timestamp": "1776772815",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc1e29de-e1b3-444c-9b8e-55cb82c15522",
        "value": "99e27236-9c0a-4c7f-b114-f181d0c00173.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:15+00:00",
        "timestamp": "1776772815",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc7bac48-b338-4d48-9949-622781d3e4b1",
        "value": "a.b.c.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:15+00:00",
        "timestamp": "1776772815",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e3faeb2-f0b4-4047-9245-ed3fb0d32405",
        "value": "a.b.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:15+00:00",
        "timestamp": "1776772815",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0355695-3ab5-4c51-8f2a-af13a7975944",
        "value": "a.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:15+00:00",
        "timestamp": "1776772815",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4d2bc3d-c3fc-4444-bf4d-63a9b97501ce",
        "value": "a.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:15+00:00",
        "timestamp": "1776772815",
        "to_ids": true,
        "type": "domain",
        "uuid": "036ff742-c3cd-449c-ae59-7dd3389a3cd2",
        "value": "a33d9f71-6bcd-41d3-9f7d-50a90628551f.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:15+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "7452220a-e722-44eb-8464-b1e46a127087",
        "value": "aa.id-us.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:16+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6ec9172-74d9-4ecc-b31a-6d7997c99703",
        "value": "abc-newalt.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:16+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "996a867c-e7ef-456b-ba34-fe98099da234",
        "value": "abc-ninealt.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:16+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "6aeace6f-f051-4e32-9446-14966ce75ef0",
        "value": "abc.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:16+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "475b406b-97f8-4595-b072-27c4ecf94237",
        "value": "abc1.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:16+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7d592a3-aca1-43c6-9df6-58731f3b971b",
        "value": "abcde-res.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:16+00:00",
        "timestamp": "1776772816",
        "to_ids": true,
        "type": "domain",
        "uuid": "955f42d5-a27a-4769-9bc4-445b57035ec5",
        "value": "abcde-ress.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772817",
        "to_ids": true,
        "type": "domain",
        "uuid": "113b2c5a-1f39-4c1f-aed0-bbd026203dd7",
        "value": "abcdef.ress.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772817",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cde7214-04e2-4abe-a223-7414288d4de0",
        "value": "abde-alt.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772817",
        "to_ids": true,
        "type": "domain",
        "uuid": "a110a032-a8e9-4806-98b5-9b3e82862c92",
        "value": "ac-id.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772817",
        "to_ids": true,
        "type": "domain",
        "uuid": "be4383c7-f493-488d-9785-336908cd0995",
        "value": "ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772817",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2cdba90-176a-4f9c-887f-886a1ec8f082",
        "value": "ac-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772817",
        "to_ids": true,
        "type": "domain",
        "uuid": "94bb2616-8b7a-47c6-953c-227f63476eda",
        "value": "acc-hot-mail.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:17+00:00",
        "timestamp": "1776772818",
        "to_ids": true,
        "type": "domain",
        "uuid": "986da0af-2c06-42e7-9cde-d0a3bc146cac",
        "value": "acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:18+00:00",
        "timestamp": "1776772818",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b6f30da-4e17-4d49-841b-17c05aabfe20",
        "value": "account-live.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:18+00:00",
        "timestamp": "1776772818",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1f23700-8e98-4178-a0f7-aac88f686da6",
        "value": "account-live.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:18+00:00",
        "timestamp": "1776772818",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cd05553-e52c-4883-b1ed-b97a17fff696",
        "value": "account-protection.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:18+00:00",
        "timestamp": "1776772818",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc84d9ed-809c-4e3e-81f9-8e03f6a0abaf",
        "value": "account-update.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:18+00:00",
        "timestamp": "1776772818",
        "to_ids": true,
        "type": "domain",
        "uuid": "69308938-fc3b-49b5-acac-4d954e88fc06",
        "value": "account-validation-required.ct.ws",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:18+00:00",
        "timestamp": "1776772819",
        "to_ids": true,
        "type": "domain",
        "uuid": "31a5c3e2-e24d-47b0-8402-330260a70851",
        "value": "account-yahoo.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:19+00:00",
        "timestamp": "1776772819",
        "to_ids": true,
        "type": "domain",
        "uuid": "57766cfd-0d13-4033-9cb1-8878b35c46d1",
        "value": "account.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:19+00:00",
        "timestamp": "1776772819",
        "to_ids": true,
        "type": "domain",
        "uuid": "3db95d59-9a02-4eb3-a318-90165589601e",
        "value": "account.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:19+00:00",
        "timestamp": "1776772819",
        "to_ids": true,
        "type": "domain",
        "uuid": "cda0e77f-77b1-41c3-ac38-43ae4ec5854c",
        "value": "accountcapabilities-pa.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:19+00:00",
        "timestamp": "1776772819",
        "to_ids": true,
        "type": "domain",
        "uuid": "f15beb8d-5be5-48fa-b3d8-6ba87f38e5a3",
        "value": "accountcapabilities-pa.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:19+00:00",
        "timestamp": "1776772819",
        "to_ids": true,
        "type": "domain",
        "uuid": "773709ee-eaca-4dba-917c-c9464cca1b55",
        "value": "accounts-apple.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:19+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e13ff8e-c149-48a3-a7d0-c76958013f31",
        "value": "accounts.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "04918e5e-f61a-430b-aa46-ea48fe37c35f",
        "value": "accounts.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "e96a64fb-4fdc-4986-9306-6952ced0b875",
        "value": "accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "930eee0c-7937-4b2d-bb53-c37abef1177f",
        "value": "adm.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "213813be-8fee-4699-8cb5-7379480c5282",
        "value": "admin.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9671676-e2c9-4ccb-a92f-02d2258a55bd",
        "value": "admin.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772820",
        "to_ids": true,
        "type": "domain",
        "uuid": "89a1f6fd-7a87-48d9-8aca-18017363c138",
        "value": "admin.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:20+00:00",
        "timestamp": "1776772821",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ee41c87-4d5a-4a45-a3b0-cc9208be735a",
        "value": "admin.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:21+00:00",
        "timestamp": "1776772821",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff9c1008-5b31-4366-b8d6-94d6885329a7",
        "value": "ae3eb0c0-ab31-4ea7-a29c-c5886e35721a.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:21+00:00",
        "timestamp": "1776772821",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e0f016-5f9d-4871-8509-a2e4008a095d",
        "value": "aging.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:21+00:00",
        "timestamp": "1776772821",
        "to_ids": true,
        "type": "domain",
        "uuid": "12e49790-21e0-4cce-9f84-6fb2c7c1447a",
        "value": "al-ap-cl.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:21+00:00",
        "timestamp": "1776772821",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ea5004b-7f83-4ef2-af1a-f711eecba3da",
        "value": "ale-soun.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:21+00:00",
        "timestamp": "1776772821",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d2b50fa-0b43-4887-8778-e2c244ef78d8",
        "value": "ale-soun.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:21+00:00",
        "timestamp": "1776772822",
        "to_ids": true,
        "type": "domain",
        "uuid": "efff63dc-bc19-479b-8081-f26b20ac8709",
        "value": "ale763873497ty73.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:22+00:00",
        "timestamp": "1776772822",
        "to_ids": true,
        "type": "domain",
        "uuid": "51d768fd-813e-4edf-9a8a-8634e98d6c0c",
        "value": "aler-get.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:22+00:00",
        "timestamp": "1776772822",
        "to_ids": true,
        "type": "domain",
        "uuid": "18999dee-c8f5-49dc-bc49-c7e864a65281",
        "value": "aler-new.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:22+00:00",
        "timestamp": "1776772822",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e2c3ec2-d037-463c-9179-03c83a59c2bb",
        "value": "aler-new.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:22+00:00",
        "timestamp": "1776772822",
        "to_ids": true,
        "type": "domain",
        "uuid": "1169c21a-dbcc-46b8-a6e5-338a0250bc4a",
        "value": "aler762b-9873bc78.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:22+00:00",
        "timestamp": "1776772822",
        "to_ids": true,
        "type": "domain",
        "uuid": "d43fac2e-52d1-436f-bbff-49616275f816",
        "value": "aler78-fhgue.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:22+00:00",
        "timestamp": "1776772823",
        "to_ids": true,
        "type": "domain",
        "uuid": "07fd9f49-63c6-4bfe-9101-9d8922ac4218",
        "value": "alerjf7uh3ui8ys.serviceinfo.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:23+00:00",
        "timestamp": "1776772823",
        "to_ids": true,
        "type": "domain",
        "uuid": "37e389c2-752a-4fdc-8c12-b5a1e2c68cc3",
        "value": "alert-new.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:23+00:00",
        "timestamp": "1776772823",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dbd17f3-8bfb-4289-8dcc-0c76934a5f85",
        "value": "alet-new.me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:23+00:00",
        "timestamp": "1776772823",
        "to_ids": true,
        "type": "domain",
        "uuid": "52aac522-afe5-4257-be6a-6686407f65c2",
        "value": "alet-uebu.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:23+00:00",
        "timestamp": "1776772823",
        "to_ids": true,
        "type": "domain",
        "uuid": "4caa6af8-3dd4-4d01-b0f5-5c4b3fe78225",
        "value": "alpha-visualize.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:23+00:00",
        "timestamp": "1776772823",
        "to_ids": true,
        "type": "domain",
        "uuid": "1afe6090-7bbb-46b8-b363-70ec74752e26",
        "value": "alr-res.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:23+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "de89bb26-a851-4f8d-a3ae-4893fa0f7737",
        "value": "alt-tyu.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:24+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbd17ba8-0397-4815-9475-1b9e5e052732",
        "value": "alumni-columbia-edu-val.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:24+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "afc8c040-eef7-4c22-a4b8-b9d88aa7e493",
        "value": "android.clients.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:24+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d3a6b29-3fcf-47d0-aa6b-f2b7e99d8814",
        "value": "android.clients.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:24+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "c56b0091-4027-4012-b4c4-bb5df53e693d",
        "value": "antrxyke.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:24+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "12a00ca0-f3df-4cd5-b226-ed1e0019ade2",
        "value": "apg-cps.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:24+00:00",
        "timestamp": "1776772824",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2afdeb4-7bcf-49d1-84c0-50b27c8bf71f",
        "value": "api.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772825",
        "to_ids": true,
        "type": "domain",
        "uuid": "160e2a58-4fd1-4a23-bd8d-e3c29eb1c855",
        "value": "api.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772825",
        "to_ids": true,
        "type": "domain",
        "uuid": "606b1ba5-869e-4854-b2b6-46d33dc02a6e",
        "value": "api.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772825",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a8a5523-3d4a-4468-9962-b281b31274a2",
        "value": "api.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772825",
        "to_ids": true,
        "type": "domain",
        "uuid": "51ae2835-94c7-40b1-b3cb-ae766dc73a49",
        "value": "api.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772825",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce7535a0-d74a-4b7b-9673-eeb510f0edc3",
        "value": "api.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772825",
        "to_ids": true,
        "type": "domain",
        "uuid": "94435ead-e9bc-48e8-a39e-aa59e33b8f79",
        "value": "api.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:25+00:00",
        "timestamp": "1776772826",
        "to_ids": true,
        "type": "domain",
        "uuid": "e214d51c-b69e-4083-9567-f83fb7471c9e",
        "value": "api.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:26+00:00",
        "timestamp": "1776772826",
        "to_ids": true,
        "type": "domain",
        "uuid": "84437b8e-d213-4102-8775-f522021743ed",
        "value": "api.ydtyuehugufgeygushguysgudyhg.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:26+00:00",
        "timestamp": "1776772826",
        "to_ids": true,
        "type": "domain",
        "uuid": "abbc906f-dc59-4bf5-8fa1-4029d4b17c7c",
        "value": "apis.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:26+00:00",
        "timestamp": "1776772826",
        "to_ids": true,
        "type": "domain",
        "uuid": "1031a5e4-e769-465e-8a98-61799cd1ae97",
        "value": "apis.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:26+00:00",
        "timestamp": "1776772826",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8ac26ef-bb27-4258-ac81-e2b32b904235",
        "value": "app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:26+00:00",
        "timestamp": "1776772826",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d2d745d-9c05-47ae-be73-8d2de18d4769",
        "value": "app-info.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:26+00:00",
        "timestamp": "1776772827",
        "to_ids": true,
        "type": "domain",
        "uuid": "afa338fe-c878-4651-a9e2-24ca970f31ac",
        "value": "app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:27+00:00",
        "timestamp": "1776772827",
        "to_ids": true,
        "type": "domain",
        "uuid": "50d21ec9-4e37-4b45-a5d3-9a1fa634c93d",
        "value": "app-signal.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:27+00:00",
        "timestamp": "1776772827",
        "to_ids": true,
        "type": "domain",
        "uuid": "16156a53-247b-443e-b64b-ea734b28585b",
        "value": "app.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:27+00:00",
        "timestamp": "1776772827",
        "to_ids": true,
        "type": "domain",
        "uuid": "711168d6-a50a-49ed-9ede-93f77555f5b6",
        "value": "app.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:27+00:00",
        "timestamp": "1776772827",
        "to_ids": true,
        "type": "domain",
        "uuid": "1273393f-a8ed-41a4-bf36-558ea61adc1b",
        "value": "app.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:27+00:00",
        "timestamp": "1776772827",
        "to_ids": true,
        "type": "domain",
        "uuid": "e216a534-adef-4c59-a48c-b42992e1207d",
        "value": "app.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:27+00:00",
        "timestamp": "1776772828",
        "to_ids": true,
        "type": "domain",
        "uuid": "17a42202-313b-45bb-bbc8-5baaca8c19a5",
        "value": "app.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:28+00:00",
        "timestamp": "1776772828",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b0c0548-03e5-4e2c-9491-17646e88b961",
        "value": "app.id-ar.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:28+00:00",
        "timestamp": "1776772828",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ff11fc8-ce75-406d-a2d4-f7d73c889fe2",
        "value": "app.ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:28+00:00",
        "timestamp": "1776772828",
        "to_ids": true,
        "type": "domain",
        "uuid": "e286a907-69ef-4481-ab42-ac9dd641749a",
        "value": "app.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:28+00:00",
        "timestamp": "1776772828",
        "to_ids": true,
        "type": "domain",
        "uuid": "145a444b-faf3-42f7-b185-a9fcaabbc5ce",
        "value": "app.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:28+00:00",
        "timestamp": "1776772828",
        "to_ids": true,
        "type": "domain",
        "uuid": "76b53128-8a1d-45a9-a1cf-24514348c338",
        "value": "app.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:28+00:00",
        "timestamp": "1776772829",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e3b0072-5b67-40dc-8ffc-cfa41771062d",
        "value": "apple-id.com.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:29+00:00",
        "timestamp": "1776772829",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2170441-5e67-48fc-b800-59f445d4fcca",
        "value": "apple.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:29+00:00",
        "timestamp": "1776772829",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4b78977-1261-446e-942e-f4c309135cdd",
        "value": "apple.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:29+00:00",
        "timestamp": "1776772829",
        "to_ids": true,
        "type": "domain",
        "uuid": "72a3d8bc-2078-4b45-a7f4-350d87ac1993",
        "value": "apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:29+00:00",
        "timestamp": "1776772829",
        "to_ids": true,
        "type": "domain",
        "uuid": "90443272-5e95-4eb0-8a15-d66bf2b87d8d",
        "value": "apple.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:29+00:00",
        "timestamp": "1776772829",
        "to_ids": true,
        "type": "domain",
        "uuid": "a79aaa9b-0ad2-4837-8e5e-e01f5825d07c",
        "value": "apple.com.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:29+00:00",
        "timestamp": "1776772830",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0f91d75-b7ad-4712-b013-60601d221285",
        "value": "apple.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:30+00:00",
        "timestamp": "1776772830",
        "to_ids": true,
        "type": "domain",
        "uuid": "128342da-d701-47f0-b2c0-ba5cd394c7d0",
        "value": "apple.id-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:30+00:00",
        "timestamp": "1776772830",
        "to_ids": true,
        "type": "domain",
        "uuid": "a57ca1b4-1e7e-42ed-82c7-7d6f65c6bb7f",
        "value": "appleid-apple-com.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:30+00:00",
        "timestamp": "1776772830",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb0d8eb3-f6a4-4b49-a8e8-4d4102f806d9",
        "value": "appleid-apple.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:30+00:00",
        "timestamp": "1776772830",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d671237-e661-4952-92d0-b5f9b3b4d437",
        "value": "appleid-apple.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:30+00:00",
        "timestamp": "1776772830",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f4a9175-06d6-43c1-a00d-c0e0499e91cf",
        "value": "appleid-apple.com-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:30+00:00",
        "timestamp": "1776772831",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1a04606-dadb-4fcb-92e0-4d6fc229961b",
        "value": "appleid-apple.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:31+00:00",
        "timestamp": "1776772831",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebfcfa08-e2d0-4c77-8a2f-2031526b2825",
        "value": "appleid-apple.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:31+00:00",
        "timestamp": "1776772831",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ed81dc9-176c-44f9-a8d7-81200eb301d9",
        "value": "appleid-apple.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:31+00:00",
        "timestamp": "1776772831",
        "to_ids": true,
        "type": "domain",
        "uuid": "19f433a6-a3d4-41b3-9a18-a9801fe84202",
        "value": "appleid-apple.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:31+00:00",
        "timestamp": "1776772831",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca550881-47ae-4859-b7a6-29bef8c0dc3c",
        "value": "appleid-apple.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:31+00:00",
        "timestamp": "1776772831",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb7abf9c-3aab-4eac-b962-5cfe80bd6afb",
        "value": "appleid-apple.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:31+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9b38884-e125-407e-b96b-baa70b350779",
        "value": "appleid-apple.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "9922a09e-ac0f-4795-bb04-1017dcd78dc3",
        "value": "appleid-apple.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "a63c26b5-d95e-480a-8d14-c7a379153775",
        "value": "appleid-apple.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "37a3f729-6638-473f-b785-502164f5c9ae",
        "value": "appleid-apple.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "f92bbdce-5e48-488c-b8b6-d90e4d820bb2",
        "value": "appleid-number.com-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "83b2473e-011e-43c7-a9c2-535ae11456cf",
        "value": "appleid-number.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772832",
        "to_ids": true,
        "type": "domain",
        "uuid": "7931829e-6b6c-4cdc-b3a3-44e1b7edbea5",
        "value": "appleid-number.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:32+00:00",
        "timestamp": "1776772833",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d814e5a-5f83-42cb-8ad5-c9c35ff3229e",
        "value": "appleid-verify.ac-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:33+00:00",
        "timestamp": "1776772833",
        "to_ids": true,
        "type": "domain",
        "uuid": "11ac3ebc-4713-4150-b7b8-a6a73f91839e",
        "value": "appleid.apple.com.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:33+00:00",
        "timestamp": "1776772833",
        "to_ids": true,
        "type": "domain",
        "uuid": "3db24f18-b6d7-4465-bfbc-3f1e8186342a",
        "value": "appleid.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:33+00:00",
        "timestamp": "1776772833",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9a50bf4-998c-4b36-a920-d1902186db1f",
        "value": "appleid.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:33+00:00",
        "timestamp": "1776772833",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe1c44a0-9ca0-47d9-b479-4ce416fe9d16",
        "value": "appleids-manage.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:33+00:00",
        "timestamp": "1776772833",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e400018-be5a-46b8-8634-c46e15cb497d",
        "value": "appleids-trusted-number.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:33+00:00",
        "timestamp": "1776772834",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ee05378-ae80-43df-b449-026e290c283f",
        "value": "appleids-truted-number.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:34+00:00",
        "timestamp": "1776772834",
        "to_ids": true,
        "type": "domain",
        "uuid": "df813ded-3276-4e6b-bc2f-b15300d5beef",
        "value": "appleids.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:34+00:00",
        "timestamp": "1776772834",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfebf218-54c2-4e2e-8162-c4e38615a74e",
        "value": "ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:34+00:00",
        "timestamp": "1776772834",
        "to_ids": true,
        "type": "domain",
        "uuid": "907fcfb3-c7aa-4b71-94e2-67510fb8186c",
        "value": "ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:34+00:00",
        "timestamp": "1776772834",
        "to_ids": true,
        "type": "domain",
        "uuid": "60cfc20d-1c02-4e1c-b34a-071007b41a56",
        "value": "ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:34+00:00",
        "timestamp": "1776772834",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f78234b-65f2-483e-a5cb-17d98ced1b32",
        "value": "ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:34+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef8e67b1-6c55-41cb-b19a-cc7d35bd35a4",
        "value": "ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7d05000-4cf3-4337-a281-2d8d965886e0",
        "value": "ar-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2038a8e-1863-4669-9a3b-69483c28a387",
        "value": "asdf.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "00e74bc1-95e2-4445-a9dd-4520b9e1711a",
        "value": "asdfkljlkdsdd.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8bd4d6d-a70a-4dc8-9188-20115aa7e1d0",
        "value": "asset.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "2747f62f-6319-4fe1-872b-f48d1abac786",
        "value": "assets.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772835",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c6a2e89-01c0-4b87-957e-8ec6d1877afa",
        "value": "assets.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:35+00:00",
        "timestamp": "1776772836",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e721824-5738-420e-9d5e-065c25002a0f",
        "value": "auth-manage.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:36+00:00",
        "timestamp": "1776772836",
        "to_ids": true,
        "type": "domain",
        "uuid": "53fd9a7e-5f65-4fa7-a400-834f68ceb83b",
        "value": "auth-ms-manage.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:36+00:00",
        "timestamp": "1776772836",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2950640-aec7-4efc-842e-baed7b2bb0ab",
        "value": "auth-rec-mng.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:36+00:00",
        "timestamp": "1776772836",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b26483a-7df8-4c82-b7fd-3931bdca4966",
        "value": "auth-rev-wi.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:36+00:00",
        "timestamp": "1776772836",
        "to_ids": true,
        "type": "domain",
        "uuid": "e11d97db-171f-4572-9e5e-3ff4a8cde570",
        "value": "auth-rev.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:36+00:00",
        "timestamp": "1776772836",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4c561b2-2f1e-42f5-8214-d16c851ade08",
        "value": "auth-rev.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:36+00:00",
        "timestamp": "1776772837",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfae1da4-2a20-4ae2-97c3-c099ecfd1de6",
        "value": "auth-rev.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:37+00:00",
        "timestamp": "1776772837",
        "to_ids": true,
        "type": "domain",
        "uuid": "09b0355e-591a-46a4-a513-78b81b13b77b",
        "value": "auth-rev.ht-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:37+00:00",
        "timestamp": "1776772837",
        "to_ids": true,
        "type": "domain",
        "uuid": "971b3df5-2042-4a3b-b048-53052176254d",
        "value": "auth-rev.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:37+00:00",
        "timestamp": "1776772837",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8737bd1-d084-4ca4-91f9-3681e1457390",
        "value": "auth-subb.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:37+00:00",
        "timestamp": "1776772837",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea21630a-5af0-4bfb-9669-41b911b7771e",
        "value": "auth.connect.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:37+00:00",
        "timestamp": "1776772837",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1585c78-64fb-4bac-a43a-76844b581c3b",
        "value": "auth.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:37+00:00",
        "timestamp": "1776772838",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cf041ac-bcb3-4019-a9c0-7df51a13238d",
        "value": "auth.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:38+00:00",
        "timestamp": "1776772838",
        "to_ids": true,
        "type": "domain",
        "uuid": "13146044-ba60-48a7-9253-c5798dcd2c4c",
        "value": "auth.rec.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:38+00:00",
        "timestamp": "1776772838",
        "to_ids": true,
        "type": "domain",
        "uuid": "2920368f-6ff0-4301-b374-9863da34b8b6",
        "value": "autoconfig.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:38+00:00",
        "timestamp": "1776772838",
        "to_ids": true,
        "type": "domain",
        "uuid": "f355aec5-d03d-41f7-91db-97f9661fece4",
        "value": "autoconfig.host.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:38+00:00",
        "timestamp": "1776772838",
        "to_ids": true,
        "type": "domain",
        "uuid": "54d46d7a-6637-4bab-b017-421e197db7f1",
        "value": "autoconfig.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:38+00:00",
        "timestamp": "1776772838",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e66f7f4-2e4c-4583-9779-7d83384de179",
        "value": "autoconfig.lcloud.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:38+00:00",
        "timestamp": "1776772839",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a5e434c-65fc-48c6-9145-7c338adade03",
        "value": "b.c.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:39+00:00",
        "timestamp": "1776772839",
        "to_ids": true,
        "type": "domain",
        "uuid": "e99046ef-e8ec-47fe-b5d4-548e25734ab5",
        "value": "b.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:39+00:00",
        "timestamp": "1776772839",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb9a78fb-338e-4a9d-8409-06e5a89d4579",
        "value": "b0d782ca-68ae-4ea6-adea-db30255b4786.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:39+00:00",
        "timestamp": "1776772839",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fd853b5-855b-4614-a50a-714879e93e38",
        "value": "b4622d8c-9d06-4fb2-b02e-af37631d5365.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:39+00:00",
        "timestamp": "1776772839",
        "to_ids": true,
        "type": "domain",
        "uuid": "d365cf54-cf28-47d1-a306-bb86c9bad80d",
        "value": "b5f0a8b5-d161-4d11-afde-f82b48bb5766.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:39+00:00",
        "timestamp": "1776772839",
        "to_ids": true,
        "type": "domain",
        "uuid": "e414673e-27f2-4393-8fa1-196f4bc694f2",
        "value": "backend.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:39+00:00",
        "timestamp": "1776772840",
        "to_ids": true,
        "type": "domain",
        "uuid": "d380f461-52b4-4edd-b7c8-2d829b317770",
        "value": "backend.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:40+00:00",
        "timestamp": "1776772840",
        "to_ids": true,
        "type": "domain",
        "uuid": "35e02853-fd4b-4454-abb7-90786e54c8c8",
        "value": "backup.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:40+00:00",
        "timestamp": "1776772840",
        "to_ids": true,
        "type": "domain",
        "uuid": "75006ed1-625d-4886-8996-e80d14ba34f0",
        "value": "bb.id-us.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:40+00:00",
        "timestamp": "1776772840",
        "to_ids": true,
        "type": "domain",
        "uuid": "53f0b06b-98e7-4343-a996-e179135d82f2",
        "value": "bdisk.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:40+00:00",
        "timestamp": "1776772840",
        "to_ids": true,
        "type": "domain",
        "uuid": "06dc928c-b526-4804-a475-cda1bacebf84",
        "value": "beta.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:40+00:00",
        "timestamp": "1776772840",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecbf7f51-759a-4206-ad68-7639a75dabb6",
        "value": "beta.superset.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:40+00:00",
        "timestamp": "1776772841",
        "to_ids": true,
        "type": "domain",
        "uuid": "67f0c116-c62b-405f-adde-000597c288e3",
        "value": "bf4398aa-a6c5-4a80-bfda-68132f32059d.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:41+00:00",
        "timestamp": "1776772841",
        "to_ids": true,
        "type": "domain",
        "uuid": "d696725b-8ceb-4b0f-84ad-d2d889b705a8",
        "value": "bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:41+00:00",
        "timestamp": "1776772841",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e0d77f9-1015-47f8-b85d-5821ae273446",
        "value": "bi-ci.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:41+00:00",
        "timestamp": "1776772841",
        "to_ids": true,
        "type": "domain",
        "uuid": "cced9259-babc-44ae-84cd-4d4cf14df0da",
        "value": "big.com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:41+00:00",
        "timestamp": "1776772841",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8a5ee08-c940-45fd-85c2-8d3a2ef653a2",
        "value": "blksuy8uwhbuioysd.serviceinfo.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:41+00:00",
        "timestamp": "1776772841",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bfde4ce-d26c-4a54-ba5b-48926fd883bd",
        "value": "blnk-num-mng.me-mng.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:41+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "c272f0ca-946c-49e7-845b-f49dc057c9a1",
        "value": "blog.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:42+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c1ddf2a-491b-4396-a8aa-9862228aa947",
        "value": "blog.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:42+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "534a4816-6df3-446b-995a-8c656e9f5494",
        "value": "bltki.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:42+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d4c0827-337b-4eb7-bf6b-75464038f15c",
        "value": "bmail.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:42+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce5605b0-ff1d-4d03-85ff-868129ca045c",
        "value": "bot.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:42+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "024b1d7f-f497-44bd-96fa-1109d8a3225e",
        "value": "broadcase.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:42+00:00",
        "timestamp": "1776772842",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b80dd1a-1a15-40e5-8abf-148f97813fca",
        "value": "bvkfztg.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772843",
        "to_ids": true,
        "type": "domain",
        "uuid": "06cdbd9c-6650-4649-a28c-d7775b2de45d",
        "value": "c.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772843",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2ba9447-c625-4f08-a148-878346367779",
        "value": "c0ac71c4-276f-46a4-a7fe-f062c40b47e6.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772843",
        "to_ids": true,
        "type": "domain",
        "uuid": "03fab2e2-1db4-4ad7-b5e8-d43704408190",
        "value": "c7a4603c-4442-4001-967e-70797b1143e1.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772843",
        "to_ids": true,
        "type": "domain",
        "uuid": "0225e99d-0145-456a-b2bd-6acd127502be",
        "value": "call-facetime.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772843",
        "to_ids": true,
        "type": "domain",
        "uuid": "04241c0c-0413-496c-9f07-683e28f0012e",
        "value": "call-ft-connect.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772843",
        "to_ids": true,
        "type": "domain",
        "uuid": "c27ffe31-cb5c-4301-b33c-1daa6ec0f4f9",
        "value": "call-ft-connect.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:43+00:00",
        "timestamp": "1776772844",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a3aac64-702e-4999-954f-a7907fd0ec19",
        "value": "call-ft-enc-authen.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:44+00:00",
        "timestamp": "1776772844",
        "to_ids": true,
        "type": "domain",
        "uuid": "96523240-4700-487d-9019-b1814d3331b0",
        "value": "call-ft-join-id.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:44+00:00",
        "timestamp": "1776772844",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cc0a3a6-75e7-4d1c-9762-e3c10c0e39b5",
        "value": "call-ft-visual.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:44+00:00",
        "timestamp": "1776772844",
        "to_ids": true,
        "type": "domain",
        "uuid": "388a48b9-a840-4650-a958-378f066ae72c",
        "value": "call-join-facetime.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:44+00:00",
        "timestamp": "1776772844",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9a0f4b0-1ff8-4fea-8537-2caf7d166eee",
        "value": "call-ms-team.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:44+00:00",
        "timestamp": "1776772844",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfb9aba9-c98a-4ba4-816c-0f2ef23ed350",
        "value": "call-signal.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:44+00:00",
        "timestamp": "1776772845",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbbcbb58-ba72-4e4a-8351-a7e96ddb8636",
        "value": "call-video.com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:45+00:00",
        "timestamp": "1776772845",
        "to_ids": true,
        "type": "domain",
        "uuid": "6709223a-a5f0-494e-8961-64061a540160",
        "value": "call.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:45+00:00",
        "timestamp": "1776772845",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b62e3bb-0c76-4cee-8951-e94d16b80387",
        "value": "call.signal-account.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:45+00:00",
        "timestamp": "1776772845",
        "to_ids": true,
        "type": "domain",
        "uuid": "38dba59b-7cb7-49e3-ba01-d78d15daaa8e",
        "value": "cc-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:45+00:00",
        "timestamp": "1776772845",
        "to_ids": true,
        "type": "domain",
        "uuid": "973c5c0e-177b-4044-9121-c20592cc8056",
        "value": "cdshfis57945tjfkgdfgdf.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:45+00:00",
        "timestamp": "1776772845",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3575a6b-1e80-4b3b-b0f0-a68addaa09cb",
        "value": "ch-th-re.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:45+00:00",
        "timestamp": "1776772846",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c469c1a-fe3f-477f-a4af-087b707187cd",
        "value": "chec-res.me-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:46+00:00",
        "timestamp": "1776772846",
        "to_ids": true,
        "type": "domain",
        "uuid": "76fe7c66-85e2-4956-9f7c-5cd545230821",
        "value": "check-alt.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:46+00:00",
        "timestamp": "1776772846",
        "to_ids": true,
        "type": "domain",
        "uuid": "a88ca080-c050-4b69-a8fe-3d9c4d6e494c",
        "value": "check-data-av.ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:46+00:00",
        "timestamp": "1776772846",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f4d0587-f0db-4548-b484-17815f4ea6cd",
        "value": "checkdata.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:46+00:00",
        "timestamp": "1776772846",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e7e16db-1e8f-4681-975c-7e17345bb88e",
        "value": "checkdata.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:46+00:00",
        "timestamp": "1776772846",
        "to_ids": true,
        "type": "domain",
        "uuid": "62d4f856-c92f-45f3-ae3c-9ecc45f8de10",
        "value": "ci-flowise.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:46+00:00",
        "timestamp": "1776772847",
        "to_ids": true,
        "type": "domain",
        "uuid": "676c8790-5419-4358-b4b4-cb7f9268d0b8",
        "value": "cicd.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:47+00:00",
        "timestamp": "1776772847",
        "to_ids": true,
        "type": "domain",
        "uuid": "42924078-460f-49d3-894f-f9ac898ded54",
        "value": "cjtjkj45nkejndfk3j4lkfelfwefwef.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:47+00:00",
        "timestamp": "1776772847",
        "to_ids": true,
        "type": "domain",
        "uuid": "83e23615-3e27-4435-bdf5-628babeb18c8",
        "value": "ck02-fb1ef20944-89b8cbf0.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:47+00:00",
        "timestamp": "1776772847",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d5409ab-b373-4410-adc1-2ea147972eb2",
        "value": "cli38798d7983.connect-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:47+00:00",
        "timestamp": "1776772847",
        "to_ids": true,
        "type": "domain",
        "uuid": "947ca0c0-deb9-45a2-88e0-9fa65706d1af",
        "value": "client.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:47+00:00",
        "timestamp": "1776772847",
        "to_ids": true,
        "type": "domain",
        "uuid": "7414e624-d319-4b45-b2ac-1d99be12ded2",
        "value": "clients.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:47+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "df014fcd-02c7-4a5a-b849-f87c3c4cea84",
        "value": "clients.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "5541cb19-08e1-4a23-b255-26bb5b797950",
        "value": "clients.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0152b1f-40de-4fa2-be0a-98f352667938",
        "value": "clients1.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e15fafb-e128-47c6-a8d0-9d8c3a3df76a",
        "value": "clients1.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "01516f9f-49c3-44cb-bbfa-2837e16516c4",
        "value": "clients2.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "186034d8-ee8f-47c4-8d41-4edc1f69c22a",
        "value": "clients2.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772848",
        "to_ids": true,
        "type": "domain",
        "uuid": "b07f0e55-64e8-42bb-9b1c-ef21be0eaf2b",
        "value": "clients3.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:48+00:00",
        "timestamp": "1776772849",
        "to_ids": true,
        "type": "domain",
        "uuid": "877aa532-141b-4096-a68f-bc4c26f541b7",
        "value": "clients3.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:49+00:00",
        "timestamp": "1776772849",
        "to_ids": true,
        "type": "domain",
        "uuid": "116d24db-af9a-44c0-83ee-7d59b5c438de",
        "value": "clients4.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:49+00:00",
        "timestamp": "1776772849",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c8e89ff-2394-4406-94b5-ea393f8b1e4c",
        "value": "clients4.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:49+00:00",
        "timestamp": "1776772849",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd7d9c06-cefe-46d7-9873-21bec3efadd3",
        "value": "clients5.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:49+00:00",
        "timestamp": "1776772849",
        "to_ids": true,
        "type": "domain",
        "uuid": "186ace67-37d0-4964-a30d-3e4be56eb7b4",
        "value": "clients5.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:49+00:00",
        "timestamp": "1776772849",
        "to_ids": true,
        "type": "domain",
        "uuid": "f01a80f7-472f-4b2e-b530-a1699cfd03a5",
        "value": "clients6.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:49+00:00",
        "timestamp": "1776772850",
        "to_ids": true,
        "type": "domain",
        "uuid": "1af77504-af17-45ea-8a28-07eaae6a9ba7",
        "value": "clients6.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:50+00:00",
        "timestamp": "1776772850",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d062c06-ffe8-4c3d-8f52-148a7e18c429",
        "value": "cloud-manage.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:50+00:00",
        "timestamp": "1776772850",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c55d8f4-1819-4a53-b915-935a6457b801",
        "value": "cloude-manage.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:50+00:00",
        "timestamp": "1776772850",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fdd8007-6caf-413f-b3a9-6dd252eb5bc0",
        "value": "cntflksdlkfghdf.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:50+00:00",
        "timestamp": "1776772850",
        "to_ids": true,
        "type": "domain",
        "uuid": "15cb268f-c782-4b5c-8120-5c394e8ff1d7",
        "value": "co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:50+00:00",
        "timestamp": "1776772850",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6b2ca2c-a861-47bf-b939-3d294637a94b",
        "value": "coj599r8re8c98r9c99c9.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:50+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "93b70f0e-c67a-42eb-a412-9c43f2d18fa7",
        "value": "com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:51+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "938f0353-45dd-4871-a6ac-bc55ecc6046e",
        "value": "com-ar-me.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:51+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a537b74-1d19-450d-9c7c-8093fe1aa151",
        "value": "com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:51+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "21fe26c0-1f4c-4a43-b180-6f5c42d7deab",
        "value": "com-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:51+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c9383c3-2f08-4324-a3b9-9fbabb4e1c69",
        "value": "com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:51+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "26877f61-66db-4c9a-a71a-0057c71017fc",
        "value": "com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:51+00:00",
        "timestamp": "1776772851",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a7fff96-f63e-4cad-bbc8-b7bbb01f52c6",
        "value": "com-ar.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772852",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed9f59fd-f453-4eec-8326-e12be970af5a",
        "value": "com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772852",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d331b1f-0ae0-46a8-a1c1-ff329305c9c9",
        "value": "com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772852",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8816fd3-53f6-4008-91dc-53d6167dc691",
        "value": "com-en-uk.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772852",
        "to_ids": true,
        "type": "domain",
        "uuid": "29a9fa00-6428-472b-b8b4-93a6ca225dcd",
        "value": "com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772852",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2d81274-3fda-4769-88ae-82dfeaf106e8",
        "value": "com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772852",
        "to_ids": true,
        "type": "domain",
        "uuid": "7be4861d-5693-4edb-af87-7d5fa4519b77",
        "value": "com-en-us.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:52+00:00",
        "timestamp": "1776772853",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d07fb36-9e2e-4981-aa65-f28cb3fbca22",
        "value": "com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:53+00:00",
        "timestamp": "1776772853",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b5abc32-f4c5-464b-b62b-ec953e0e8c2e",
        "value": "com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:53+00:00",
        "timestamp": "1776772853",
        "to_ids": true,
        "type": "domain",
        "uuid": "37f2b3c4-1dd4-49ed-a1a8-6a3b2f432e5a",
        "value": "com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:53+00:00",
        "timestamp": "1776772853",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5aeb23e-9d49-4f86-8df8-fbee9f098f89",
        "value": "com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:53+00:00",
        "timestamp": "1776772853",
        "to_ids": true,
        "type": "domain",
        "uuid": "06bd8cb4-7d68-429f-8764-c9ee5518bc00",
        "value": "com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:53+00:00",
        "timestamp": "1776772853",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6711ea7-23e9-40c4-b109-c9d44c0a729d",
        "value": "com-remove.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:53+00:00",
        "timestamp": "1776772854",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8d698c0-6e03-4cc8-81ef-6ac91168bf61",
        "value": "com-sa.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:54+00:00",
        "timestamp": "1776772854",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2654c3c-95d6-4227-bb82-ba62e7d8c4a7",
        "value": "com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:54+00:00",
        "timestamp": "1776772854",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc1b7ff7-19ac-485e-ba31-2721214a97e8",
        "value": "com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:54+00:00",
        "timestamp": "1776772854",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d8f63ed-43b7-4c75-90bf-1910e27cefbd",
        "value": "com.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:54+00:00",
        "timestamp": "1776772854",
        "to_ids": true,
        "type": "domain",
        "uuid": "f94d5113-6f74-4494-ba58-cf181454f904",
        "value": "comusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:54+00:00",
        "timestamp": "1776772854",
        "to_ids": true,
        "type": "domain",
        "uuid": "ead70f4e-1621-42ae-8d01-0fd18e296e61",
        "value": "con-ft-cll.me-info.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:54+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "7451ccd4-0df1-43cd-bb6e-9b3bca04cc61",
        "value": "con.call.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "be912e3c-be41-4540-b042-c3fd1629bde5",
        "value": "concejwkfih9ghksjdfsdf.datastatistics.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "95683e46-4e66-4d14-8914-98498d59d23c",
        "value": "condfkdsf34ihfsdf.mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6c75bd7-c92f-4059-84b0-13ce7780c297",
        "value": "condjfh954thfdg.web-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "a85a388b-4edc-4649-95e8-4f3c1dc121b4",
        "value": "confirm-id.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "7741f335-6fc1-4c78-a038-8c1e46687317",
        "value": "confirm-num.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772855",
        "to_ids": true,
        "type": "domain",
        "uuid": "f17581d3-123f-4340-8b90-f9981faa88ad",
        "value": "confirm-num.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:55+00:00",
        "timestamp": "1776772856",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc1a70fb-a897-437d-a20c-d81bcce126a6",
        "value": "confirm-number.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:56+00:00",
        "timestamp": "1776772856",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b267490-f273-45fc-82d8-87ff3861dbb9",
        "value": "confirm-nums.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:56+00:00",
        "timestamp": "1776772856",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f9bed4f-1e68-46ec-9761-552984d5723e",
        "value": "confirm-your-identity.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:56+00:00",
        "timestamp": "1776772856",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ace7cca-86a0-453c-88b0-1ad539773be7",
        "value": "confirm-your-identity.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:56+00:00",
        "timestamp": "1776772856",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ecccee0-7d7e-45d0-a0a9-e6577c6a1f60",
        "value": "conjhgfkjrg3jk4rgk3jfskjd.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:56+00:00",
        "timestamp": "1776772856",
        "to_ids": true,
        "type": "domain",
        "uuid": "1538b13e-7ae0-455d-9f94-464198288d4d",
        "value": "connact-ft-cll.datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:56+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf9b13f5-6756-4331-a4b8-b3c36173a4aa",
        "value": "conne.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:57+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b07dd08-39e9-4d37-8d81-f6c67bc23403",
        "value": "connect-signal.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:57+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "29e0c0e4-111c-4d41-ab2a-2d32b56ba95e",
        "value": "connect-signal.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:57+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "29f64f0a-9d1b-4ac2-a793-fe69f9bbd177",
        "value": "connect-signal.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:57+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "d90c290a-2922-42a3-bfe4-d171f9abe3a0",
        "value": "connect-signal.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:57+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "6efc802d-7e05-4d64-a3e6-1481ae9a62f7",
        "value": "connect-signal.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:57+00:00",
        "timestamp": "1776772857",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a443d96-4262-4a31-b0a8-a1147d7771c8",
        "value": "connect-signal.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772858",
        "to_ids": true,
        "type": "domain",
        "uuid": "554c0988-df77-4325-9d18-fa2f0eaa0351",
        "value": "connect-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772858",
        "to_ids": true,
        "type": "domain",
        "uuid": "5669fe64-2087-4269-9b41-64b7d634910c",
        "value": "connect-signal.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772858",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6c71ec3-dff2-414a-85e7-b6a0c78ef061",
        "value": "connect.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772858",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0659d5e-6fa6-487b-aca5-70ab0454da36",
        "value": "connect.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772858",
        "to_ids": true,
        "type": "domain",
        "uuid": "95d7334c-f05b-413d-a04a-5800f742c92f",
        "value": "connect.ar-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772858",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bdb4ce9-d362-4748-a68d-d493cac8db62",
        "value": "connect.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:58+00:00",
        "timestamp": "1776772859",
        "to_ids": true,
        "type": "domain",
        "uuid": "c25b7844-7877-4a88-ab42-44f43e40fcda",
        "value": "connect.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:59+00:00",
        "timestamp": "1776772859",
        "to_ids": true,
        "type": "domain",
        "uuid": "adce6168-ed2b-42e3-846b-bcd113ab1502",
        "value": "connect.info.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:59+00:00",
        "timestamp": "1776772859",
        "to_ids": true,
        "type": "domain",
        "uuid": "cea58d10-402e-4c98-adc6-70f824b1fbd8",
        "value": "connecting.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:59+00:00",
        "timestamp": "1776772859",
        "to_ids": true,
        "type": "domain",
        "uuid": "f19c42cb-a577-41f5-8045-4461d1c51719",
        "value": "connecting.ar-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:59+00:00",
        "timestamp": "1776772859",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddef3a8a-e988-4cac-9510-0ee9fc09b2cf",
        "value": "connecting.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:59+00:00",
        "timestamp": "1776772859",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c140966-62cd-43e0-88d6-5186dbaf9c30",
        "value": "connecting.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:00:59+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "29416652-c8d7-4ad7-ab69-c1419622b52b",
        "value": "connecting.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "a95d71a8-c9d5-4c13-b254-6daf27e22d13",
        "value": "cont3ui4dsjk43ggfh.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "b855cdb5-ddc9-4833-8b26-e737c2f58ef1",
        "value": "control-my-data.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "5afb0006-1e4b-44ff-a93e-8260bd804b51",
        "value": "control394sdsdf.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4ebf620-e018-407b-b682-ef3debdf25a5",
        "value": "controlslsdf9h9s93t54.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "701c2881-a4be-44e1-8401-42fc42e4b853",
        "value": "contu3r98fhdsjnksdfsdf.datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772860",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b571c63-89ef-484d-a5ee-36060f15e075",
        "value": "coonect-fc-cll-rec.datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:00+00:00",
        "timestamp": "1776772861",
        "to_ids": true,
        "type": "domain",
        "uuid": "e08b27d8-6e7a-413a-8f67-85bedfc09c82",
        "value": "courier-assignment.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:01+00:00",
        "timestamp": "1776772861",
        "to_ids": true,
        "type": "domain",
        "uuid": "db98a7ad-d663-4892-8bf7-e532d1c5d586",
        "value": "cpjkdafdrw.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:01+00:00",
        "timestamp": "1776772861",
        "to_ids": true,
        "type": "domain",
        "uuid": "99a631d7-66b5-4632-ac60-f04b14a2e998",
        "value": "cpsl-p.ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:01+00:00",
        "timestamp": "1776772861",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0aaa8c9-92e7-4387-83f8-91e3c0e592b4",
        "value": "credentials-checking.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:01+00:00",
        "timestamp": "1776772861",
        "to_ids": true,
        "type": "domain",
        "uuid": "14a2aecf-fa9f-4f8e-89b7-89f42c0bba89",
        "value": "crm.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:01+00:00",
        "timestamp": "1776772861",
        "to_ids": true,
        "type": "domain",
        "uuid": "7096a205-6c0a-4990-a7ab-6564c058c544",
        "value": "d-df-dfd-sddgfssdf.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:01+00:00",
        "timestamp": "1776772862",
        "to_ids": true,
        "type": "domain",
        "uuid": "fad82c74-74c6-4cc9-a99b-9d87b8e52166",
        "value": "d9.datastatistics.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:02+00:00",
        "timestamp": "1776772862",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e60a38f-9492-4cd6-87ba-cd0f1c8c62c0",
        "value": "d96ff356-4b58-440d-bc5c-4105f95e37da.ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:02+00:00",
        "timestamp": "1776772862",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bd492bb-7f03-4c48-9f6e-c03c6b871cb5",
        "value": "dash.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:02+00:00",
        "timestamp": "1776772862",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2df2ad7-0bfb-4285-b0a1-b7420e762918",
        "value": "dash.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:02+00:00",
        "timestamp": "1776772862",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4a8cc2c-07a5-4a46-a630-2b612e4a2e00",
        "value": "dashboard.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:02+00:00",
        "timestamp": "1776772862",
        "to_ids": true,
        "type": "domain",
        "uuid": "61cfd7b4-a227-43b9-9021-93c24c57af59",
        "value": "dashboard.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:02+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2d2e6ea-aa33-43dc-a700-4baee5c65d07",
        "value": "data-authn.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfe74f53-b695-4c59-abe9-a78507d64d50",
        "value": "data-val.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "28fb9633-6b26-42af-b2fd-a9991f31ebd8",
        "value": "datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba626918-544a-4d35-b993-9ff8ac0b2a21",
        "value": "datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "d29f2d59-718b-4665-bc3c-6c37d0aa6218",
        "value": "datastatistics.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "023091b9-9994-443a-b335-555c0740217b",
        "value": "dayxfgtb.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772863",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e9d023e-49f3-46a7-b5ae-d98f0d912711",
        "value": "delivery-dhl.info-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:03+00:00",
        "timestamp": "1776772864",
        "to_ids": true,
        "type": "domain",
        "uuid": "81536ccb-a03c-4350-83d3-68731ca11a1a",
        "value": "delivery-verification-authen.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:04+00:00",
        "timestamp": "1776772864",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d676cd5-c5dc-4c48-bcc1-fbd11e79128c",
        "value": "demo.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:04+00:00",
        "timestamp": "1776772864",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9beaa1e-a6af-419b-99f5-302f0ec08a62",
        "value": "demo.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:04+00:00",
        "timestamp": "1776772864",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d6f7de9-338b-4b5f-8a70-09f5edc222ba",
        "value": "demo.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:04+00:00",
        "timestamp": "1776772864",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ea31b43-cbed-4230-86d7-d24a72ba7d7e",
        "value": "demo.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:04+00:00",
        "timestamp": "1776772864",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ec5c339-2541-4c8d-b6b7-b1937d1e2d01",
        "value": "demo.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:04+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5ef55aa-b709-4f80-aefd-c5077837ba15",
        "value": "dev.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:05+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7e19d73-82e7-4539-8d4d-904d096fefba",
        "value": "dev.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:05+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "da4ff51e-9b3c-4994-bcb7-20f2ee4708ef",
        "value": "dev.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:05+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "057588a6-6195-4266-834a-57d81fbffc99",
        "value": "dev.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:05+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a5426b0-94f3-4de9-97e3-c4c3be4ec01b",
        "value": "dev.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:05+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff0a39b2-31c0-42ff-a130-62eb131f3655",
        "value": "dev.regularsports.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:05+00:00",
        "timestamp": "1776772865",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8453218-4f66-4e09-8c3d-cfe8bccc15cd",
        "value": "dev.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:06+00:00",
        "timestamp": "1776772866",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffe8b92f-8f38-4b95-8f83-432e4c945e4d",
        "value": "development-flowiseai.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:06+00:00",
        "timestamp": "1776772866",
        "to_ids": true,
        "type": "domain",
        "uuid": "430831c6-d732-4ba4-9ee3-1a047f046829",
        "value": "device-update.imtok.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:06+00:00",
        "timestamp": "1776772866",
        "to_ids": true,
        "type": "domain",
        "uuid": "de7224e1-49ff-4a8b-b294-8f6047123b09",
        "value": "dfdsgsdgsfg.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:06+00:00",
        "timestamp": "1776772867",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f9940a5-4159-45cd-910c-6084150b1f39",
        "value": "dfsdfsdgretgf65sdg.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:07+00:00",
        "timestamp": "1776772867",
        "to_ids": true,
        "type": "domain",
        "uuid": "7238d1e0-ca65-47d3-a70e-f9d410816860",
        "value": "dgsgsd.signal-account.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:07+00:00",
        "timestamp": "1776772867",
        "to_ids": true,
        "type": "domain",
        "uuid": "c26add6b-3d91-421e-9e87-4166ba7ac671",
        "value": "dhl-delivery-address.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:07+00:00",
        "timestamp": "1776772867",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc0324d4-83bf-44af-b839-3e0a90970326",
        "value": "dhl-delivery-verification.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:07+00:00",
        "timestamp": "1776772867",
        "to_ids": true,
        "type": "domain",
        "uuid": "efa81c25-7384-40c7-b80e-35b7668fe0ee",
        "value": "dhl-identity-verification-authen.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:07+00:00",
        "timestamp": "1776772867",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb794450-57b3-4282-aaf2-cc2b3e594ee6",
        "value": "dhl.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:07+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d88887d-9947-4aeb-9840-60d59988c1ee",
        "value": "djhudft-wd.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:08+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "bce9ee7d-505a-4c87-aa2f-3aa5509f7a13",
        "value": "docs-icloudrive-file.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:08+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "4281c1a2-f0b2-49be-94ff-63b787a40481",
        "value": "docs.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:08+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "1baf0cb6-08eb-443f-adcd-4df970c89ef8",
        "value": "docs.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:08+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a1409fd-07d5-42a5-974d-5740be015396",
        "value": "document-cloud.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:08+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ae1f1ca-48c2-4c3a-b20e-1d1976f3651f",
        "value": "dos.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:08+00:00",
        "timestamp": "1776772868",
        "to_ids": true,
        "type": "domain",
        "uuid": "be8d838d-77a2-40ad-92b9-352dd67ddc3b",
        "value": "download.newupdate.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772869",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd969364-1ff3-4961-b322-27b8d42ba1e5",
        "value": "download.totpro.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772869",
        "to_ids": true,
        "type": "domain",
        "uuid": "5294a7ab-156a-484f-803c-058bfd8f11e0",
        "value": "download.web-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772869",
        "to_ids": true,
        "type": "domain",
        "uuid": "aeb8edd8-8196-481a-900d-0593fbd343d2",
        "value": "dpa.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772869",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ae1612a-b6f1-47bd-9bd2-e283c35a3bc2",
        "value": "dps.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772869",
        "to_ids": true,
        "type": "domain",
        "uuid": "737c4771-7c57-4cd1-816f-73ed58705985",
        "value": "drive-cloud-app.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772869",
        "to_ids": true,
        "type": "domain",
        "uuid": "128e7d75-f726-4437-9b64-13eb4d1cb7d0",
        "value": "drive-i-cloud-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:09+00:00",
        "timestamp": "1776772870",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f7b842b-9c75-4b89-a33c-64ce76e8e9d2",
        "value": "drive-i-cloud.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:10+00:00",
        "timestamp": "1776772870",
        "to_ids": true,
        "type": "domain",
        "uuid": "60da39fe-cde0-4283-9fee-6901e009cb25",
        "value": "drive-icloud-val.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:10+00:00",
        "timestamp": "1776772870",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e6f832-f4d0-4987-89b5-56e5bd236cdf",
        "value": "drive-kenza-cv-pdf.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:10+00:00",
        "timestamp": "1776772870",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ecec489-296f-4efd-9d53-cc001c15262e",
        "value": "drive-mofa-gov-bh.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:10+00:00",
        "timestamp": "1776772870",
        "to_ids": true,
        "type": "domain",
        "uuid": "f173164a-23ef-451b-8837-1667848dd4ea",
        "value": "dsbjbjhb5teufyh85ybf74fbufb7tuvfbf.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:10+00:00",
        "timestamp": "1776772870",
        "to_ids": true,
        "type": "domain",
        "uuid": "0719b4a0-8871-4fc5-a31b-847b88bfd2d4",
        "value": "dssdgsdfsdf.ms-mng.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:10+00:00",
        "timestamp": "1776772871",
        "to_ids": true,
        "type": "domain",
        "uuid": "72c54b9f-ed90-4a54-98b3-c56b2a9d50b6",
        "value": "dwwbdgjdyvt.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:11+00:00",
        "timestamp": "1776772871",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a7e2001-41a8-49ed-b0eb-8a4ac3fffeeb",
        "value": "ebdisk.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:11+00:00",
        "timestamp": "1776772871",
        "to_ids": true,
        "type": "domain",
        "uuid": "00980ae0-3678-4fab-9a57-c0df69653c69",
        "value": "ebdisk.login-live.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:11+00:00",
        "timestamp": "1776772871",
        "to_ids": true,
        "type": "domain",
        "uuid": "a32f3d83-a249-40be-b03a-aabd19afac16",
        "value": "ebdisk.test-id.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:11+00:00",
        "timestamp": "1776772871",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dfc2a50-df39-4130-a2ef-a6bfa3a39135",
        "value": "eblogin-live.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:11+00:00",
        "timestamp": "1776772871",
        "to_ids": true,
        "type": "domain",
        "uuid": "894bbaa8-9211-42f6-853a-237a4a75f7e5",
        "value": "ebmail.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:11+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "4161d526-36e9-4821-a884-49819a54f866",
        "value": "ebmail.login-live-online.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:12+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3c06b32-c6b9-4efe-a992-f34b66814ac3",
        "value": "ebmail.login-live.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:12+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a2dba69-1ad5-4285-959e-2a2cf1471ed3",
        "value": "ebrands.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:12+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5850cbc-4290-49af-854c-d139bac8370d",
        "value": "ecomservices.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:12+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2e8fb30-c8ef-4cb4-9732-77c9a004b115",
        "value": "egbfdg545rgdfg.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:12+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "790695ab-931e-485d-af1a-e9b45d4e7991",
        "value": "emv1.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:12+00:00",
        "timestamp": "1776772872",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6302343-ab96-40db-8423-8ed857316b44",
        "value": "en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772873",
        "to_ids": true,
        "type": "domain",
        "uuid": "77349f73-c132-4ba3-9dc0-f39beb0d8f5e",
        "value": "en-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772873",
        "to_ids": true,
        "type": "domain",
        "uuid": "674e11b8-8af0-4dec-952e-7d02fd6ba760",
        "value": "en-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772873",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef7d29a7-1a22-470c-b48c-0b5e78b4a669",
        "value": "en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772873",
        "to_ids": true,
        "type": "domain",
        "uuid": "dab662ae-ec79-4661-8282-f67450cc0c7d",
        "value": "en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772873",
        "to_ids": true,
        "type": "domain",
        "uuid": "c03bd6f2-3327-4ce7-9e83-a56a0bc9620e",
        "value": "en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772873",
        "to_ids": true,
        "type": "domain",
        "uuid": "258b31a5-fa29-49ab-a286-894c2181efb6",
        "value": "en-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:13+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e71dc1f-ec79-4af2-9a98-71ce08c291a8",
        "value": "en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "f95bd683-ea4d-47ef-9b8f-8ac86f250591",
        "value": "en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce78afe0-79da-4b39-a8a4-73a3ca437012",
        "value": "en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "18d71940-0ed3-4b8f-b199-304f58ef52a7",
        "value": "en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "b73e8a9f-496e-4bee-9418-ba19963ae26e",
        "value": "encryption-key-plugin-signal.org-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "0518c76f-0daf-455b-a9b6-9766f2012361",
        "value": "encryption-sgnl-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772874",
        "to_ids": true,
        "type": "domain",
        "uuid": "2385c4ef-bba6-407d-a4ac-208496351ddd",
        "value": "encryption-sgnl.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:14+00:00",
        "timestamp": "1776772875",
        "to_ids": true,
        "type": "domain",
        "uuid": "75eb7149-0f48-4e90-8cb0-e98b0bc90b26",
        "value": "encryption-sgnl.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:15+00:00",
        "timestamp": "1776772875",
        "to_ids": true,
        "type": "domain",
        "uuid": "e17b3e17-902e-439b-88ae-d54b3f091179",
        "value": "encryption-sgnl.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:15+00:00",
        "timestamp": "1776772875",
        "to_ids": true,
        "type": "domain",
        "uuid": "d764aba0-5544-460e-9eba-56cf97dd1c3e",
        "value": "encryption-signal.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:15+00:00",
        "timestamp": "1776772875",
        "to_ids": true,
        "type": "domain",
        "uuid": "9448c4a3-764e-4d73-b59f-ff3aefdbf96f",
        "value": "encrytpion-sgnl.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:15+00:00",
        "timestamp": "1776772875",
        "to_ids": true,
        "type": "domain",
        "uuid": "6874eda5-36d1-4d27-b616-8a4fb483106b",
        "value": "enfiaqkw.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:15+00:00",
        "timestamp": "1776772875",
        "to_ids": true,
        "type": "domain",
        "uuid": "34d8a84d-eb2d-4f6f-b931-d0a33271d6a8",
        "value": "entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:15+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "04d45fcb-2ddf-4368-b024-8b890a5259fc",
        "value": "eulteverify-apple.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:16+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c3a5913-d80d-48f3-b1ae-6685a4b47494",
        "value": "eultewww.verify-apple.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:16+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "06fb379b-8aee-4728-b236-93f666a1bfd7",
        "value": "event-nottingham.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:16+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "7722c352-8e1d-4f5d-bf36-ba6385032f69",
        "value": "example.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:16+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "41c7c8fe-37a6-40be-9bae-ce5bbc344d28",
        "value": "exmo.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:16+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "c49f9b1b-05a5-4b22-b12f-c6b0a1e58e6a",
        "value": "f127d70b-1bcf-4915-9868-768000ef915d.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:16+00:00",
        "timestamp": "1776772876",
        "to_ids": true,
        "type": "domain",
        "uuid": "80b21dcf-3801-43f6-a256-e390fe5e7832",
        "value": "f368b859-dc30-448c-9587-44879cf4a730.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772877",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e2c13ff-3b9e-487d-8607-eda72bc08d9a",
        "value": "f745f976-7714-445e-abf6-66fc1ab0a7bb.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772877",
        "to_ids": true,
        "type": "domain",
        "uuid": "484f8c8b-7207-4396-a20b-ac39cd25a497",
        "value": "fac.ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772877",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf89966e-9f90-4ec3-8358-81ea31e5b34d",
        "value": "facetime-apple.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772877",
        "to_ids": true,
        "type": "domain",
        "uuid": "25ca57ab-b912-41ae-94cd-d92889433228",
        "value": "facetime-apple.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772877",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5cc61c5-55ea-4a29-8366-6ab09ccabbb0",
        "value": "facetime-join.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772877",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ce916aa-65f3-4546-834c-326d84686ac4",
        "value": "facetime-num.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:17+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "65731704-1dc6-405a-9052-d96163801fbe",
        "value": "facetime-num.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5b94158-0f16-4652-a8aa-4abb785f8b8c",
        "value": "facetime-nums.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8532fef-168c-4020-9a1a-6fc2ec8f8fa9",
        "value": "facetime-nums.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "916175ad-ba84-4c1e-8966-a60ebdcc06f1",
        "value": "facetime-web.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0409a2d-5202-4fc7-95a5-97681fd9bfce",
        "value": "facetime-web.me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e195fc5-f1d0-43af-aaac-3778dc64d48d",
        "value": "facetime-webs.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772878",
        "to_ids": true,
        "type": "domain",
        "uuid": "805bc66f-02b8-4e27-8cd3-492e17a281c7",
        "value": "facetime-webs.me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:18+00:00",
        "timestamp": "1776772879",
        "to_ids": true,
        "type": "domain",
        "uuid": "86c7aad0-f589-4537-a28f-d1bcf30bf684",
        "value": "facetime.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:19+00:00",
        "timestamp": "1776772879",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dde918b-5f30-4f4b-a18b-034526f045f7",
        "value": "facpl.ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:19+00:00",
        "timestamp": "1776772879",
        "to_ids": true,
        "type": "domain",
        "uuid": "fedb3e7d-1b5c-49a1-89e0-63a9674883ff",
        "value": "ff050e03-e7c3-44f0-9366-b7b739da0d9e.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:19+00:00",
        "timestamp": "1776772879",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6b9b13d-e198-4cb7-ae45-d052e5022acb",
        "value": "file-check.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:19+00:00",
        "timestamp": "1776772879",
        "to_ids": true,
        "type": "domain",
        "uuid": "22bb15c5-57d4-4bd0-984f-d481d6e6bbd4",
        "value": "final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:19+00:00",
        "timestamp": "1776772879",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a46b13e-0fda-4a13-a71e-8d9ee3a7ec7b",
        "value": "fjrbelnjkgl4ntglnfk4rnlkednfoikrnfiornogb.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:19+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "86b2921d-5aac-48b2-acdc-7b2c3aa04559",
        "value": "flow-alpha.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cf32fda-2edf-4d8a-8817-9cd9c1e13ab8",
        "value": "flow.uat.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb493c84-3b12-48a6-a225-70829f946d10",
        "value": "flowise.uat.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "92968792-5320-4031-809d-e12998f96fec",
        "value": "flowiseai.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "c70b174d-e379-4dd2-90f3-a0d64e51cd7a",
        "value": "ft-blk.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad4d6767-74d7-4322-8a39-92ca8b5eb318",
        "value": "ft-blk.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772880",
        "to_ids": true,
        "type": "domain",
        "uuid": "92b32ac5-f81b-4c1c-905e-4de2ac533a2c",
        "value": "ft-call-control.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:20+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "32690dbf-e7db-4e5d-a50d-04e2f31ab049",
        "value": "ft-cll-2mzkaldlwpfgg.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:21+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "562dd203-1398-4a24-8d54-ed65040d7437",
        "value": "ft-cll-2wefhf34iojofj0ef98h98sd.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:21+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a650177-ed24-4709-a720-c9a91f6d34f7",
        "value": "ft-cll-idmss-rec-mng.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:21+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "397b2570-f940-42d0-b434-56fd7f6f992b",
        "value": "ft-cll-join.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:21+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef30b7df-2e59-46e4-9e86-a5dac39c65e7",
        "value": "ft-cll-rec.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:21+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "d15c23dd-61e7-4545-a5f7-6882f9e95c22",
        "value": "ft-cll.lang-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:21+00:00",
        "timestamp": "1776772881",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ba1b8b7-4946-4152-b34c-9d470205369f",
        "value": "ft-cll.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772882",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d24cd03-a3fc-4f75-a197-d96e315025e2",
        "value": "ft-cll.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772882",
        "to_ids": true,
        "type": "domain",
        "uuid": "1572be88-72ee-4c2a-aa05-316af6cf76ae",
        "value": "ft-cll.me-mng.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772882",
        "to_ids": true,
        "type": "domain",
        "uuid": "251c2bd4-b176-41b4-9a6c-3f2324fbacdb",
        "value": "ft-fac-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772882",
        "to_ids": true,
        "type": "domain",
        "uuid": "e70863f6-3b6e-4df0-b3c1-b38154106331",
        "value": "ft-faw-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772882",
        "to_ids": true,
        "type": "domain",
        "uuid": "63ee9116-2750-48c9-bf80-faaffa70ccc8",
        "value": "ft-fce-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772882",
        "to_ids": true,
        "type": "domain",
        "uuid": "803577a9-40b1-4f08-a7fe-d0bf698db1cc",
        "value": "ft-fwa-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:22+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a5a80a0-33f5-433f-b4a7-7fd3b715e9de",
        "value": "ft-join.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "19287648-3141-4ad4-a437-104284ff66e1",
        "value": "ft-join.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "002cd408-4e71-4bf7-980b-6c1ac239e56d",
        "value": "ft-joins.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cc1f19d-20f9-4f2f-8e73-548511798480",
        "value": "ft-mng.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ecb8493-0003-4b58-b1fc-4a929a7e5950",
        "value": "ft-num-apl.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d2bd4ab-71c8-4fbe-b871-7451150cd9a1",
        "value": "ft-rec-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772883",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c64a0a5-8f73-4378-a81b-ad4b86a8d770",
        "value": "ft-rec.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:23+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "ababfadd-5b1e-46c4-9d36-aed75239552c",
        "value": "ft-rev-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "d159b996-d6aa-4ebb-8a76-273a6e726fb5",
        "value": "ft-rev.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8bc2f5f-7b38-44a7-b42a-b51fc32bb9e9",
        "value": "ft-rev.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eb2d5bc-cbba-4a12-8cb6-553da3959be2",
        "value": "ft-rev.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea38ce20-5820-4c27-9c94-4681cf042308",
        "value": "ft-rev.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "003a1991-571d-43b1-b07a-58fabadfcbf3",
        "value": "ft-rev.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772884",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d1a75d8-b0de-4614-b3ea-0848d7e6952d",
        "value": "ft-rev.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:24+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "834e9112-d964-4873-8390-4e411dc3fedb",
        "value": "ft-revs.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c64d31e-debb-415b-9bfa-1373ad9efaf6",
        "value": "ft-revw.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6f56df7-0636-40be-8a11-ef02768cd946",
        "value": "ft-revw.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e29f9b7-6074-43c3-ab84-76936ef1a83a",
        "value": "ft-srt-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "f78de58c-dd43-4ddb-b7b4-8ab65592cb7a",
        "value": "ft-testt.id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "96a49f45-eff6-46c9-8a29-f3873db7f958",
        "value": "ft-wd.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772885",
        "to_ids": true,
        "type": "domain",
        "uuid": "04be4e1e-e953-449f-91c1-a12c84898d9a",
        "value": "ft-wid.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:25+00:00",
        "timestamp": "1776772886",
        "to_ids": true,
        "type": "domain",
        "uuid": "e22d514b-b7d9-4305-bb74-0c64268d70de",
        "value": "ftp.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:26+00:00",
        "timestamp": "1776772886",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1571399-f96c-4d44-8c59-74f375597e1d",
        "value": "ftp.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:26+00:00",
        "timestamp": "1776772886",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff30b2ec-0a1c-41e9-a04b-1baf924ab683",
        "value": "ftp.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:26+00:00",
        "timestamp": "1776772886",
        "to_ids": true,
        "type": "domain",
        "uuid": "04fdc873-4b59-4b6f-8b8a-7a2ee264282c",
        "value": "ftp.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:26+00:00",
        "timestamp": "1776772886",
        "to_ids": true,
        "type": "domain",
        "uuid": "730c17ac-d99f-4251-b7b7-f6829aeaf58d",
        "value": "ftp.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:26+00:00",
        "timestamp": "1776772886",
        "to_ids": true,
        "type": "domain",
        "uuid": "91e2b301-729d-41d0-b5ec-500c36a85ce2",
        "value": "ftp.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:27+00:00",
        "timestamp": "1776772887",
        "to_ids": true,
        "type": "domain",
        "uuid": "0135b198-fc5a-454b-a1f8-fd7fa57f25c4",
        "value": "ftp.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:27+00:00",
        "timestamp": "1776772887",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a5947bd-3a11-47aa-957a-38bcfecd8f31",
        "value": "ftp.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:27+00:00",
        "timestamp": "1776772887",
        "to_ids": true,
        "type": "domain",
        "uuid": "031c21df-4544-48e1-bb8a-89761c98ec24",
        "value": "ftp.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:27+00:00",
        "timestamp": "1776772887",
        "to_ids": true,
        "type": "domain",
        "uuid": "de50fe20-fb5f-4298-97e8-327d17973124",
        "value": "ftpd.com-sa.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:27+00:00",
        "timestamp": "1776772887",
        "to_ids": true,
        "type": "domain",
        "uuid": "39a3e94b-4c90-4bf2-99d8-af3f6e4dc87b",
        "value": "ftpdr1.com-sa.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:27+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a4fb983-b707-43e3-a026-121921752c8e",
        "value": "fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:28+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e8664f-d0fe-4f9c-9ac6-78c2a1c57ce2",
        "value": "fzbidxatfao.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:28+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fd9750f-a594-4542-b207-71dd6bc91a8d",
        "value": "gahpkwww.join-meet.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:28+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec88265c-a141-41ee-9119-e923d0979b59",
        "value": "gaza-report.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:28+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbb23baf-baee-4c0f-b382-6e6439a6325f",
        "value": "get-alr.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:28+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "9efad567-af2c-4678-8e48-9a7be0c19ebb",
        "value": "get-dh1.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:28+00:00",
        "timestamp": "1776772888",
        "to_ids": true,
        "type": "domain",
        "uuid": "67928ce2-7771-40f1-b820-fb06cac3e867",
        "value": "get-fi1.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772889",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f237a09-2ca9-40c0-b127-4b466f3d99eb",
        "value": "get-fil.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772889",
        "to_ids": true,
        "type": "domain",
        "uuid": "d059b292-1585-4a03-84eb-434d033c46e5",
        "value": "get-hot.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772889",
        "to_ids": true,
        "type": "domain",
        "uuid": "4428c3c6-a63d-4d95-8c10-e41135a1344b",
        "value": "get-mywords.info-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772889",
        "to_ids": true,
        "type": "domain",
        "uuid": "e671b385-5b6b-486c-a6ae-db03224c7a3c",
        "value": "get-too.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772889",
        "to_ids": true,
        "type": "domain",
        "uuid": "844956de-4c00-4396-893c-20d1d4ae4640",
        "value": "ggdkowww.testh.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772889",
        "to_ids": true,
        "type": "domain",
        "uuid": "e84a9740-400e-41de-b352-b620e86535ca",
        "value": "gmflqsssssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:29+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3d1931e-d550-4a3c-acf7-efb0a8b74b9b",
        "value": "google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "f003c709-d714-4f8a-b552-8660957d6697",
        "value": "googleapis-fonts.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "93605b89-3403-4f43-8016-06114bdf43eb",
        "value": "googleapis-fonts.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "97f0a590-1db2-4966-b176-339757e42462",
        "value": "gov-bh-mng-rec.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "340fcfad-dcad-49ee-81f3-bda5642f1b31",
        "value": "grafana.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a9aa7ba-8c27-4348-8d9d-c636378f6d92",
        "value": "gstatic-fonts.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772890",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fd7f0ad-4268-419f-8012-0b54d793ea96",
        "value": "gstatic-fonts.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:30+00:00",
        "timestamp": "1776772891",
        "to_ids": true,
        "type": "domain",
        "uuid": "db783fca-16e2-4baf-a9f3-8e97e3d3bc03",
        "value": "gsyastf.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:31+00:00",
        "timestamp": "1776772891",
        "to_ids": true,
        "type": "domain",
        "uuid": "24085200-159b-419d-a10c-eaa8c6042afa",
        "value": "gtedywww.api.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:31+00:00",
        "timestamp": "1776772891",
        "to_ids": true,
        "type": "domain",
        "uuid": "a03081b2-0d1c-4693-bc5a-858504d4cfd3",
        "value": "haven.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:31+00:00",
        "timestamp": "1776772891",
        "to_ids": true,
        "type": "domain",
        "uuid": "c148a521-fa9b-44c2-a12b-2e9617343ce2",
        "value": "hello.ac-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:31+00:00",
        "timestamp": "1776772891",
        "to_ids": true,
        "type": "domain",
        "uuid": "faeee2a5-58df-4a28-b7b1-e9883e8cd14d",
        "value": "henry.scott85.mail.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:31+00:00",
        "timestamp": "1776772891",
        "to_ids": true,
        "type": "domain",
        "uuid": "555b9906-a99a-466b-8984-e7d6e21e84c8",
        "value": "hgjsdfsdf.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:31+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "cae75a6e-4c1d-40b1-a169-e670b16cc6a3",
        "value": "hi.ac-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca48c151-3be4-4fa0-902b-4d576fee8f9a",
        "value": "hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c727b9b-9e36-47fe-9ddd-87e175c8fa5a",
        "value": "holykssm.trusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "c54cfb45-9d96-442f-a333-361d033c3ae7",
        "value": "host.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ca5a215-a452-4d45-b9f0-44b392fc7e36",
        "value": "host.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "312855cd-e54c-476d-88cb-0fdd3703a42f",
        "value": "hostmaster.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772892",
        "to_ids": true,
        "type": "domain",
        "uuid": "47529949-1d7d-4f55-8a33-69d33aa1f4da",
        "value": "hostmaster.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:32+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "51d3bcf0-70be-4a9b-8572-c9a41449dc8b",
        "value": "hot-acc-mail.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:33+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "305c490e-73a0-45e3-bc9d-ad4ffc1010ec",
        "value": "hotel-menu.ms-mng.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:33+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d8b2526-9977-40c4-beae-0e13b733cef8",
        "value": "ht-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:33+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "161405ef-8262-42d1-b590-44d3c1399da0",
        "value": "htkdfsdf.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:33+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf7144c5-5183-42c1-8d73-2bcb912fb76d",
        "value": "humatropeava.ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:33+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3a2252e-a6a7-4f06-b6c4-925c08e21545",
        "value": "hydtr.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:33+00:00",
        "timestamp": "1776772893",
        "to_ids": true,
        "type": "domain",
        "uuid": "d489e775-e2ad-46cf-baea-f5495943e5b3",
        "value": "i-mange.me-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772894",
        "to_ids": true,
        "type": "domain",
        "uuid": "e764bb06-c1b8-4919-b979-94fce39f4693",
        "value": "icaresupport-ap.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772894",
        "to_ids": true,
        "type": "domain",
        "uuid": "504554a2-ef3c-4997-92fc-2a66265029ce",
        "value": "icloud-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772894",
        "to_ids": true,
        "type": "domain",
        "uuid": "8181dc58-d395-40e4-ab77-ecfce19910ad",
        "value": "icloud.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772894",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ce7d513-5afa-4c36-80f5-2e0b28011297",
        "value": "icloud.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772894",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcd7f7cf-befc-4da6-9a1f-82cbe93c3583",
        "value": "icloud.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772894",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f9196e7-4260-4d36-bb8d-af153ecd2e66",
        "value": "icloud.com.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:34+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c30e05d-ab50-4fba-917d-ac4a00d75edf",
        "value": "icloud.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "431cf78c-6a7f-4fe5-bb1b-b72a441c9965",
        "value": "icloud.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "00dd4c10-9e2f-4d4f-9915-1962e2032da0",
        "value": "icloud.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "4256bf5f-43b1-403f-b81e-eed31e12b7f0",
        "value": "icloudrive.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "f541429d-e63b-486d-a258-675810d30f53",
        "value": "icloudrive.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "45ba55ff-472d-47d1-8a65-ec08e9b8be9c",
        "value": "id-ac.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772895",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e1cae41-3b2b-4dac-b7b6-52f9b7ff2ff7",
        "value": "id-apple.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:35+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "25858044-7e74-43bf-98ff-8d1ff1862f90",
        "value": "id-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:36+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b7d41a1-9d46-46a3-890e-7847283792f4",
        "value": "id-appleid.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:36+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "48ac7a12-f5fb-486f-a073-b48a20af61d7",
        "value": "id-apples-mange.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:36+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "db928575-337d-4b11-a132-16afee729871",
        "value": "id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:36+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b3f92c8-7950-4ed6-bfeb-84f5099903dc",
        "value": "id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:36+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "86fe3ab6-7312-4b0a-9787-5f79853628cc",
        "value": "id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:36+00:00",
        "timestamp": "1776772896",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ddbf269-1a9a-449a-8ae7-c9c08363fcb2",
        "value": "id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772897",
        "to_ids": true,
        "type": "domain",
        "uuid": "65291cea-9fbb-4c14-b91b-aa471a3a7659",
        "value": "id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772897",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6a56c79-a08b-4607-90d9-d0a64e7d16f4",
        "value": "id-ar.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772897",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5c09010-458b-439e-b033-a6a9d80529c1",
        "value": "id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772897",
        "to_ids": true,
        "type": "domain",
        "uuid": "231e390f-34f7-4bd0-9ae6-b78fbeacf441",
        "value": "id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772897",
        "to_ids": true,
        "type": "domain",
        "uuid": "a87eecd4-d406-42b8-a5bb-1e2a19f00d4c",
        "value": "id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772897",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bc7289b-1645-4ecd-847d-c8661bc61873",
        "value": "id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:37+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "805dfd22-058c-41ea-908c-980c0c483dee",
        "value": "id-login.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "69d6468f-4967-44e0-9b15-75c8b550e695",
        "value": "id-mana-ge.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "a30bac3c-2b4e-41fd-8401-3254477b290b",
        "value": "id-manage.com-ar.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9c92f4d-440a-4541-8416-68e062311cb2",
        "value": "id-manage.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f8a2f80-aaa9-4b55-a9a9-ea436c8f2dca",
        "value": "id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "7763e1b6-28db-4da5-a86b-7958505028a2",
        "value": "id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772898",
        "to_ids": true,
        "type": "domain",
        "uuid": "b353640b-97dc-4a26-8d2f-d4db747b1ae3",
        "value": "id-mng-en.mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:38+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ed54707-bb05-453c-ac0e-7eed30fbf339",
        "value": "id-mnge.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb6723a2-cd81-4bf0-ab90-59f9ad0b3faf",
        "value": "id-rec-check.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b39a06c-f57f-4635-8880-d2dc7fce71e9",
        "value": "id-test.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3a1f6d4-4e1d-4c8f-87e2-216f43ef6dcc",
        "value": "id-us.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec19e0f5-eae9-46d0-bb7f-8e41d488cdd3",
        "value": "id-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "90d5aa4f-62e3-4605-afc7-023df6d2aec7",
        "value": "id-validate.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772899",
        "to_ids": true,
        "type": "domain",
        "uuid": "806b95ee-c2e4-42e1-9cda-f97dd82e33b8",
        "value": "id.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:39+00:00",
        "timestamp": "1776772900",
        "to_ids": true,
        "type": "domain",
        "uuid": "af62c648-ee3a-49cc-afba-6822ca740293",
        "value": "id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:40+00:00",
        "timestamp": "1776772900",
        "to_ids": true,
        "type": "domain",
        "uuid": "630ed32e-4df5-4c3a-8752-caee444565a5",
        "value": "id.mng.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:40+00:00",
        "timestamp": "1776772900",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1e0753e-42f9-4c49-bb9f-a6ac00f49d57",
        "value": "idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:40+00:00",
        "timestamp": "1776772900",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9e5cb47-f9d6-4ed9-b60b-3e01a12c9516",
        "value": "identity-val.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:40+00:00",
        "timestamp": "1776772900",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff50b03c-e133-4577-8be8-8943271979ff",
        "value": "identity-vel.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:40+00:00",
        "timestamp": "1776772900",
        "to_ids": true,
        "type": "domain",
        "uuid": "11e89b10-d0b5-43d2-9911-edf4377de288",
        "value": "identity.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:40+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b9f4e2a-db4d-49d6-8d2e-bd2b431efcbb",
        "value": "idms-ft-cll-mng.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:41+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5a77156-1377-4359-ab82-70c8fd32e6b6",
        "value": "idms-manage-on.linedata.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:41+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6a13229-c257-4744-8f61-6d4c2de303d5",
        "value": "idms-mng-rec.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:41+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0bc1e03-8424-4f31-8b84-ab0ce1c3e275",
        "value": "idms-mng-rec.datastatistics.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:41+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "91a1daa4-97b0-43d7-a458-6d27e86e6052",
        "value": "idms-mng-rec.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:41+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "9279de47-ffbc-4308-818b-fb682e4f2edc",
        "value": "idms-rec-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:41+00:00",
        "timestamp": "1776772901",
        "to_ids": true,
        "type": "domain",
        "uuid": "c25dd987-5577-4f0d-b9c3-649df5a80929",
        "value": "idms-rec.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772902",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ac6a60c-3f44-4950-9331-3a92da759186",
        "value": "idms-sgnl-mn.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772902",
        "to_ids": true,
        "type": "domain",
        "uuid": "53341903-b0e6-4b9a-ba49-fac44a3fab61",
        "value": "ids-ac.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772902",
        "to_ids": true,
        "type": "domain",
        "uuid": "a32ff992-9d35-4de3-9424-43d2b55ce06e",
        "value": "ids-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772902",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa11134e-48a9-439e-86ec-60d98ce9c567",
        "value": "ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772902",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9475abf-ca54-4e79-bb9b-9362b53bf40e",
        "value": "ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772902",
        "to_ids": true,
        "type": "domain",
        "uuid": "2453e527-9f34-45c8-a660-16c4b92722fe",
        "value": "ids-login.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:42+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a481c2f-27df-44f0-9d99-8f21d2c30911",
        "value": "iforgot-applehelp.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "557d9bec-06cb-4918-80f4-fdd1dcb72636",
        "value": "iga.gov-bh-mng-rec.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "53891c17-7d5a-480f-a17d-9449927460ad",
        "value": "ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "f24eaecf-cb55-492a-ad5b-eeabb240e761",
        "value": "imanage-rev.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "7823219c-3891-4802-a570-e37e17cc560b",
        "value": "imanage.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "1203e1c3-8f55-4f88-86db-6e8096c34b30",
        "value": "imanage.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772903",
        "to_ids": true,
        "type": "domain",
        "uuid": "749ee28a-7edd-43b5-a4f7-03e950eeafef",
        "value": "imanage.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:43+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa761345-07fc-49b9-a077-acaa126bd871",
        "value": "imanage.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:44+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "87ff130f-e81f-4b6c-9d8d-4be0947d41e8",
        "value": "imange.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:44+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "032a0d6a-f22f-4027-9e70-d51ae4c6e5a7",
        "value": "img8732g97.connect-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:44+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "156074ab-3e6b-43c9-b59d-b1d4f7d92a47",
        "value": "imtok.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:44+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d6bbe79-5e60-4fe6-b3a7-fff2e711602c",
        "value": "info-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:44+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "85f5215b-643c-44f5-81c8-c6f07b324916",
        "value": "info-team.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:44+00:00",
        "timestamp": "1776772904",
        "to_ids": true,
        "type": "domain",
        "uuid": "30f15681-aed5-401e-a32e-74d2e1fd3510",
        "value": "info.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772905",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a655ae5-dff4-4157-8148-d1c9eda27a79",
        "value": "infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772905",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb51b354-60fb-489f-88c1-7a9521d8e23d",
        "value": "ipnzrwww.join-call-facetime.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772905",
        "to_ids": true,
        "type": "domain",
        "uuid": "94e1b821-7d69-4a9c-9479-949e93cfafc9",
        "value": "irthhm.scomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772905",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef65e2d5-880b-43b9-904e-a3b24b6627aa",
        "value": "isupport.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772905",
        "to_ids": true,
        "type": "domain",
        "uuid": "170d3161-e33b-4cad-a623-ff5ebf7a23b0",
        "value": "ivqkiwebmail.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772905",
        "to_ids": true,
        "type": "domain",
        "uuid": "63e36183-b4ac-4e2b-834e-f7491c4f2afa",
        "value": "ixcmym.sapple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:45+00:00",
        "timestamp": "1776772906",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f7bf7cd-81fa-407e-924d-a82c48dfc981",
        "value": "j34idf.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:46+00:00",
        "timestamp": "1776772906",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e689744-61db-430d-8483-03fe7c5c44a7",
        "value": "jcha.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:46+00:00",
        "timestamp": "1776772906",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddd29154-72cf-49ab-8308-d938e6f5366d",
        "value": "jd930iojfhis67349x.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:46+00:00",
        "timestamp": "1776772906",
        "to_ids": true,
        "type": "domain",
        "uuid": "86aafdf0-1fca-419d-8dd9-fead8e16a57d",
        "value": "jfhwedkas.ecomservices.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:46+00:00",
        "timestamp": "1776772906",
        "to_ids": true,
        "type": "domain",
        "uuid": "22c5f2ca-54a1-4a2d-8ce9-4bae7ed3aa9f",
        "value": "jhgjhgjg.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:46+00:00",
        "timestamp": "1776772906",
        "to_ids": true,
        "type": "domain",
        "uuid": "46022186-31cf-471e-8e9e-3ad82597364d",
        "value": "jkhjkrkwejrhjsfhkjshrtre.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:47+00:00",
        "timestamp": "1776772907",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bc14eea-f75d-4500-9de5-afd892538031",
        "value": "join-call-facetime.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:47+00:00",
        "timestamp": "1776772907",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba3a208d-7907-4dd7-b5e8-ee3fc9ae4a6b",
        "value": "join-call-facetime.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:47+00:00",
        "timestamp": "1776772907",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6ce2445-b517-482d-a650-8bc3e162b2a9",
        "value": "join-call-facetion-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:47+00:00",
        "timestamp": "1776772907",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc0c8147-cf9b-4204-9eaf-104d0231a404",
        "value": "join-call-ms-team.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:47+00:00",
        "timestamp": "1776772907",
        "to_ids": true,
        "type": "domain",
        "uuid": "45e43ecb-d003-4da8-afe2-9419a01dc02c",
        "value": "join-call-team-meeting.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:47+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7927614-6697-4b2c-91ea-034743609a44",
        "value": "join-call-team-meeting.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c0f393b-a0fd-4b87-a079-927dc80ee02d",
        "value": "join-call-zoom-meeting.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d8dd91b-a025-4472-abd4-24bbb09ddb9a",
        "value": "join-call-zoommeeting.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7b91d1e-53a7-4aa0-bad6-155fd5b94a10",
        "value": "join-call.bot.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "e68f408c-78d1-41d4-9ae9-4993fa843d33",
        "value": "join-cll-bot-im.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "a19b644b-11da-4bd9-8d63-202c28f36ab4",
        "value": "join-face-time-service.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772908",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c314e30-1e81-42a8-ae36-3567c9f7439c",
        "value": "join-face.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:48+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9e5490e-df6b-44c6-937b-419bfaec4273",
        "value": "join-facetime-call-authen.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:49+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "04ddd85e-e378-494f-9921-a09569f87b51",
        "value": "join-facetime-call-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:49+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ca1a9f8-5f24-43af-81ba-c13cd5c7214c",
        "value": "join-facetime-call.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:49+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "c75dc26c-929c-4dba-a9a1-afad7d34c235",
        "value": "join-facetime.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:49+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f7ddd5-9718-4849-93f7-6cc59f46e14d",
        "value": "join-facetime.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:49+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc937efa-2ac9-46e4-8e15-6022d7299a54",
        "value": "join-facetime.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:49+00:00",
        "timestamp": "1776772909",
        "to_ids": true,
        "type": "domain",
        "uuid": "8190a28f-8ec8-4031-a3ca-9bd2356e6c12",
        "value": "join-facetime.com-ar.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772910",
        "to_ids": true,
        "type": "domain",
        "uuid": "40a10ca7-9393-4095-a095-d3120003db8c",
        "value": "join-facetime.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772910",
        "to_ids": true,
        "type": "domain",
        "uuid": "21e5e8e2-4b4c-4bd6-adfd-6e680ef2b77b",
        "value": "join-facetime.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772910",
        "to_ids": true,
        "type": "domain",
        "uuid": "f932e448-92a5-4205-81b1-fead5d13a4e0",
        "value": "join-facetime.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772910",
        "to_ids": true,
        "type": "domain",
        "uuid": "043c1b75-c735-49d9-819b-624898033623",
        "value": "join-facetime.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772910",
        "to_ids": true,
        "type": "domain",
        "uuid": "51f56876-d5ac-495e-932b-af9b9e810f3b",
        "value": "join-facetime.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772910",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c2db5ad-64f2-4c46-8e06-db6eb3912198",
        "value": "join-facetime.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:50+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "64dae2aa-2de5-4365-841c-321d50e0afde",
        "value": "join-facetime.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "b84b2501-c7b8-4a95-9921-c2dc53cade28",
        "value": "join-facetime.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c901fde-1fa3-4778-bf82-46823e0ee9c6",
        "value": "join-facetime.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0a570b4-1d39-4de0-be4c-258896bbaed4",
        "value": "join-facetime.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "f35dabae-146a-42c6-bd3d-a4e420c15405",
        "value": "join-facetime.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "97d111f2-558f-41b6-b581-e82ad66b5079",
        "value": "join-facetime.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772911",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0b2280c-1832-4ce9-9bec-5fe39087cad8",
        "value": "join-facetime.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:51+00:00",
        "timestamp": "1776772912",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f0bd7b8-42d0-4518-b9b5-f1c472413684",
        "value": "join-facetime.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:52+00:00",
        "timestamp": "1776772912",
        "to_ids": true,
        "type": "domain",
        "uuid": "88ac0b30-937b-4c19-8230-d60fb75b6f1f",
        "value": "join-facetime.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:52+00:00",
        "timestamp": "1776772912",
        "to_ids": true,
        "type": "domain",
        "uuid": "2799e858-8204-4786-b49c-8ff501c4bf4f",
        "value": "join-facetime.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:52+00:00",
        "timestamp": "1776772912",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfd3cc5b-5a28-4779-a2b4-92b09309f2b1",
        "value": "join-facetime.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:52+00:00",
        "timestamp": "1776772912",
        "to_ids": true,
        "type": "domain",
        "uuid": "00f194c0-f4f0-4f37-b08b-dc0d408fa867",
        "value": "join-facetime.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:52+00:00",
        "timestamp": "1776772912",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb242272-7f40-4f4a-be64-59f43544c0e6",
        "value": "join-facetime.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:52+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "6516dcf1-bc87-4434-bdf3-04affe3a484e",
        "value": "join-facetime.infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "818df7d3-99f4-4e0b-b1af-720d9a6f50b1",
        "value": "join-facetime.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "86d79468-fbf7-4766-9a41-55ee0a1242ec",
        "value": "join-facetime.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "a24f6805-0a0e-430a-a4c3-b60705e779e6",
        "value": "join-facetime.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "092b3bf2-e0b6-4276-a7a8-10fdf6a819ce",
        "value": "join-facetime.me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "02645560-f62d-4fcb-a0af-fa20e18416d3",
        "value": "join-facetime.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772913",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4debe48-44a0-415b-a7b1-6a7aba6e995d",
        "value": "join-facetime.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:53+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae7a9ffe-dd79-4db8-b76c-8c9c92fc4fd4",
        "value": "join-facetime.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "02bc147b-222f-44ae-8f9a-4c5c250093ec",
        "value": "join-facetime.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4b36457-b50b-4be3-b78c-25e843465e7b",
        "value": "join-facetimes.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "428dc052-7771-4b0d-977f-99eb5aa85d91",
        "value": "join-factime.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd105d03-f7b3-4209-9a9e-d17c86de974b",
        "value": "join-factime.id-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4bd5b07-129c-4ed0-8606-4043499fd7b4",
        "value": "join-faetime.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772914",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f9df83f-249b-4083-bb2f-6969274dc8a9",
        "value": "join-ft.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:54+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "214dd5ed-a8b5-405d-9066-eae28e498aff",
        "value": "join-fts.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:55+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b93c8fb-187d-41ac-8f88-0fb1503d4cf9",
        "value": "join-meet.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:55+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "be70f44d-face-4549-beec-597d9b1baa91",
        "value": "join-meeting-zm.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:55+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2ca20c7-1ffa-4500-be05-67f494ac34d2",
        "value": "join-meeting.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:55+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "116c3e80-aee0-4208-abde-ea2f0728d4cf",
        "value": "join-my-calls.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:55+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "24000d24-fa1c-42ac-8668-5684b516d8b2",
        "value": "join-securecall-tg.app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:55+00:00",
        "timestamp": "1776772915",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb487ba3-8380-4f12-9f43-48362fbfef86",
        "value": "join-signal.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772916",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a86d113-0617-4ef7-964f-d3ecc28160ad",
        "value": "join-team-invitation-web-call.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772916",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcc1fa69-e129-4637-a686-00a1e9e83613",
        "value": "join-teams.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772916",
        "to_ids": true,
        "type": "domain",
        "uuid": "489b4357-a45f-40b1-afbf-9ddf0607c6fd",
        "value": "join-teams.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772916",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8ce8f37-f684-4e8a-8c0d-dc6592de37e9",
        "value": "join-telegram.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772916",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3e5911b-0fac-4d55-927e-eed295ba2621",
        "value": "join-telegram.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772916",
        "to_ids": true,
        "type": "domain",
        "uuid": "d349f1a3-2b30-4ba0-ac4c-070b0b234c41",
        "value": "join-test.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:56+00:00",
        "timestamp": "1776772917",
        "to_ids": true,
        "type": "domain",
        "uuid": "32c887d6-71bf-4ea2-8e97-28c1692f668d",
        "value": "join-the-call.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:57+00:00",
        "timestamp": "1776772917",
        "to_ids": true,
        "type": "domain",
        "uuid": "25d96c68-2730-4d00-b501-7a18d410cbf2",
        "value": "join-the-calls.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:57+00:00",
        "timestamp": "1776772917",
        "to_ids": true,
        "type": "domain",
        "uuid": "e17d343c-d582-45af-b9ef-980515e9fd08",
        "value": "join-us.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:57+00:00",
        "timestamp": "1776772917",
        "to_ids": true,
        "type": "domain",
        "uuid": "76065ed9-78f0-46a5-9d93-9163b2045fc1",
        "value": "join-wa.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:57+00:00",
        "timestamp": "1776772917",
        "to_ids": true,
        "type": "domain",
        "uuid": "73d06ba7-b5bb-425a-9513-cb3ef05ea805",
        "value": "join-wa.me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:57+00:00",
        "timestamp": "1776772917",
        "to_ids": true,
        "type": "domain",
        "uuid": "6be6442b-39c9-4b36-abf2-299cdc2878c5",
        "value": "join-wd-facetime.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:57+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab634028-d222-466b-bbea-f3d36d235a46",
        "value": "join-zoom-meeting.com-ar.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc8725a2-9e9d-4e7e-ba3f-b7027da2bf9a",
        "value": "join-zoom-meeting.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bbde3de-90a8-48b6-8fef-4e7b5ec4d1a0",
        "value": "join-zoom.ar-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "c934d4bd-c18f-4d50-9c4f-753e01f5ab5d",
        "value": "join-zoom.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2c9e330-3764-4b85-9ebc-5ab9600b13e7",
        "value": "join.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "42711d3d-4d6c-488c-a55e-81b80e5e52d6",
        "value": "join.facetime.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772918",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5e4a4d2-9b91-4333-99aa-12ab866d109d",
        "value": "join.meeting.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:58+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c3a9041-2b13-4b89-931f-36e0d17296fd",
        "value": "jyitmsapple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1c49e21-19fd-4411-9a4c-622c2f655e99",
        "value": "kajkjsa.j34idf.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1dfc7b6-84a0-4796-b89f-a13b1d8cc01d",
        "value": "kb.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "c52704f7-d3d1-4aea-be9d-1db9f1c88859",
        "value": "kgpcaelw.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7aebb05-63e9-48d5-807a-684a820e7a0d",
        "value": "kkkwazhbwmwww.ft-cll.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "64d915d8-a034-4a0c-a5d3-ae3eda9883f9",
        "value": "kswqfmry.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772919",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9b5719f-40ca-4b30-ad21-35e1f3fdf034",
        "value": "lalnrctonpao.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:01:59+00:00",
        "timestamp": "1776772920",
        "to_ids": true,
        "type": "domain",
        "uuid": "48957745-162e-4282-8eac-2cebbd7976fa",
        "value": "landings.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:00+00:00",
        "timestamp": "1776772920",
        "to_ids": true,
        "type": "domain",
        "uuid": "83070a7a-8d76-4eb7-9700-369cd1ee1e80",
        "value": "lang-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:00+00:00",
        "timestamp": "1776772920",
        "to_ids": true,
        "type": "domain",
        "uuid": "e77e524d-1d9f-4855-b51d-4eeaa31f52d5",
        "value": "lcloud.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:00+00:00",
        "timestamp": "1776772920",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bf70d5e-a4f8-456a-9407-a62a6aae282d",
        "value": "lcloud.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:00+00:00",
        "timestamp": "1776772920",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7a9152e-161d-4911-824a-75b708d5858a",
        "value": "le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:00+00:00",
        "timestamp": "1776772920",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f5ea132-425f-4a2d-b2cb-f41bd4b6ff41",
        "value": "lhyjkqcm.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:00+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b0209ac-cbc2-4a64-b89f-c8acfc2b1db8",
        "value": "linedata.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "22a3afb5-bbef-4d62-b9bd-1689d1c1f9b9",
        "value": "link-device-signal.org-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "67ba1972-f328-48b6-bbc6-8978ea2bdf22",
        "value": "link-signal-org.en-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "990424fb-e518-4c47-a9a1-cf18f60363a3",
        "value": "link-signal-org.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "8514f1de-242c-4808-badb-3cf6f222026b",
        "value": "link-signal.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "2771de50-30d2-441a-b907-91cc61f23eb1",
        "value": "link-signal.id-ar.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772921",
        "to_ids": true,
        "type": "domain",
        "uuid": "3792b66b-cf56-44ab-9176-44db1fa4af49",
        "value": "link-signal.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:01+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd9af23f-1c34-4f66-a3eb-7db2d9ee7935",
        "value": "link.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "e95ed525-58de-4aed-893c-5aff300363cf",
        "value": "link.signal-account.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f840737-02ea-4117-b67a-35d3cc8602ea",
        "value": "llk4nrkl3rnlke3dl4jr30ij030ej0984jiedj04.ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "00d52dc6-2cc5-4e30-b32e-4b914dd601b9",
        "value": "lnkprtl.id-ar.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bc10cf2-38ec-4fc2-a3b3-6411e1851666",
        "value": "loading-cll-join-ft.re-ac.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "3017eac1-e2de-44ff-a663-3a4e7dd0ae78",
        "value": "loading-mng-blnk.re-ac.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772922",
        "to_ids": true,
        "type": "domain",
        "uuid": "6993616f-8671-4a93-aed2-0939ace206cf",
        "value": "log.rev.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:02+00:00",
        "timestamp": "1776772923",
        "to_ids": true,
        "type": "domain",
        "uuid": "77f2c76b-7aa1-4544-a123-0533afcdae58",
        "value": "login-account.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:03+00:00",
        "timestamp": "1776772923",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c5d5302-64e0-4c2f-a46f-c7621ab5fb72",
        "value": "login-apple.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:03+00:00",
        "timestamp": "1776772923",
        "to_ids": true,
        "type": "domain",
        "uuid": "0918d5f4-67ec-48be-accd-52fce0b8d9d8",
        "value": "login-apple.com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:03+00:00",
        "timestamp": "1776772923",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e1fa9a6-ea01-4f48-9b93-b477f9c90161",
        "value": "login-apple.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:03+00:00",
        "timestamp": "1776772923",
        "to_ids": true,
        "type": "domain",
        "uuid": "de2bba07-0e63-4bbe-bd6e-9d48be125e75",
        "value": "login-apple.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:03+00:00",
        "timestamp": "1776772923",
        "to_ids": true,
        "type": "domain",
        "uuid": "464ef660-37c9-433f-895b-600711007518",
        "value": "login-apple.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:03+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d81eb42-2f15-4afb-8072-b517286697f5",
        "value": "login-apple.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e74ab3f-9be0-46ba-a71a-64136dee3dc3",
        "value": "login-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0c73647-af8b-4aa1-b58e-b787f4ce4318",
        "value": "login-cloud.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b2ca46a-20a3-4922-9ffb-b299a64f7aa9",
        "value": "login-cloud.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "6412b6a1-0e1e-4928-9121-22f92b41e7a4",
        "value": "login-live-online.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "a464130c-dad0-4537-96ae-4352f99b844a",
        "value": "login-live.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772924",
        "to_ids": true,
        "type": "domain",
        "uuid": "328255ff-fe72-4585-b82a-31c47f107842",
        "value": "login-live.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:04+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f49638d-2600-4fec-8464-a38920bb60cf",
        "value": "login-live.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9b692c7-5923-4dbd-adce-1b512b7d5203",
        "value": "login-mofa-office.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "03138e18-a458-47da-a69e-5b148947031b",
        "value": "login-office-auth.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec8436fe-96f7-4bdf-bb59-1ff4686b0f58",
        "value": "login-office-validate-identity.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "95fc14ef-ad4c-467a-9654-dec36dfc27a0",
        "value": "login-office.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "f11e164b-6fab-4f2c-864b-8eaabadd71cb",
        "value": "login-office.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772925",
        "to_ids": true,
        "type": "domain",
        "uuid": "1947a400-3ae7-4333-add2-5f3e5a85bb1b",
        "value": "login-security.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:05+00:00",
        "timestamp": "1776772926",
        "to_ids": true,
        "type": "domain",
        "uuid": "b04cd11c-fa2a-4beb-987d-1a51e8ed47f4",
        "value": "login-yahoo.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:06+00:00",
        "timestamp": "1776772926",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ff1c1ef-5bde-4bcc-8519-82e4bc90be3b",
        "value": "login.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:06+00:00",
        "timestamp": "1776772926",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfe7899f-8219-4c1f-9332-a78d73f0bcd7",
        "value": "logmnzth.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:06+00:00",
        "timestamp": "1776772926",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a4e4f18-7728-4b5d-9a6a-30d96e800d41",
        "value": "logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:06+00:00",
        "timestamp": "1776772926",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ac24edf-7108-433b-96fa-7009b73408e2",
        "value": "m-s-info.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:06+00:00",
        "timestamp": "1776772926",
        "to_ids": true,
        "type": "domain",
        "uuid": "01823d06-1c1d-48cc-9800-11e09f29283b",
        "value": "m.comusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:06+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b8f787d-cef3-4f57-bb02-2667a7a37b69",
        "value": "m.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc99f9b7-0bab-48b7-bcc5-aada1b3061a2",
        "value": "m.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb443173-6c18-4c21-8f34-4fa01c1ac3b0",
        "value": "m.number-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "c990f40d-5b03-420f-aae4-ef8e310bf104",
        "value": "m.sapple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "386bd377-2dee-4a5b-b678-451fab9a41ca",
        "value": "m.scomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "878fbdec-64cf-4ed8-9b8e-dc7279d29948",
        "value": "m.sscomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772927",
        "to_ids": true,
        "type": "domain",
        "uuid": "aba7d1ce-20c6-49e7-8e94-2a4969db5e3d",
        "value": "m.sssssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:07+00:00",
        "timestamp": "1776772928",
        "to_ids": true,
        "type": "domain",
        "uuid": "d80b1d0f-a373-4bee-9853-0cff6b0e5c10",
        "value": "m.sssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:08+00:00",
        "timestamp": "1776772928",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e93de1b-bdd8-4406-b5d2-996ed5419795",
        "value": "m.ssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:08+00:00",
        "timestamp": "1776772928",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f3028bf-42c3-4f77-80d5-82c1881b2108",
        "value": "m.sssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:08+00:00",
        "timestamp": "1776772928",
        "to_ids": true,
        "type": "domain",
        "uuid": "c982552d-06f0-4a2f-918f-cfd8e18b92b1",
        "value": "m.ssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:08+00:00",
        "timestamp": "1776772928",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c1b3e8e-f4ca-4a4b-8e24-e0f3cd765939",
        "value": "m.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:08+00:00",
        "timestamp": "1776772928",
        "to_ids": true,
        "type": "domain",
        "uuid": "59057557-3361-4c47-a12f-20c4196bffdc",
        "value": "m.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:08+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcaa06ef-e13e-4e7c-9eae-27de43dd18d0",
        "value": "m.trusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "8739e555-4e89-4277-a4e6-a87404bea4a2",
        "value": "m.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7c0208e-272c-44f4-979c-87aa9c11248d",
        "value": "mail-auth.en-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "4058d1e3-489c-41c5-834d-5b03ff50b7cc",
        "value": "mail-bdf-bh.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "d869cd79-13bb-487e-99e2-201ab5e62579",
        "value": "mail-bdf-bh.owa365.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8c9e7ed-ec5d-4b9a-88d2-842893efd25e",
        "value": "mail-bdf-bh.owa365.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772929",
        "to_ids": true,
        "type": "domain",
        "uuid": "57805876-6af1-46cd-9834-b9832167e4ec",
        "value": "mail.ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:09+00:00",
        "timestamp": "1776772930",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4802504-a545-48c7-b903-848062ee961b",
        "value": "mail.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:10+00:00",
        "timestamp": "1776772930",
        "to_ids": true,
        "type": "domain",
        "uuid": "12f34f63-22f8-47fc-8711-f8f3a064848f",
        "value": "mail.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:10+00:00",
        "timestamp": "1776772930",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8eb1b91-6d89-4f87-aa89-92218e403b3e",
        "value": "mail.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:10+00:00",
        "timestamp": "1776772930",
        "to_ids": true,
        "type": "domain",
        "uuid": "c69d04c8-ab99-45d5-a7d5-b5ce3093d841",
        "value": "mail.app-info.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:10+00:00",
        "timestamp": "1776772930",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae42a7df-5ea4-47f8-a94e-f9bab540d168",
        "value": "mail.app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:10+00:00",
        "timestamp": "1776772930",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f1f633-b268-4eff-adaa-c90b4645fef6",
        "value": "mail.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:10+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "e67b58a9-93b0-427f-9863-f22e7996c352",
        "value": "mail.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "c90039aa-2a27-48f4-afa1-c2518747bb36",
        "value": "mail.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e825434-cf32-43ba-9b23-c8c58f4c3321",
        "value": "mail.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a187f7d-af45-46af-84b7-e7470fd22fd0",
        "value": "mail.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cf712d1-b583-4545-addd-823aa0276fcf",
        "value": "mail.ar-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "26883544-0e3d-47e3-9a82-91dad9adc4b3",
        "value": "mail.cc-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772931",
        "to_ids": true,
        "type": "domain",
        "uuid": "e790552e-38db-43f8-8739-3e159bdff80f",
        "value": "mail.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:11+00:00",
        "timestamp": "1776772932",
        "to_ids": true,
        "type": "domain",
        "uuid": "41d75d44-302c-4d51-a8d0-fc9259761b1a",
        "value": "mail.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:12+00:00",
        "timestamp": "1776772932",
        "to_ids": true,
        "type": "domain",
        "uuid": "45f6c222-d6ff-4f94-8694-e8b8ec980b91",
        "value": "mail.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:12+00:00",
        "timestamp": "1776772932",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7e2f25b-c377-44b2-8143-dfdf2f4cba7c",
        "value": "mail.com-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:12+00:00",
        "timestamp": "1776772932",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bf774bf-b1b3-44ac-b8e5-3e40aaeac443",
        "value": "mail.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:12+00:00",
        "timestamp": "1776772932",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa531d14-2977-4b01-8e9f-cc74d4b2446b",
        "value": "mail.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:12+00:00",
        "timestamp": "1776772932",
        "to_ids": true,
        "type": "domain",
        "uuid": "90ffaf6e-412a-4aba-ba75-a722f9e796db",
        "value": "mail.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:12+00:00",
        "timestamp": "1776772933",
        "to_ids": true,
        "type": "domain",
        "uuid": "8de1703a-db04-47b3-9e37-c02cb41f2d17",
        "value": "mail.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:13+00:00",
        "timestamp": "1776772933",
        "to_ids": true,
        "type": "domain",
        "uuid": "383b5f5b-a3d2-46a2-88f2-ee73442265c2",
        "value": "mail.com-en-us.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:13+00:00",
        "timestamp": "1776772933",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d2a0302-dccf-4ad7-ba2d-833f00e4281b",
        "value": "mail.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:13+00:00",
        "timestamp": "1776772933",
        "to_ids": true,
        "type": "domain",
        "uuid": "d91abcd2-da12-48d6-b165-55ed05049ded",
        "value": "mail.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:13+00:00",
        "timestamp": "1776772933",
        "to_ids": true,
        "type": "domain",
        "uuid": "1415143c-b619-4fb5-802a-6a80ed07bf46",
        "value": "mail.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:13+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fc8f3c1-21d6-48bc-9780-a44a01e9379a",
        "value": "mail.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "539fa58f-3e67-4db8-a268-15d0e2161c20",
        "value": "mail.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a0ab0ee-6107-451e-9829-89f1c8f98ce3",
        "value": "mail.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "336c80e5-068e-4c5a-b05b-3b8842655b4d",
        "value": "mail.connect-signal.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f747e5e-c1ef-4ff7-bffd-cef52a2520aa",
        "value": "mail.connect-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "263ef516-09b2-4bf0-85c2-1ae3bebed98c",
        "value": "mail.datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772934",
        "to_ids": true,
        "type": "domain",
        "uuid": "b005a9fd-b9a5-489c-8ff6-9bd9fd4dd872",
        "value": "mail.datarestores.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:14+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9eccd31-8f17-4e47-b92e-62dd85585122",
        "value": "mail.datastatistics.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:15+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "540beb0a-28fd-4b56-af31-794a4b8a497b",
        "value": "mail.ecomservices.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:15+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "cffdd83f-913d-4acc-8d06-907a1e41ca34",
        "value": "mail.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:15+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "65a44645-a4b5-4c0c-aebf-99665fffd252",
        "value": "mail.en-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:15+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "04e7bb8f-b753-4920-a56d-17715a55afd3",
        "value": "mail.en-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:15+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e8b4c97-3984-4271-8410-0c830c90ac5c",
        "value": "mail.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:15+00:00",
        "timestamp": "1776772935",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf26ad9e-3a76-49dd-85ae-76d3e7f6a8bd",
        "value": "mail.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772936",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e7fa945-92ef-4f96-ad6b-ef573a239fb7",
        "value": "mail.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772936",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a8bee44-9070-415f-8765-70d6256ffe02",
        "value": "mail.en-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772936",
        "to_ids": true,
        "type": "domain",
        "uuid": "66b89e4f-23e3-4075-9cde-0c87405253e7",
        "value": "mail.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772936",
        "to_ids": true,
        "type": "domain",
        "uuid": "211eb83c-2240-4959-9fb5-5e47851f0494",
        "value": "mail.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772936",
        "to_ids": true,
        "type": "domain",
        "uuid": "e070c8da-4b5a-4cdd-bf75-c80170397228",
        "value": "mail.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772936",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f7f7c8b-6a9f-4fbe-b4eb-5dfda1ec0c9c",
        "value": "mail.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:16+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f875ca4-3f3b-4212-9bc1-099b8c52ff7b",
        "value": "mail.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb49fb83-723f-4264-85cb-570608cadd72",
        "value": "mail.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "1740ebf6-44cf-487b-a49a-e09993ac0459",
        "value": "mail.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3922ee5-7426-44b9-9ed7-bebcd33d8a74",
        "value": "mail.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "d14d321f-25a9-4211-ba94-b92c08de5324",
        "value": "mail.host.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "75269900-79d0-4e2a-a4f4-a2776e10c801",
        "value": "mail.ht-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772937",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6f2e112-4225-4d71-9211-782a22492090",
        "value": "mail.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:17+00:00",
        "timestamp": "1776772938",
        "to_ids": true,
        "type": "domain",
        "uuid": "35fce9a7-28f5-45eb-a909-146a9ae38ac8",
        "value": "mail.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:18+00:00",
        "timestamp": "1776772938",
        "to_ids": true,
        "type": "domain",
        "uuid": "e87d9434-4c67-4a38-a180-ba8545df5e84",
        "value": "mail.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:18+00:00",
        "timestamp": "1776772938",
        "to_ids": true,
        "type": "domain",
        "uuid": "a20421ba-cf94-4713-af53-ae5e8f4b96ec",
        "value": "mail.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:18+00:00",
        "timestamp": "1776772938",
        "to_ids": true,
        "type": "domain",
        "uuid": "031d4067-26d3-4a7d-b735-d6f85daab572",
        "value": "mail.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:18+00:00",
        "timestamp": "1776772938",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ceeca00-8906-489d-9c24-937e28707edb",
        "value": "mail.id-ar.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:18+00:00",
        "timestamp": "1776772938",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f83b9c9-eb5f-44e7-ac9e-705ccf45caee",
        "value": "mail.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:18+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7c4fb0e-d22a-4922-aec3-ac1f93d0ae4e",
        "value": "mail.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "73ee37c8-4430-4c3c-9c24-86495c8d5f0a",
        "value": "mail.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b54e1ce-8656-4c1d-a3f4-bca14ae02b20",
        "value": "mail.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "da491d92-994f-49f7-919b-1023db7e0342",
        "value": "mail.id-us.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "eed2134f-a921-4dde-9684-520d34bcf05b",
        "value": "mail.id-us.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "69fc89a0-98d1-4f34-913a-26e45d2887da",
        "value": "mail.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772939",
        "to_ids": true,
        "type": "domain",
        "uuid": "33791e77-167f-457d-b6eb-29358d939ab3",
        "value": "mail.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:19+00:00",
        "timestamp": "1776772940",
        "to_ids": true,
        "type": "domain",
        "uuid": "c69f07c6-8093-407f-9b5d-5dc3c40203d4",
        "value": "mail.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:20+00:00",
        "timestamp": "1776772940",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6ee05ee-cb6a-45ea-aded-1516ec5178da",
        "value": "mail.ilability.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:20+00:00",
        "timestamp": "1776772940",
        "to_ids": true,
        "type": "domain",
        "uuid": "59131464-0e88-46ad-b0a1-904cf0e7f090",
        "value": "mail.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:20+00:00",
        "timestamp": "1776772940",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f696814-f664-4244-a6fb-ebdaef305bf6",
        "value": "mail.linedata.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:20+00:00",
        "timestamp": "1776772940",
        "to_ids": true,
        "type": "domain",
        "uuid": "7869a515-ae2a-42c2-86db-c5cd84586c5b",
        "value": "mail.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:20+00:00",
        "timestamp": "1776772940",
        "to_ids": true,
        "type": "domain",
        "uuid": "21b04a9e-2fa7-443a-858b-8df1cdae2bbf",
        "value": "mail.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:20+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "652ef6f1-2372-4dae-97fb-61e6c42d9a54",
        "value": "mail.mation-ae.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "6598de42-dc3f-44cb-a0ce-f7868cdb2363",
        "value": "mail.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "176eeca6-874b-4898-872e-28d6e8912b75",
        "value": "mail.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "91f36da2-3fd2-451f-8f4c-ae124348c85b",
        "value": "mail.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "d366b444-194c-48a3-8998-0c2d8b2cbca5",
        "value": "mail.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d90a8e8-5a91-41e7-b792-eb7433b3aeca",
        "value": "mail.me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772941",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ae3eef-eb4c-4e15-ac95-ab7ebb90b92f",
        "value": "mail.me-info.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:21+00:00",
        "timestamp": "1776772942",
        "to_ids": true,
        "type": "domain",
        "uuid": "85f9b5da-f545-4bab-b36b-e2299cf43b1e",
        "value": "mail.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:22+00:00",
        "timestamp": "1776772942",
        "to_ids": true,
        "type": "domain",
        "uuid": "462f43c0-c755-4fb3-8677-c9864b0de302",
        "value": "mail.me-mng.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:22+00:00",
        "timestamp": "1776772942",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e3f2e16-511f-46e9-889b-e4f0e3012df9",
        "value": "mail.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:22+00:00",
        "timestamp": "1776772942",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5ec4f6d-0f1f-4031-bbf0-2776c24c145b",
        "value": "mail.message-apple.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:22+00:00",
        "timestamp": "1776772942",
        "to_ids": true,
        "type": "domain",
        "uuid": "8be9586c-9c0f-4910-93ba-04578c16bcfb",
        "value": "mail.mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:22+00:00",
        "timestamp": "1776772942",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b1a3013-6685-405a-84ce-9451a33f0e0d",
        "value": "mail.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:22+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "3eaeb1ec-0d99-4705-aa4d-79748fc60a2d",
        "value": "mail.ms-mng.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:23+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "a222630c-adaa-4a20-b5c9-f07b6cb5c51f",
        "value": "mail.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:23+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb419284-b35f-4227-89ba-f9ca8d7aa64e",
        "value": "mail.ms-storedata.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:23+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "39d18f6f-071b-43f9-9981-0c12bdcdef95",
        "value": "mail.newsonline.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:23+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "287612a3-b519-4542-be41-c633a4754f6a",
        "value": "mail.org-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:23+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "50d5aba3-092d-48aa-a75e-4e9b20cf325a",
        "value": "mail.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:23+00:00",
        "timestamp": "1776772943",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcf01fde-5cb1-442e-9859-535efb1637cc",
        "value": "mail.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772944",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bb8c109-5e5e-4a50-ab60-5faa63bc7c00",
        "value": "mail.owa365.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772944",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a77c000-cfd6-4968-801f-008ff067e33a",
        "value": "mail.owa365.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772944",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6eb0fbd-8a20-4eb9-ae4d-10034d9a14cf",
        "value": "mail.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772944",
        "to_ids": true,
        "type": "domain",
        "uuid": "185fa202-c5d1-4a2b-b5fd-e0647e321693",
        "value": "mail.re-ac.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772944",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6ea47f0-803d-482a-b466-05fc41e4b014",
        "value": "mail.regularsports.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772944",
        "to_ids": true,
        "type": "domain",
        "uuid": "afd159d0-a8a6-411e-a168-3c0d3b191538",
        "value": "mail.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:24+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "869ee925-220e-48d6-a42a-92d797165136",
        "value": "mail.signal-account.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dd2e636-e7e8-4b18-9fe8-f0e72f0fd778",
        "value": "mail.signal-chat.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "093afd93-a07e-4997-895b-f37da5924cdd",
        "value": "mail.signal-help.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "c018ae12-2912-4097-b2f4-089e65edb981",
        "value": "mail.srv1.srv648.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "90c69d42-08c7-486b-9d7f-b6733db004ee",
        "value": "mail.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "642e6a6c-6d31-4640-90e9-782c1f2cd8c7",
        "value": "mail.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772945",
        "to_ids": true,
        "type": "domain",
        "uuid": "41219123-885f-43d6-a465-48c67056c422",
        "value": "mail.web-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:25+00:00",
        "timestamp": "1776772946",
        "to_ids": true,
        "type": "domain",
        "uuid": "54269320-ddfc-469b-8eab-1e3b81f47de9",
        "value": "mail.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:26+00:00",
        "timestamp": "1776772946",
        "to_ids": true,
        "type": "domain",
        "uuid": "e77d5751-448c-4f91-bb24-e80f37b11cf7",
        "value": "mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:26+00:00",
        "timestamp": "1776772946",
        "to_ids": true,
        "type": "domain",
        "uuid": "d660b336-71b2-4649-b0c3-a8eca52c8100",
        "value": "main-auth.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:26+00:00",
        "timestamp": "1776772946",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fe12b36-4b24-483b-8e7b-82293ccb9590",
        "value": "maisqsssssm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:26+00:00",
        "timestamp": "1776772946",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8cfc9f5-26f6-48bb-933e-bfe87fb5dbed",
        "value": "mamsdjlahdiu39r73y93y934r79r.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:26+00:00",
        "timestamp": "1776772946",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c7efea8-1311-44ba-a872-0d12a75773be",
        "value": "manage-delivery.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:26+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6bd1fe0-c784-4f70-9fa2-fe124137698b",
        "value": "manage-facetimeidms.datastatistics.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ad353bc-411e-499a-a2a9-1fd7c1c8756e",
        "value": "manage-id.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0aa1a9f-13fa-4600-a10d-73891892a18b",
        "value": "manage-id.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7d683e4-b0f6-4117-8d1c-6d8f4ab17e42",
        "value": "manage-id.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cf1c2bf-d38f-4a5b-8950-bb9584895f20",
        "value": "manage-iservices.en-ir.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "d887f241-f15a-499a-a2c5-bf5271f07dec",
        "value": "manage-mofa-govbh.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772947",
        "to_ids": true,
        "type": "domain",
        "uuid": "6472650f-d11d-4701-99b3-dc1bdf794246",
        "value": "manage-ms.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:27+00:00",
        "timestamp": "1776772948",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d5c2a0d-606e-4a85-940d-4891716d754f",
        "value": "manage-ms.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:28+00:00",
        "timestamp": "1776772948",
        "to_ids": true,
        "type": "domain",
        "uuid": "666a8c9d-cd0a-495e-8b7c-46d20ec94d56",
        "value": "manage.ac-im.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:28+00:00",
        "timestamp": "1776772948",
        "to_ids": true,
        "type": "domain",
        "uuid": "e606bece-f12c-492a-8a12-703e4f58e37e",
        "value": "manage.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:28+00:00",
        "timestamp": "1776772948",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b48c466-50bf-45ef-9537-b69831f2bf37",
        "value": "manage.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:28+00:00",
        "timestamp": "1776772948",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1301a37-8e3c-46ec-9bce-ce6d61274053",
        "value": "mange-icl0ud.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:28+00:00",
        "timestamp": "1776772948",
        "to_ids": true,
        "type": "domain",
        "uuid": "238e311a-bad4-4782-81c0-5881d71dae55",
        "value": "marketing.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:28+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b0e73d4-cdab-45a7-99f8-e4ba864c1455",
        "value": "mation-ae.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "71e28f60-fe6e-4f64-b59b-cfd286361b0c",
        "value": "mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1b4f0b1-d397-406a-a507-d509ecb3a653",
        "value": "mc-4kdkf3lflj34lfjlj3l4r34r.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "a855343f-bec7-4396-a1a9-e5296bea7d30",
        "value": "me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f828c61-aa01-47e8-bb0f-970ef0c75a6a",
        "value": "me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "58916269-2dec-44ed-8401-fae8ad017024",
        "value": "me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772949",
        "to_ids": true,
        "type": "domain",
        "uuid": "8852420b-7986-4d55-a5d6-fb3357495f63",
        "value": "me-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:29+00:00",
        "timestamp": "1776772950",
        "to_ids": true,
        "type": "domain",
        "uuid": "400a8a67-a166-4a03-96d2-f33ffa2585b0",
        "value": "me-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:30+00:00",
        "timestamp": "1776772950",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8ff6de4-1ada-4ab9-9baa-b0e281546e5a",
        "value": "me-info.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:30+00:00",
        "timestamp": "1776772950",
        "to_ids": true,
        "type": "domain",
        "uuid": "edf3497e-1dd1-4a15-b0b2-1776dcf8cc45",
        "value": "me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:30+00:00",
        "timestamp": "1776772950",
        "to_ids": true,
        "type": "domain",
        "uuid": "46ccdba7-0259-4c12-b9c3-5665e887bec5",
        "value": "me-mng.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:30+00:00",
        "timestamp": "1776772950",
        "to_ids": true,
        "type": "domain",
        "uuid": "88b69b2b-98b7-4597-93d3-b52948595d24",
        "value": "me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:30+00:00",
        "timestamp": "1776772950",
        "to_ids": true,
        "type": "domain",
        "uuid": "f73dd3d5-1b2e-4e79-a5ce-7743e30aff23",
        "value": "meeting.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:30+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "83f575b6-eebb-4c3a-a2b3-83c283725382",
        "value": "members.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "07305566-fb63-48d8-a064-93f75c550501",
        "value": "members.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "2503e88a-e2f0-4c23-bb44-fa3a7ace717d",
        "value": "message-apple.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "f22ec69e-6a8e-4246-b23d-b995c8706c61",
        "value": "mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad1a05f2-aba8-4cf6-bdee-2bcacbfe0631",
        "value": "mg-tg.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ae19ec1-0b60-4752-9889-2d8c09f655e4",
        "value": "mjkg3hurho34irh3o4iruh3oir34.lang-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772951",
        "to_ids": true,
        "type": "domain",
        "uuid": "461aef90-6838-4034-8ea9-56c54127a08a",
        "value": "mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:31+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d7189b4-3a9b-41af-80a4-5fe82175c454",
        "value": "mn-id.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:32+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bdff89a-6181-4e20-ba0c-073ca35d9e7b",
        "value": "mn-rcv-en.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:32+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "debb8c5d-694a-4bc6-a71c-b50ccea3579d",
        "value": "mn-rv-en-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:32+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "528035ac-59e5-4428-86e4-d662d921a71c",
        "value": "mng-en.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:32+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "e50d8f84-9a7e-4008-a81e-ad9cab0814dc",
        "value": "mng-id-val.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:32+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "46cd12a8-3cf1-4532-b206-83104e5760c6",
        "value": "mng-info-doc-mf.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:32+00:00",
        "timestamp": "1776772952",
        "to_ids": true,
        "type": "domain",
        "uuid": "563bbb03-753d-4c82-a0e9-0e6b351180af",
        "value": "mng-info.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772953",
        "to_ids": true,
        "type": "domain",
        "uuid": "a33ecc70-06bb-4ef3-86de-2a8e5815f627",
        "value": "mng-infor.mation-ae.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772953",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b219424-de0c-4592-b6cb-cbeec2f6fc36",
        "value": "mng-ma-il.owa365.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772953",
        "to_ids": true,
        "type": "domain",
        "uuid": "94d4b0e9-d9fd-4afa-b4bd-bee28f4f20a2",
        "value": "mng-ml-bdf-bh.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772953",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea47c84e-2272-437f-990c-27514b768ef1",
        "value": "mng-num-blk.ar-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772953",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cd4f221-5d61-4623-972b-2076d2650ada",
        "value": "mng-re-conection.re-ac.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772953",
        "to_ids": true,
        "type": "domain",
        "uuid": "36a7b675-6964-48a9-9528-5761fbbe602f",
        "value": "mng-rec-idmsgnls.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:33+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5f360a8-e485-40ef-b169-42bac47fb0d7",
        "value": "mng-rec-mofa-bh.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:34+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc3fbb22-2353-48cd-aa89-def359769966",
        "value": "mng-rec-mofa-govbh.mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:34+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b88f65c-2c37-4293-9afe-e82c2f8324fa",
        "value": "mng-rec.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:34+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "26afe675-fd5e-47e4-8c6f-8064fec7a1c9",
        "value": "mng-rec.fullrestores.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:34+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b583fc-24bd-49c0-b467-7462cf838247",
        "value": "mng.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:34+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f656782-3d93-4d32-a701-4bb01dd63829",
        "value": "mngcontrol.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:34+00:00",
        "timestamp": "1776772954",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e726e2d-c27e-4b96-8477-720ccc256dfc",
        "value": "mode-rec.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772955",
        "to_ids": true,
        "type": "domain",
        "uuid": "9063ca3d-365f-4aa5-9a2a-5809d3b1da77",
        "value": "mode-rec.web-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772955",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fa92947-82c2-4cf6-afe9-f9a87ba6dd0f",
        "value": "mofa-gov-bh.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772955",
        "to_ids": true,
        "type": "domain",
        "uuid": "e01df5df-1bf6-4177-a918-a7e5f1479e4c",
        "value": "mofa-gov-bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772955",
        "to_ids": true,
        "type": "domain",
        "uuid": "78ca20e6-c9a0-46b2-9711-3886396583dc",
        "value": "mpl.jcha.com-us.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772955",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e591455-53cc-4d8f-a67a-f94b697cb51a",
        "value": "ms-call-manage.mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772955",
        "to_ids": true,
        "type": "domain",
        "uuid": "066cec1b-e9f4-4d7f-afaa-62be67b2153d",
        "value": "ms-mng.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:35+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "90da3079-0eed-4c97-930f-9d7aa99b216f",
        "value": "ms-rec-mng.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5861e80-3fa0-4b3b-b42b-7876a383fb6b",
        "value": "ms-rec-ncc-gov-bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "d02587fc-457c-4b04-b52b-78c77e7da506",
        "value": "ms-rec-pmo-gov.bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "f767361e-df0c-4bef-8abc-4a809aa5b807",
        "value": "ms-rec.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdf20c42-d9f4-4af1-8743-bbfd83550de7",
        "value": "ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3491a2d-9b7c-4207-ad60-0c8597ad9bca",
        "value": "ms-storedata.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772956",
        "to_ids": true,
        "type": "domain",
        "uuid": "38e3e8c3-91f1-468a-b36c-77a884b93ef4",
        "value": "ms.connect.info.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:36+00:00",
        "timestamp": "1776772957",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc680c40-5588-4252-98ef-3e6c16b339fa",
        "value": "ms.connecting.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:37+00:00",
        "timestamp": "1776772957",
        "to_ids": true,
        "type": "domain",
        "uuid": "826dfb27-ffd2-49c3-8919-0b23003553af",
        "value": "msnsge.ids-io.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:37+00:00",
        "timestamp": "1776772957",
        "to_ids": true,
        "type": "domain",
        "uuid": "2411f66a-5d23-449c-bea4-6190fb1d0e5e",
        "value": "msoft.ht-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:37+00:00",
        "timestamp": "1776772957",
        "to_ids": true,
        "type": "domain",
        "uuid": "094972ef-5ff0-4c22-ad41-4ee0d7aa1c58",
        "value": "mta-sts.mail.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:37+00:00",
        "timestamp": "1776772957",
        "to_ids": true,
        "type": "domain",
        "uuid": "91536656-9a5a-4462-bbdf-b24eb0e39edc",
        "value": "my-call-join.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:37+00:00",
        "timestamp": "1776772957",
        "to_ids": true,
        "type": "domain",
        "uuid": "23d3ed6d-eba9-4886-a2bd-03f968e021fd",
        "value": "myaccount.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:37+00:00",
        "timestamp": "1776772958",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3739cbf-5366-4010-8a52-b0aee5343dda",
        "value": "myaccount.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:38+00:00",
        "timestamp": "1776772958",
        "to_ids": true,
        "type": "domain",
        "uuid": "07629db1-b588-4099-a8a0-c194a50259f3",
        "value": "myftasdffg.regularsports.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:38+00:00",
        "timestamp": "1776772958",
        "to_ids": true,
        "type": "domain",
        "uuid": "d48c9148-bbc0-461b-a865-051422ee1864",
        "value": "mzkkajh4rh3if9f3j4.re-ac.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:38+00:00",
        "timestamp": "1776772958",
        "to_ids": true,
        "type": "domain",
        "uuid": "e56f9d68-7f28-48ba-86f9-18d33a73aa8c",
        "value": "natim.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:38+00:00",
        "timestamp": "1776772958",
        "to_ids": true,
        "type": "domain",
        "uuid": "26d00974-4d8c-483c-a426-72072d8e86bc",
        "value": "nb.com-ar.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:38+00:00",
        "timestamp": "1776772958",
        "to_ids": true,
        "type": "domain",
        "uuid": "a497569d-5565-43c7-be4a-c025136868f8",
        "value": "new-upl.signal-chat.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:38+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8b05b59-d4a7-464c-b446-5248a1db8291",
        "value": "new.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "318ea30c-fa10-4339-b909-c9a98c81ae84",
        "value": "new.com-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "9bb3f949-d088-4350-b3fc-38758c2d52c9",
        "value": "new.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3e01a3f-3f58-49ec-82c4-1fbb483a4fbd",
        "value": "new.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "657ab744-bfdd-4d2b-8764-5d14402ef2af",
        "value": "new.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8fab2f3-4948-4845-a270-d09de55ab4c0",
        "value": "new.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772959",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf3f9250-3062-42b1-94a3-7f6bd8905dea",
        "value": "new.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:39+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "e12fd5e0-1c26-4351-9f57-74b92c3f1d87",
        "value": "new.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:40+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "61f33348-72c4-433e-9d46-dd2d9e693ecf",
        "value": "new.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:40+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a0ae580-ad23-42d4-bdfb-aabe86d8f364",
        "value": "new.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:40+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc273ac6-4d69-4786-b94d-e695d2b49ad5",
        "value": "new.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:40+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "b491336e-0296-4b73-bd1c-3870cef70601",
        "value": "new1.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:40+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "7287a081-5267-4de0-b1ea-537c4640a36c",
        "value": "new2.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:40+00:00",
        "timestamp": "1776772960",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fcfbab6-a48e-4676-ac73-4470c9d74a79",
        "value": "news-jpost-com.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772961",
        "to_ids": true,
        "type": "domain",
        "uuid": "3661d2a9-1ab1-43a8-8447-500f09595514",
        "value": "news-reuters-com.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772961",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fc1e9a6-b3e0-4893-a115-799a77b92650",
        "value": "newsonline.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772961",
        "to_ids": true,
        "type": "domain",
        "uuid": "93a678dc-c783-49d7-9780-04e4032c5381",
        "value": "newupdate.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772961",
        "to_ids": true,
        "type": "domain",
        "uuid": "705f88a9-fdd2-4b4d-9a22-20635d088ca9",
        "value": "neww.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772961",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cd88f67-ab9e-45a1-9a82-cbf82d668a7a",
        "value": "neww.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772961",
        "to_ids": true,
        "type": "domain",
        "uuid": "173b07dd-1199-43f3-9a77-76133ca1a6c6",
        "value": "neww.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:41+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "784d571d-6092-40c1-a25a-ed47de505156",
        "value": "nhcpowtzdscpanel.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:42+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4269afb-1d16-44dd-a6ec-504cb82e35c8",
        "value": "nhvkncpcalendars.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:42+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a650837-0d0e-4df2-94f4-69da7e1c1dd9",
        "value": "ns1.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:42+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b6324c3-3711-4daf-b530-becabaa08c87",
        "value": "ns1.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:42+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "442a179a-f5c8-4f26-9384-b663565158bb",
        "value": "ns1.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:42+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "68bbdf1c-afd5-4d12-8afd-a0ca3ddc6c3e",
        "value": "ns2.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:42+00:00",
        "timestamp": "1776772962",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ac10c43-3d3f-4cd8-a8f9-fa05222ec7b3",
        "value": "ns2.com-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772963",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc085c94-e945-446c-b80d-8687f25c9e41",
        "value": "ns2.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772963",
        "to_ids": true,
        "type": "domain",
        "uuid": "275b410d-5c91-437d-a266-a70cdaf4ed37",
        "value": "ns2.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772963",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a82dfe4-f17a-4e93-bf8b-cc1388a08c6c",
        "value": "num-apple.info-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772963",
        "to_ids": true,
        "type": "domain",
        "uuid": "d139de23-ea47-447a-8d9d-658e50cf0cf0",
        "value": "num-auth-blk.me-info.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772963",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f0aa9a1-0a09-448d-ba0b-6dc8da7879f2",
        "value": "num-auth-wtid.me-info.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772963",
        "to_ids": true,
        "type": "domain",
        "uuid": "442bad9b-8880-4a0d-aa28-c8c74a97644d",
        "value": "num-blk.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:43+00:00",
        "timestamp": "1776772964",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4dff13e-5e66-4bc3-8003-f6ef0e734477",
        "value": "num-blk.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:44+00:00",
        "timestamp": "1776772964",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5f63e8c-b0f8-4953-a50f-287074b1da94",
        "value": "num-rev.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:44+00:00",
        "timestamp": "1776772964",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b8943ba-c054-4659-99aa-91bed1623e04",
        "value": "num-rev.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:44+00:00",
        "timestamp": "1776772964",
        "to_ids": true,
        "type": "domain",
        "uuid": "acb7b231-1c53-4d76-8f6c-ec854b301a3c",
        "value": "num-rev.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:44+00:00",
        "timestamp": "1776772964",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ba6f2c0-f145-45b1-865d-1fd47e89ecca",
        "value": "num-rev.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:44+00:00",
        "timestamp": "1776772964",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0539dbc-2117-486f-b4f5-be34b1d5b4cd",
        "value": "num-rev.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:44+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b56e6fa-95ab-4002-9bee-fc6012da9ced",
        "value": "num-revs.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b2d79a9-d516-4e6d-8e6c-e2e016249096",
        "value": "num-revs.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec5f8d4b-94dc-4a48-bd29-9dbab1d9c24a",
        "value": "num-revw.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ed03d1d-3757-4187-afb9-822e77634260",
        "value": "num-revw.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffe73283-b63e-4fac-851d-8fe17e4f6ea2",
        "value": "num-signal-org.en-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b4012cd-94e3-4c02-8e5d-c79545e72fe5",
        "value": "num-signal.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772965",
        "to_ids": true,
        "type": "domain",
        "uuid": "4633911c-ce96-42da-9876-1e0b3cd8f841",
        "value": "num-wid.me-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:45+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e09edd5-ce16-4376-9300-6585a195c7b4",
        "value": "num-wrevs.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "6840d3f4-d818-44d4-a541-5613fe5b50e3",
        "value": "numb.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c3de9cd-ac64-4c91-9084-4cce6300c91f",
        "value": "number-appleid.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "27f08871-43b5-431c-80c1-d5d868809802",
        "value": "number-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "bef96994-b341-4f8e-bb91-a6cd1373eacc",
        "value": "number-appleid.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a18b122-4b91-43f8-b359-548025c89605",
        "value": "number-appleid.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772966",
        "to_ids": true,
        "type": "domain",
        "uuid": "1458d115-d36f-4299-b0dc-639963de3a00",
        "value": "number-appleid.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:46+00:00",
        "timestamp": "1776772967",
        "to_ids": true,
        "type": "domain",
        "uuid": "618b37bc-f56b-4082-a257-a4d99a85a12d",
        "value": "number-co.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:47+00:00",
        "timestamp": "1776772967",
        "to_ids": true,
        "type": "domain",
        "uuid": "9433f630-5ae4-4a62-9bae-489f253c026f",
        "value": "number-cof.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:47+00:00",
        "timestamp": "1776772967",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c683fcb-5264-4576-a2cb-81e8e4aba6db",
        "value": "number-id.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:47+00:00",
        "timestamp": "1776772967",
        "to_ids": true,
        "type": "domain",
        "uuid": "64eb4be8-ae1e-466b-930b-a908876b8f1a",
        "value": "number-ids.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:47+00:00",
        "timestamp": "1776772967",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ac8019e-4575-4e78-8a32-157f9d75aaa2",
        "value": "number-login.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:47+00:00",
        "timestamp": "1776772967",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3597a9d-b7ec-4b79-a24e-ac712cdda1e7",
        "value": "number-review.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:47+00:00",
        "timestamp": "1776772968",
        "to_ids": true,
        "type": "domain",
        "uuid": "e93fb6da-e9a7-4f99-91f5-1c19e97104a5",
        "value": "number-signal.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:48+00:00",
        "timestamp": "1776772968",
        "to_ids": true,
        "type": "domain",
        "uuid": "116d4263-344c-4c47-bbc0-35c664df913d",
        "value": "number-signin.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:48+00:00",
        "timestamp": "1776772968",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaa800d0-10e0-445f-9a5a-68e80f343580",
        "value": "number.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:48+00:00",
        "timestamp": "1776772968",
        "to_ids": true,
        "type": "domain",
        "uuid": "366a2b4c-7df3-4ca4-8eec-f4d153e54325",
        "value": "number.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:48+00:00",
        "timestamp": "1776772968",
        "to_ids": true,
        "type": "domain",
        "uuid": "32c7063d-ca6d-4bb7-bfeb-cf55c99af404",
        "value": "number.id-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:48+00:00",
        "timestamp": "1776772968",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e699040-98f0-45ec-873d-fbba7d21686b",
        "value": "number.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:48+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ac64e63-af77-4121-b7a2-63cd1de3b964",
        "value": "numbers-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1f4b913-971e-47bd-aab1-d7a275dd69d2",
        "value": "numbers-appleid.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "333a9091-e937-4ccb-a497-d907b21a7d9c",
        "value": "numbers.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "702d6c98-72de-4f39-acf9-787fa35a7674",
        "value": "nums-apple.info-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "d96edd2b-28ad-4f24-8795-b97b3bae46f0",
        "value": "nums-rev.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "06d3836e-9916-42ed-b916-e09ed1aaaf25",
        "value": "nums-rev.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772969",
        "to_ids": true,
        "type": "domain",
        "uuid": "52b2850e-dbeb-4d65-89c0-d075fc15fa70",
        "value": "nums-rev.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:49+00:00",
        "timestamp": "1776772970",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d726fea-a69d-4c96-a88d-cc1edc377173",
        "value": "ogs.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:50+00:00",
        "timestamp": "1776772970",
        "to_ids": true,
        "type": "domain",
        "uuid": "826358d8-57aa-4022-9456-68582d1eff79",
        "value": "ogs.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:50+00:00",
        "timestamp": "1776772970",
        "to_ids": true,
        "type": "domain",
        "uuid": "94b2b109-b8e2-4c60-9a20-f13238e208c5",
        "value": "old.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:50+00:00",
        "timestamp": "1776772970",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4933f46-29a6-4f63-9618-7b16a2823c1e",
        "value": "omwtrgap.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:50+00:00",
        "timestamp": "1776772970",
        "to_ids": true,
        "type": "domain",
        "uuid": "561f4aa1-355e-403e-aafc-2b70b779607e",
        "value": "one-likeme.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:50+00:00",
        "timestamp": "1776772970",
        "to_ids": true,
        "type": "domain",
        "uuid": "55e86cb2-a2be-47af-9e72-28444fd7ebc0",
        "value": "oportun.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:50+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "39d1f1b9-af0e-4ca0-9dc0-daceed514a98",
        "value": "optimizationguide-pa.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "ede8cd86-c6ad-4cba-8220-e8e33a67a9cd",
        "value": "optimizationguide-pa.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a7fe4ff-5d49-4f84-b486-5564fc22dded",
        "value": "org-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "be0d67f5-4518-48c3-91f1-365a2a2b0e84",
        "value": "org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "55c27a1c-e71f-4033-a554-283d8df8403f",
        "value": "org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "36f633d9-b938-41f5-b3b6-d05a370533ee",
        "value": "owa365.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772971",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1e07386-a88b-4756-aee8-089dd388c0a4",
        "value": "owa365.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:51+00:00",
        "timestamp": "1776772972",
        "to_ids": true,
        "type": "domain",
        "uuid": "15ff13b1-cdfe-4f90-a568-eb5238f6fbc1",
        "value": "page.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:52+00:00",
        "timestamp": "1776772972",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f0500d4-23fa-4447-a3d0-d11e6e445e63",
        "value": "parcel-information.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:52+00:00",
        "timestamp": "1776772972",
        "to_ids": true,
        "type": "domain",
        "uuid": "66338d30-1f46-489f-9bb6-49906f110049",
        "value": "pasword-up-date-bdf-bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:52+00:00",
        "timestamp": "1776772972",
        "to_ids": true,
        "type": "domain",
        "uuid": "80349e6f-d024-49c1-9e16-6fb5a85ace1f",
        "value": "pdf-cloud.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:52+00:00",
        "timestamp": "1776772972",
        "to_ids": true,
        "type": "domain",
        "uuid": "479aac4f-d141-4d74-9af9-065061db3ece",
        "value": "pdf-icloud.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:52+00:00",
        "timestamp": "1776772972",
        "to_ids": true,
        "type": "domain",
        "uuid": "d43bf7be-82a4-49e3-83ea-05a56b95f734",
        "value": "pdf-sdsg8347gyeduy49yfhf6437gfyrf436.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:52+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "273b7d3d-e4e0-4639-8f3c-c5e264bf8b86",
        "value": "pending-office.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:53+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab94f9f5-f860-4e35-9851-4260bae98d4b",
        "value": "permanent-infor.mation-ae.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:53+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "10af0938-fc8c-4758-ae76-ec3de61e4b12",
        "value": "play.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:53+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f08eb17-7579-42f5-a8be-dcb343258ef8",
        "value": "play.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:53+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2e7799a-5b3b-45a1-9b0f-2a2712202864",
        "value": "portal.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:53+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "a30c2356-f609-4789-879e-803209f1979c",
        "value": "portal.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:53+00:00",
        "timestamp": "1776772973",
        "to_ids": true,
        "type": "domain",
        "uuid": "59531e4e-541f-4cfb-a893-a522fb541ce8",
        "value": "preview-visualizations.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:54+00:00",
        "timestamp": "1776772974",
        "to_ids": true,
        "type": "domain",
        "uuid": "10e7310f-75a3-4bd0-b3af-8d1b403b9753",
        "value": "privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:54+00:00",
        "timestamp": "1776772974",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f0dbd58-8d9a-413f-8774-79fcb4e5d554",
        "value": "protect-bdf-bh.owa365.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:54+00:00",
        "timestamp": "1776772974",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b66b93c-7990-4781-a159-01f0266b9bf3",
        "value": "protect.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:54+00:00",
        "timestamp": "1776772974",
        "to_ids": true,
        "type": "domain",
        "uuid": "b79d07f3-cd84-4547-8d3e-8adc7af15b4f",
        "value": "qa-insight.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:54+00:00",
        "timestamp": "1776772974",
        "to_ids": true,
        "type": "domain",
        "uuid": "811c45bb-10a3-4886-9032-44e08424b0a7",
        "value": "qa.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:55+00:00",
        "timestamp": "1776772975",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0d59479-b4da-4a28-8ba5-732ecf5415aa",
        "value": "qnpchepkxqbsfcjcpanel.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:55+00:00",
        "timestamp": "1776772975",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5fffedd-6493-4de3-b4bf-c12724d5e6b2",
        "value": "qq.mfadata.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:55+00:00",
        "timestamp": "1776772975",
        "to_ids": true,
        "type": "domain",
        "uuid": "88c4f54e-863b-422b-82d4-01bac90f4004",
        "value": "qurcxlny.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:55+00:00",
        "timestamp": "1776772975",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e80a739-5c8d-4776-8209-5d59202ce0be",
        "value": "random.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:55+00:00",
        "timestamp": "1776772975",
        "to_ids": true,
        "type": "domain",
        "uuid": "21a06d80-fb8c-412f-b035-7fb07cb67d08",
        "value": "re-ac.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:55+00:00",
        "timestamp": "1776772976",
        "to_ids": true,
        "type": "domain",
        "uuid": "81359efb-e593-4893-9587-ab1d8d52b318",
        "value": "re-acc.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:56+00:00",
        "timestamp": "1776772976",
        "to_ids": true,
        "type": "domain",
        "uuid": "e77e632f-7917-40cb-acbb-9406cc42ef1a",
        "value": "rec-auth.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:56+00:00",
        "timestamp": "1776772976",
        "to_ids": true,
        "type": "domain",
        "uuid": "e66dda85-131d-440d-93e3-5f0ad034a211",
        "value": "rec-cal-tg.app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:56+00:00",
        "timestamp": "1776772976",
        "to_ids": true,
        "type": "domain",
        "uuid": "044d3153-6bfc-4d6f-b4e1-e2ba51e8e76e",
        "value": "rec-check-mng.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:56+00:00",
        "timestamp": "1776772976",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e4044e0-fdfb-4c8a-8b91-b180c7445792",
        "value": "rec-check.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:56+00:00",
        "timestamp": "1776772976",
        "to_ids": true,
        "type": "domain",
        "uuid": "3aaa3889-a047-4fa5-abb5-d21df121d191",
        "value": "rec-id-check.ar-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:56+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e7b0e8a-2418-4211-b81e-79998b96010d",
        "value": "rec-mng-bdf-bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "478b330e-cb5a-4144-b11f-ecb0a056cc29",
        "value": "rec-mng-bdf-gov-bh.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "f84917ea-b87c-405e-9cd2-7c1d0a79d547",
        "value": "rec-mng-idmsic.datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "08f0779f-4c35-43c3-a6ab-8a9f7a72773f",
        "value": "rec-mng-idmss.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "30d61896-1db5-4ea0-9823-66265efdd2d2",
        "value": "rec-mng-infor.mation-ae.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "b06ae374-85f0-46bd-9743-96d2162a5855",
        "value": "rec-mng-mofagovbh.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772977",
        "to_ids": true,
        "type": "domain",
        "uuid": "6383f113-1180-4713-8dd1-5ee2e33916bd",
        "value": "rec-mng.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:57+00:00",
        "timestamp": "1776772978",
        "to_ids": true,
        "type": "domain",
        "uuid": "04ba0e9c-9a48-4fd1-b6ae-050aaf56872f",
        "value": "rec-mng.ms-storedata.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:58+00:00",
        "timestamp": "1776772978",
        "to_ids": true,
        "type": "domain",
        "uuid": "9735a0ed-d346-4441-92d8-5f573fc466fd",
        "value": "rec-mng.ms-storedata.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:58+00:00",
        "timestamp": "1776772978",
        "to_ids": true,
        "type": "domain",
        "uuid": "79d83b73-ed7d-4cf0-bb45-db52d075185f",
        "value": "rec-ms-mof-gov-eg.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:58+00:00",
        "timestamp": "1776772978",
        "to_ids": true,
        "type": "domain",
        "uuid": "40216be2-7948-4013-8d21-46e3418e8b86",
        "value": "rec-val-info.lang-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:58+00:00",
        "timestamp": "1776772978",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad59ba38-7f7f-4b7c-aaa1-817cfbc6692a",
        "value": "rec.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:58+00:00",
        "timestamp": "1776772978",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1f390af-271a-46c8-a4c2-a8d3313187ca",
        "value": "regularsports.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:58+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "d49dae6c-1a9e-47d9-8ad8-15c30574265e",
        "value": "relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:59+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "01229b74-c3e1-43ff-9eff-12fb49cc25fe",
        "value": "remira.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:59+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "92e0ccdb-e96f-461d-a9ea-1d73086181d8",
        "value": "report-prod.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:59+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "46572e10-ede8-439a-835b-063fcbdcb45e",
        "value": "reportproblem.apple.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:59+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "99557fad-d6e9-4165-9cff-bab4f9feebaf",
        "value": "reportsuscripcion.apple.com-ar.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:59+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b3d4151-46b4-431d-9284-09b5893703fe",
        "value": "res-all.en-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:02:59+00:00",
        "timestamp": "1776772979",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c0bc1ab-d37c-4b89-a9d5-9bfad75c0c1d",
        "value": "resmhcx57.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772980",
        "to_ids": true,
        "type": "domain",
        "uuid": "70eac072-6483-4883-aad1-8001b37af1e7",
        "value": "ress.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772980",
        "to_ids": true,
        "type": "domain",
        "uuid": "a41c3e9c-07dc-41fa-a96e-c2e7c12b005f",
        "value": "resufg-reg.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772980",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1ccf898-8b05-4983-92ef-50086cd57485",
        "value": "reutowprueptowue.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772980",
        "to_ids": true,
        "type": "domain",
        "uuid": "234c43ab-e444-462c-a2b7-b499013556ca",
        "value": "rev-auth-num.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772980",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d960779-3588-4720-b5f0-c600748b978a",
        "value": "rev-id.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772980",
        "to_ids": true,
        "type": "domain",
        "uuid": "525cb923-2d38-4b11-ae3f-1a409f26ded0",
        "value": "rev-num-apl.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:00+00:00",
        "timestamp": "1776772981",
        "to_ids": true,
        "type": "domain",
        "uuid": "6347d38f-76a9-4ebc-94a3-1028dd04eb4e",
        "value": "rev-number.me-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:01+00:00",
        "timestamp": "1776772981",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8270dbb-b8fd-49ae-a25c-f33d590afa52",
        "value": "rev.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:01+00:00",
        "timestamp": "1776772981",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed47dfa9-b9ed-43e7-a1b5-ec7212784d41",
        "value": "review-app-id.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:01+00:00",
        "timestamp": "1776772981",
        "to_ids": true,
        "type": "domain",
        "uuid": "53ff106c-d21b-400b-8503-eefd00440041",
        "value": "review-apple.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:01+00:00",
        "timestamp": "1776772981",
        "to_ids": true,
        "type": "domain",
        "uuid": "e27abe46-b139-41ac-819d-7c60f22b48b1",
        "value": "review-apple.id-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:01+00:00",
        "timestamp": "1776772981",
        "to_ids": true,
        "type": "domain",
        "uuid": "b22ab335-5e3b-486d-840f-63b78f8d9866",
        "value": "review-apple.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:01+00:00",
        "timestamp": "1776772982",
        "to_ids": true,
        "type": "domain",
        "uuid": "7078fb3d-6abe-4558-a51b-12b554cdf8eb",
        "value": "review-apple.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:02+00:00",
        "timestamp": "1776772982",
        "to_ids": true,
        "type": "domain",
        "uuid": "13e75c9e-ad3b-4b2b-9591-7b0a6071758d",
        "value": "review-apple.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:02+00:00",
        "timestamp": "1776772982",
        "to_ids": true,
        "type": "domain",
        "uuid": "e52d9919-42d7-4f85-8d05-878e2d354677",
        "value": "review-apple.id-us.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:02+00:00",
        "timestamp": "1776772982",
        "to_ids": true,
        "type": "domain",
        "uuid": "917b05ea-b96e-40df-a003-37f01b9ea201",
        "value": "review-apple.ids-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:02+00:00",
        "timestamp": "1776772982",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3558f03-f6e0-4a55-bc32-cd7d689185e2",
        "value": "review-apple.info-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:02+00:00",
        "timestamp": "1776772982",
        "to_ids": true,
        "type": "domain",
        "uuid": "be35893f-165d-4192-a579-29f6fdeacebc",
        "value": "review-appleid.com-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:02+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "b94ab882-219d-42d7-aee6-66eab8ad3c79",
        "value": "review-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd9e31ce-f86e-4eef-88c5-c3f1d4394220",
        "value": "review-appleid.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d226ea4-3cd1-41d7-8b1f-2f116e8f8eda",
        "value": "review-appleid.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0704d66-c0c1-4950-9a70-c45acf8660c9",
        "value": "review-appleid.me-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "da3666bb-eeb5-486c-9b99-cf4c95add3cb",
        "value": "review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "a888dcc4-632a-41d3-939c-5296ecd9f4d1",
        "value": "review-id.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772983",
        "to_ids": true,
        "type": "domain",
        "uuid": "74d60e3a-a64f-43f4-8cf2-909e8a5db08c",
        "value": "review-ids.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:03+00:00",
        "timestamp": "1776772984",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcdca507-1442-420f-bb43-3470b6038f6a",
        "value": "review.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:04+00:00",
        "timestamp": "1776772984",
        "to_ids": true,
        "type": "domain",
        "uuid": "db4b6151-9477-4359-b714-8867c572cb3c",
        "value": "rin-ss.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:04+00:00",
        "timestamp": "1776772984",
        "to_ids": true,
        "type": "domain",
        "uuid": "660dc5fb-ea5a-4f4e-af66-327cb87ba03d",
        "value": "rin-zm.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:04+00:00",
        "timestamp": "1776772984",
        "to_ids": true,
        "type": "domain",
        "uuid": "9519cc35-fdeb-41d9-9ec2-186874cddb48",
        "value": "rstl.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:04+00:00",
        "timestamp": "1776772984",
        "to_ids": true,
        "type": "domain",
        "uuid": "b02d0057-ab82-45f2-933d-f3cb05d0f207",
        "value": "rv-mn-en-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:04+00:00",
        "timestamp": "1776772984",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4c938fd-4a03-40f4-8b18-17580bba5d0c",
        "value": "rv-mn-en.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:04+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf2127e3-2324-443a-8715-2370708a239a",
        "value": "rxuoiwebmail.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9aba8d0-0f9a-46b4-a4ea-dd92bb09e237",
        "value": "s-portel.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b90df92-157b-43dc-a633-17ea7e1baa3c",
        "value": "s.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5ae8e37-7bf8-4ea8-9b1d-69daa73ea4f7",
        "value": "sandbox.cicd.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a903fae-ab67-4912-8013-4c611d2216dc",
        "value": "sapple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "034cb13c-cc5d-4188-bbed-8bef96dd85e9",
        "value": "sasaf.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772985",
        "to_ids": true,
        "type": "domain",
        "uuid": "23ce4350-3750-4b37-851a-bb35a691174c",
        "value": "scomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:05+00:00",
        "timestamp": "1776772986",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d7f32ce-6361-4454-b05c-32898e60d89c",
        "value": "sdfgfdg.regularsports.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:06+00:00",
        "timestamp": "1776772986",
        "to_ids": true,
        "type": "domain",
        "uuid": "728d8801-1d83-4797-9143-44d5a0f43642",
        "value": "sdfgsdf.me-mng.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:06+00:00",
        "timestamp": "1776772986",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfbe5d2b-ba7f-4d60-b50b-255985d97df9",
        "value": "sdgsdgsgfdgsdfhdfhdfh.ht-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:06+00:00",
        "timestamp": "1776772986",
        "to_ids": true,
        "type": "domain",
        "uuid": "b03820af-f936-4ce1-9a66-a7d73e1805b7",
        "value": "secure-signal.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:06+00:00",
        "timestamp": "1776772986",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac2ed2ac-e9dc-4779-a82e-51b63d05e6cd",
        "value": "secure-val.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:06+00:00",
        "timestamp": "1776772986",
        "to_ids": true,
        "type": "domain",
        "uuid": "bea7ce20-039f-48ed-a50f-9d2147ffa0b7",
        "value": "secure.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:06+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe03c12c-e4ae-49b2-97a5-97b1dccdc051",
        "value": "security.icloud.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ab04a39-c174-4265-ac72-0b22c246a12d",
        "value": "securitydomain-pa.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "759b7550-a3d5-4f03-89e5-607e2b422b5d",
        "value": "securitydomain-pa.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "76deccf9-8fb7-4379-b310-07248c84d6e2",
        "value": "server.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0703757-d00c-4c03-97a8-dec4e13b6e14",
        "value": "serviceinfo.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5a99c1a-68fd-4299-91b8-2aa67fb0772d",
        "value": "sg-mng-rec.datamargin.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772987",
        "to_ids": true,
        "type": "domain",
        "uuid": "81ebebf6-c242-484e-9246-f839b4ebe3cd",
        "value": "sgnl-2fa-authenticate.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:07+00:00",
        "timestamp": "1776772988",
        "to_ids": true,
        "type": "domain",
        "uuid": "bef77428-cc6c-4c84-9929-3af89cf024f3",
        "value": "sgnl-2fa-authentication.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:08+00:00",
        "timestamp": "1776772988",
        "to_ids": true,
        "type": "domain",
        "uuid": "fee3026c-e75a-45c0-a3d1-f8c778bb9576",
        "value": "sgnl-2fa-manage.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:08+00:00",
        "timestamp": "1776772988",
        "to_ids": true,
        "type": "domain",
        "uuid": "34375cf0-d532-4bc6-9fdb-c335867d6456",
        "value": "sgnl-app.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:08+00:00",
        "timestamp": "1776772988",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e160d65-e9e9-4e51-a391-2c33085e8b62",
        "value": "sgnl-encryption-plugin.me-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:08+00:00",
        "timestamp": "1776772988",
        "to_ids": true,
        "type": "domain",
        "uuid": "2463acfc-399e-45bf-8262-66735c22dd6c",
        "value": "sgnl-link-device.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:08+00:00",
        "timestamp": "1776772988",
        "to_ids": true,
        "type": "domain",
        "uuid": "da241084-e319-4c19-8b9e-78a89eb42275",
        "value": "sgnl-link-device.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:08+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "89a13055-ad7f-46f5-a145-7b78d0676e89",
        "value": "sgnl-org.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:09+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "4684ac29-49ed-420c-bc8a-6ad2ce8ecd6f",
        "value": "sgnl-web.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:09+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "a292de5e-2605-446a-afb3-fc34ad10be35",
        "value": "sgnl.org-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:09+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "93699552-584a-4063-b89a-9c0568229cea",
        "value": "sgnl.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:09+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdfbe715-7324-41a0-a65d-c9ae10de22cc",
        "value": "share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:09+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "59d99928-f123-477e-a0d9-703577fc5701",
        "value": "shghgwhasd.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:09+00:00",
        "timestamp": "1776772989",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d0be0db-a56b-4435-8a33-21746f7746e1",
        "value": "short.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772990",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5484f82-ed6f-46be-9f8c-31ff281a2dd4",
        "value": "shrt-ap.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772990",
        "to_ids": true,
        "type": "domain",
        "uuid": "c87395fe-e7e4-4997-b466-99b2e81d5c78",
        "value": "shrtrn.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772990",
        "to_ids": true,
        "type": "domain",
        "uuid": "91b5b994-2b66-442d-90aa-efeddd62e144",
        "value": "shrtstulytdvs.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772990",
        "to_ids": true,
        "type": "domain",
        "uuid": "38d8f05c-6ff6-4e73-8699-35f2d2733814",
        "value": "shryg87uhisd.serviceinfo.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772990",
        "to_ids": true,
        "type": "domain",
        "uuid": "06149988-6ce7-47c5-8254-ad021128aa06",
        "value": "signal-account.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772990",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9bd087e-966d-49ee-b3ca-c25ee4c4749a",
        "value": "signal-chat.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:10+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cbe3d5a-77f0-4ea1-81aa-3fad5c049e9c",
        "value": "signal-connect.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:11+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7412626-b408-497d-89b4-af3c0eaebfa0",
        "value": "signal-encryption.en-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:11+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a1bbf39-843c-4ad8-96e0-34b0adb1961b",
        "value": "signal-help.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:11+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "827e41b0-494b-431c-b3aa-180860d761b5",
        "value": "signal-link-call.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:11+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "b64e5f60-e609-419e-8021-083078751326",
        "value": "signal.org-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:11+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7ad405a-8b9d-45da-a30b-d2d50e422763",
        "value": "signal.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:11+00:00",
        "timestamp": "1776772991",
        "to_ids": true,
        "type": "domain",
        "uuid": "f044bbac-0abd-4a62-b0a0-085415e54a88",
        "value": "signaler-pa.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772992",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4e3eb5c-f7c2-4b77-95ee-26b6cfdcb2bc",
        "value": "signaler-pa.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772992",
        "to_ids": true,
        "type": "domain",
        "uuid": "6df9269f-8b09-4b33-ab38-261f7c417a70",
        "value": "signin-account.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772992",
        "to_ids": true,
        "type": "domain",
        "uuid": "84c1065c-e08f-4429-9706-c1d0f10d1b31",
        "value": "signin-account.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772992",
        "to_ids": true,
        "type": "domain",
        "uuid": "359eaab0-5c67-4cdd-a3e1-d1cf76c4f929",
        "value": "signin-ap.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772992",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbd7f173-b5be-4e7f-90a8-362a713eb6c3",
        "value": "signin-apple.com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772992",
        "to_ids": true,
        "type": "domain",
        "uuid": "741c70de-e3da-4209-a833-17c9b56199ef",
        "value": "signin-apple.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:12+00:00",
        "timestamp": "1776772993",
        "to_ids": true,
        "type": "domain",
        "uuid": "d440aa96-670c-4f48-927d-fd8a97181f24",
        "value": "signin-apple.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:13+00:00",
        "timestamp": "1776772993",
        "to_ids": true,
        "type": "domain",
        "uuid": "40d5dc06-754a-42d1-945e-e6027e5d94e6",
        "value": "signin-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:13+00:00",
        "timestamp": "1776772993",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc3290ae-f864-4624-8eea-843c1048d47e",
        "value": "signin-guardian.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:13+00:00",
        "timestamp": "1776772993",
        "to_ids": true,
        "type": "domain",
        "uuid": "7766ecf9-9dbe-4405-a79a-aabcee9fad4c",
        "value": "signin-id.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:13+00:00",
        "timestamp": "1776772993",
        "to_ids": true,
        "type": "domain",
        "uuid": "faf783ea-9e02-420b-b0c1-c546ee2c8a60",
        "value": "signin-live.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:13+00:00",
        "timestamp": "1776772993",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d916c80-fae0-43a5-8775-e722153dbbeb",
        "value": "signin-live.privacy-ar.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:13+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b4657c3-63e3-46a9-a6f6-9a8e0c3e740e",
        "value": "signin-office.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:14+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4113182-82b5-48ed-bd86-95c60358974b",
        "value": "signin-yahoo.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:14+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b190db-83d0-47a7-80c3-a4331c9a212e",
        "value": "sitemap.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:14+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf1ed289-68be-43c2-864e-af4b41d1988e",
        "value": "sitemap.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:14+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b9f89a-2584-42aa-bd94-e3b7203c3aa7",
        "value": "sitemap.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:14+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d826f76-2bec-4a35-b3ba-9b58880310dd",
        "value": "sitemaps.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:14+00:00",
        "timestamp": "1776772994",
        "to_ids": true,
        "type": "domain",
        "uuid": "c27da881-ff91-4ffc-9501-28f734e4fcdf",
        "value": "sitemaps.en-id.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:15+00:00",
        "timestamp": "1776772995",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9d34c08-e99d-4252-9f58-bd5fca57b5a5",
        "value": "sitemaps.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:15+00:00",
        "timestamp": "1776772995",
        "to_ids": true,
        "type": "domain",
        "uuid": "08ca01c7-aa67-428c-b362-5ceb794ad953",
        "value": "sjoin-facetime.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:15+00:00",
        "timestamp": "1776772995",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce8e5416-bcbf-43ac-a810-7064301e62e6",
        "value": "sky-security.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:15+00:00",
        "timestamp": "1776772995",
        "to_ids": true,
        "type": "domain",
        "uuid": "102dc0c8-cf6e-4a50-9382-961168a03a20",
        "value": "sm.comusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:15+00:00",
        "timestamp": "1776772995",
        "to_ids": true,
        "type": "domain",
        "uuid": "1600e449-e41b-4963-ad2a-c4561e15697e",
        "value": "sm.sscomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:15+00:00",
        "timestamp": "1776772995",
        "to_ids": true,
        "type": "domain",
        "uuid": "63f5f5b1-ff05-4f90-9ccd-578ce9c4d5a4",
        "value": "sm.sssssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772996",
        "to_ids": true,
        "type": "domain",
        "uuid": "d383b43f-d65c-4beb-953e-553e46fbd3f7",
        "value": "sm.ssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772996",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac9560cf-e527-48a0-8bd0-8db92a11f87d",
        "value": "sm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772996",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf5805f-ccf4-4b3e-b700-0b4b05b12044",
        "value": "sm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772996",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b3f5ef7-6b0d-4105-a1cc-ca61a6ce0f79",
        "value": "sm.trusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772996",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb5a02fe-0b53-4743-9de5-680e5de83688",
        "value": "sm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772996",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7b37c47-3717-45aa-a510-6f9f39ac253f",
        "value": "srv1.srv648.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:16+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b84a27d-ad80-4ae0-a1db-4c08c61d8b5d",
        "value": "srv648.co-en.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:17+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "500b5d2d-5b42-4fcc-93eb-8e4dbe701d0e",
        "value": "ssapple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:17+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c6adb00-e633-4356-a81f-0af8d2d402c6",
        "value": "sscomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:17+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2fcd956-87a9-400e-bfc6-8a1dd207ba59",
        "value": "ssl.google.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:17+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c3da5f0-aa2a-4466-8929-7435c97e7446",
        "value": "ssl.share.svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:17+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "adf7a9ac-ba7d-4a4c-8607-c69714255d68",
        "value": "sslhjsssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:17+00:00",
        "timestamp": "1776772997",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7e446f4-aa23-4004-a00c-ad4eaff3183e",
        "value": "ssm.comusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772998",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfe1149f-fdff-4ddf-abfc-7cea1cdcbf20",
        "value": "ssm.sscomusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772998",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb6d55ff-c3ee-43d8-9866-b40d7d08239b",
        "value": "ssm.ssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772998",
        "to_ids": true,
        "type": "domain",
        "uuid": "04d91122-8fd3-46ff-8d09-d378353bfed6",
        "value": "ssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772998",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dc0cd9b-5ac8-45fc-9017-225214b17fd0",
        "value": "ssm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772998",
        "to_ids": true,
        "type": "domain",
        "uuid": "60e1f90a-2133-41b7-aa54-23486aecf656",
        "value": "ssm.trusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772998",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b2501e8-66a1-4533-8ca2-1a69e137bf2a",
        "value": "ssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:18+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfd6cdc3-146f-40ab-abf3-b89fb6d9bcaf",
        "value": "sssm.ssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:19+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "70e5c06d-a5ec-40b2-a337-1f835f7c34c0",
        "value": "sssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:19+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "a582d4ed-047a-42e2-9c59-1768bf441921",
        "value": "sssm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:19+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "554f1d87-d49c-49cf-84ce-ee6dcabffbe7",
        "value": "sssm.trusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:19+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "43bfde1e-83e2-4f18-b6ac-b7bbe2acfcee",
        "value": "sssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:19+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "63b47d38-e355-4fb5-bfc4-5de205d0346c",
        "value": "ssssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:19+00:00",
        "timestamp": "1776772999",
        "to_ids": true,
        "type": "domain",
        "uuid": "fad7020a-4e99-48dc-b304-17e1a2be0e11",
        "value": "ssssm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773000",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e26bd30-e22d-48e3-9262-75e369b2bea3",
        "value": "ssssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773000",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea200163-fc95-4965-b047-f2a379c0bf58",
        "value": "sssssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773000",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b615b85-1e51-45fd-a4c0-93db785b5cf7",
        "value": "sssssm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773000",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8b2a564-21ee-4ec2-b8af-70fdfadd704e",
        "value": "sssssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773000",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ada2337-f6ba-40ea-bc94-1dcafc811ffd",
        "value": "ssssssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773000",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b18400c-3048-4929-9c26-d6401d84519f",
        "value": "ssssssm.sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:20+00:00",
        "timestamp": "1776773001",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dd6bdd4-537b-49fe-b558-8753494a576d",
        "value": "ssssssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:21+00:00",
        "timestamp": "1776773001",
        "to_ids": true,
        "type": "domain",
        "uuid": "5387fbe4-37ed-44a6-9271-dda1de8e01ed",
        "value": "ssssssssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:21+00:00",
        "timestamp": "1776773001",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2afea45-f24f-436a-985d-303319909ad4",
        "value": "sssssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:21+00:00",
        "timestamp": "1776773001",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9c47001-9a78-4f07-b022-6d7fb7d7577f",
        "value": "ssssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:21+00:00",
        "timestamp": "1776773001",
        "to_ids": true,
        "type": "domain",
        "uuid": "22e53864-d84f-4658-8014-64011bab5c6c",
        "value": "sssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:21+00:00",
        "timestamp": "1776773001",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bff4ff0-6065-48a4-83e5-acea97b18661",
        "value": "ssssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:21+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ffbb4fa-a1c3-4300-b384-b36805eca33d",
        "value": "sssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "480767c2-6f26-453b-910a-108e1866ee08",
        "value": "ssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "008a5531-ce44-416d-be2b-10c0e1e03be0",
        "value": "sssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "0808e107-6db6-4805-b6b8-1dd600c8866e",
        "value": "ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b664e7a-a78e-4492-901e-197cb46a3164",
        "value": "st-prtl.hm-en.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6f04a2a-299e-41f1-a443-e19b7a5c62fc",
        "value": "stage.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773002",
        "to_ids": true,
        "type": "domain",
        "uuid": "39dae74c-95c0-4c18-aaa1-ebbd0ac8eaf8",
        "value": "staging.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:22+00:00",
        "timestamp": "1776773003",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bd0af30-1552-4d73-ae60-a7e20907cdab",
        "value": "staging.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:23+00:00",
        "timestamp": "1776773003",
        "to_ids": true,
        "type": "domain",
        "uuid": "8712496e-a69f-4a67-bc9c-71c49b20beb8",
        "value": "staging.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:23+00:00",
        "timestamp": "1776773003",
        "to_ids": true,
        "type": "domain",
        "uuid": "229e0788-5a33-4bcf-8886-f661d58e7984",
        "value": "staging.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:23+00:00",
        "timestamp": "1776773003",
        "to_ids": true,
        "type": "domain",
        "uuid": "d08e7f52-8897-45e5-ab49-ba9ecf100820",
        "value": "staging.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:23+00:00",
        "timestamp": "1776773003",
        "to_ids": true,
        "type": "domain",
        "uuid": "80e54a4b-1afa-44f2-9dd6-b40078d33085",
        "value": "staging.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:23+00:00",
        "timestamp": "1776773003",
        "to_ids": true,
        "type": "domain",
        "uuid": "82a49514-9727-4036-bf29-ed93c4cc3f74",
        "value": "static.newupdate.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:23+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "99e5b7d7-d8a1-448a-b02f-fa83a6b6057b",
        "value": "static.totpro.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "98d13af2-64e6-4466-b3b2-729aef6908d9",
        "value": "stg.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "68fe25b5-67c6-4349-b4d3-8f99590d82ef",
        "value": "stg.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "aebdd6e4-a09f-4e59-8f86-0295201122bd",
        "value": "storage-mofa-gov-bh.storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1ff30df-8c19-441b-853b-b3f875560aba",
        "value": "store.newupdate.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cd52ed9-ed77-47ea-8e2a-42c601b71d9f",
        "value": "store.totpro.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773004",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a03ac1b-e883-46bb-8f9b-15dead711c43",
        "value": "storemydata.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:24+00:00",
        "timestamp": "1776773005",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b98cfaf-bc7a-4151-a130-34cc42e02ceb",
        "value": "sttrn.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:25+00:00",
        "timestamp": "1776773005",
        "to_ids": true,
        "type": "domain",
        "uuid": "c66ff374-dd1e-438a-9e74-f4b225a8d7ed",
        "value": "superset-production.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:25+00:00",
        "timestamp": "1776773005",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c7e79bd-0ed8-4b0d-a7d2-05099dfa61fc",
        "value": "superset.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:25+00:00",
        "timestamp": "1776773005",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bf301a7-6bb1-4faa-bf15-efae56f6d49d",
        "value": "superset.uat.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:25+00:00",
        "timestamp": "1776773005",
        "to_ids": true,
        "type": "domain",
        "uuid": "09c5d72b-f434-458c-9fd5-3ca6fc51480c",
        "value": "support.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:25+00:00",
        "timestamp": "1776773005",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1e37375-21bf-4ba8-a981-01ff9db9964c",
        "value": "sverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:25+00:00",
        "timestamp": "1776773006",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9104c61-a3d4-42fc-ad9d-7b12fb9ea936",
        "value": "svr-drive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:26+00:00",
        "timestamp": "1776773006",
        "to_ids": true,
        "type": "domain",
        "uuid": "5258dc52-9187-44f2-bec0-04dbfdbd9854",
        "value": "t-mobile.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:26+00:00",
        "timestamp": "1776773006",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cc206a8-1cb4-43ab-9477-27dc67a769d6",
        "value": "t1.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:26+00:00",
        "timestamp": "1776773006",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ade4185-9daa-4f8d-8e95-0bbe98b47c8d",
        "value": "takm.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:26+00:00",
        "timestamp": "1776773006",
        "to_ids": true,
        "type": "domain",
        "uuid": "f176801f-29e0-4fa3-9398-aad295a44972",
        "value": "tehisdjsd.ar-info.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:26+00:00",
        "timestamp": "1776773006",
        "to_ids": true,
        "type": "domain",
        "uuid": "d9adb1b0-7ebf-4ef7-959d-5a93bd6ad5ee",
        "value": "telegram.com-en.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:26+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "e89c584c-16f7-4755-b2ee-b545244f9bbd",
        "value": "tess.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb858e7f-b391-4a38-897f-f6d29778e1a5",
        "value": "test-acc.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "28892262-200e-4668-b34c-48ab8494fab1",
        "value": "test-id.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "c67c8f70-bea2-4757-ba7c-37ed1b0e75ff",
        "value": "test-sale.linedata.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "0adbdd36-243c-48ea-87e1-eff666aaf146",
        "value": "test.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "3619b047-3b7d-4bcc-ab5a-28e9d4b4adda",
        "value": "test.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773007",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c3f7e62-6236-42f2-b064-508f5ab5b4fb",
        "value": "test.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:27+00:00",
        "timestamp": "1776773008",
        "to_ids": true,
        "type": "domain",
        "uuid": "78cd54d8-9e0b-4b01-b7d0-1b9e92e11185",
        "value": "test.auth.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:28+00:00",
        "timestamp": "1776773008",
        "to_ids": true,
        "type": "domain",
        "uuid": "96f93ef9-ebfb-41ab-b93f-e68592b22006",
        "value": "test.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:28+00:00",
        "timestamp": "1776773008",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f1ab224-1215-46e4-a820-0713d57d32a9",
        "value": "test.com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:28+00:00",
        "timestamp": "1776773008",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f3c2a34-336c-49ad-8b4e-614d66fcf1d1",
        "value": "test.com-en-us.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:28+00:00",
        "timestamp": "1776773008",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4c83792-e746-4f3a-bdf0-257a458f94cb",
        "value": "test.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:28+00:00",
        "timestamp": "1776773008",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6297cc3-1e22-48cf-9917-3a44c5b891b2",
        "value": "test.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:28+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "df2bd68c-f96b-4e39-867f-4222a44e5557",
        "value": "test.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:29+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "7afa6ca8-9ce3-442f-95f7-45441236d4a5",
        "value": "test.final-restore.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:29+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f085f3e-6218-40ee-b03d-31c4e1025acf",
        "value": "test.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:29+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2bb586a-b6eb-4a30-9003-2cb1c1b509d5",
        "value": "test.id-ar.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:29+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd0c8087-104d-45d4-ba88-0b5d64f6d139",
        "value": "test.id-en.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:29+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "50e2e779-20cf-45a6-b075-c8c6f673d8e6",
        "value": "test.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:29+00:00",
        "timestamp": "1776773009",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fd3d0a1-42dd-4538-b78e-d5d090cc2e96",
        "value": "test.regularsports.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773010",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dfd8d10-536f-4139-af5d-0419bc69e7c0",
        "value": "test.review-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773010",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d13de85-d496-4bca-9443-ad5e5c0f48dc",
        "value": "test.signal-help.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773010",
        "to_ids": true,
        "type": "domain",
        "uuid": "94b74c97-f9e3-4f3f-ac11-9db7ee230aaf",
        "value": "test.web.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773010",
        "to_ids": true,
        "type": "domain",
        "uuid": "78617b44-22a9-4f02-9c9c-a95c40b48460",
        "value": "test.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773010",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6de7a6e-3e75-4040-840d-df215ca47c6b",
        "value": "test2.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773010",
        "to_ids": true,
        "type": "domain",
        "uuid": "39f61605-564f-4cff-8c8a-793346c27869",
        "value": "test4.en-uk.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:30+00:00",
        "timestamp": "1776773011",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e671db-9a9a-431b-9d58-61ef3c475363",
        "value": "testh.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:31+00:00",
        "timestamp": "1776773011",
        "to_ids": true,
        "type": "domain",
        "uuid": "d18b2885-e9b5-49aa-9459-c4a61cb649f6",
        "value": "testid.com-service.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:31+00:00",
        "timestamp": "1776773011",
        "to_ids": true,
        "type": "domain",
        "uuid": "89a5b32b-8cf3-4cad-a067-43897c74328a",
        "value": "testid.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:31+00:00",
        "timestamp": "1776773011",
        "to_ids": true,
        "type": "domain",
        "uuid": "5db3b281-5304-4836-803d-24e5240463ae",
        "value": "testid.new.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:31+00:00",
        "timestamp": "1776773011",
        "to_ids": true,
        "type": "domain",
        "uuid": "72ff8817-72e7-4279-afc3-4b0a14e278e5",
        "value": "testing.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:31+00:00",
        "timestamp": "1776773011",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f7ea269-188e-42af-b450-182850a87c33",
        "value": "testing.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773012",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ccdc347-db1a-4557-af0a-821daece58e4",
        "value": "testing.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773012",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba0358f5-5818-4cd4-8805-e3b9d234ef4e",
        "value": "testing.me-mng.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773012",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dbfd73c-7858-40c3-9ab6-ff17f1bdeca8",
        "value": "testingdhfhghd.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773012",
        "to_ids": true,
        "type": "domain",
        "uuid": "83232768-2529-4f10-a2f3-9b951ee59a25",
        "value": "testt.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773012",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6ba34cb-9e83-402a-98be-657960321eec",
        "value": "testweb.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773012",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5175b47-7612-4528-8b78-df3dd792ec47",
        "value": "testy.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:32+00:00",
        "timestamp": "1776773013",
        "to_ids": true,
        "type": "domain",
        "uuid": "951b83dc-7a72-49aa-b015-c85dff383bea",
        "value": "tg-secure-call.app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:33+00:00",
        "timestamp": "1776773013",
        "to_ids": true,
        "type": "domain",
        "uuid": "7063ca0b-61ba-4db2-b1ae-238fe2a3b22b",
        "value": "tg.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:33+00:00",
        "timestamp": "1776773013",
        "to_ids": true,
        "type": "domain",
        "uuid": "80912042-2e13-4af5-a50f-6cff91f93f14",
        "value": "tgyoewww.rev-auth-num.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:33+00:00",
        "timestamp": "1776773013",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fed4786-c443-480b-8129-ee4c3e3304c8",
        "value": "theguardian.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:33+00:00",
        "timestamp": "1776773013",
        "to_ids": true,
        "type": "domain",
        "uuid": "389506f9-a969-42d4-9646-73baffe5ee84",
        "value": "tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:33+00:00",
        "timestamp": "1776773013",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfd2a983-19f7-4c94-8cfe-8520161a40e9",
        "value": "tkmbijoin-meet.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:33+00:00",
        "timestamp": "1776773014",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a6c9408-f1f0-4bd0-92bc-78359432aa06",
        "value": "totok-pro.app-info.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:34+00:00",
        "timestamp": "1776773014",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e393905-a6fb-4de0-996d-90aa5f866644",
        "value": "totok-pro.app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:34+00:00",
        "timestamp": "1776773014",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f21ded0-2175-45bd-99fc-29c8f8f2d112",
        "value": "totokpro.app-info.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:34+00:00",
        "timestamp": "1776773014",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a6296cc-cefa-4e59-992d-f886990ead92",
        "value": "totpro.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:34+00:00",
        "timestamp": "1776773014",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c68d269-2710-44ef-8b09-723845862ab0",
        "value": "tracking-dhl.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:34+00:00",
        "timestamp": "1776773014",
        "to_ids": true,
        "type": "domain",
        "uuid": "59681015-ff58-4a94-a17f-c29369217bde",
        "value": "trusted-device-apple.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:34+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "a361a5bd-9f10-46c7-9d92-9898abf01b86",
        "value": "trusted-device-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:35+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e57b768-25d6-4385-ad78-04f16ae136f9",
        "value": "trusted-device-apple.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:35+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1f59ea1-0800-41fc-92aa-dc67ae98a6c6",
        "value": "trusted.app-info.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:35+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "61170008-8937-46eb-a637-8dc9978e3581",
        "value": "twitch9929312.com-ln.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:35+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b476c3a-b0cc-4d59-9c94-779a23f21bed",
        "value": "tyskw-appleid.com-auth.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:35+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "86ef1c86-03b9-48af-bcd0-a17c2e2fb349",
        "value": "uat.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:35+00:00",
        "timestamp": "1776773015",
        "to_ids": true,
        "type": "domain",
        "uuid": "e945d9ce-4364-4f9a-b15e-e5caa9b9b079",
        "value": "uat.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773016",
        "to_ids": true,
        "type": "domain",
        "uuid": "6586ac45-2420-4716-a21a-c75ac93d7589",
        "value": "uat.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773016",
        "to_ids": true,
        "type": "domain",
        "uuid": "7978a8e8-f174-4d00-8515-86391621ecd4",
        "value": "uat.me-ar.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773016",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bd55edf-1279-453d-8f4e-656c8b21967f",
        "value": "ufuzzssssm.verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773016",
        "to_ids": true,
        "type": "domain",
        "uuid": "0018cd81-7aad-4084-b5fa-18902a5c6344",
        "value": "uk02web-zoom.ar-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773016",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f4b99b1-bc40-40f2-8c73-a8189fa6942a",
        "value": "uk05web-zoom.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773016",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aac92ef-88bb-4058-aeea-615a82b9cd45",
        "value": "uk05web-zoom.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:36+00:00",
        "timestamp": "1776773017",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a3f80f5-71ca-468a-adac-113c04d71119",
        "value": "untvhjoin-call-facetime.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:37+00:00",
        "timestamp": "1776773017",
        "to_ids": true,
        "type": "domain",
        "uuid": "53a4ec76-c682-441a-8120-79eb223b301c",
        "value": "untvhwww.join-call-facetime.relay-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:37+00:00",
        "timestamp": "1776773017",
        "to_ids": true,
        "type": "domain",
        "uuid": "25358eff-08a2-493d-b542-f41ab8981b70",
        "value": "update-num.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:37+00:00",
        "timestamp": "1776773017",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fe201b4-c405-43c9-a8ea-66a5aa83f631",
        "value": "update-nums.id-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:37+00:00",
        "timestamp": "1776773017",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6e842ab-9af8-4348-b859-41aafa77611f",
        "value": "update-release-version-for-android.com-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:37+00:00",
        "timestamp": "1776773017",
        "to_ids": true,
        "type": "domain",
        "uuid": "d19660f3-8700-4c10-b19f-871b851b0177",
        "value": "us-04web-zoom.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:37+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "d81457bc-6634-4c1c-8a4f-a9d2a008dd3b",
        "value": "us05web-join-zoom-meeting.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c4211ec-cfea-48c9-b5fb-71db9f293c9f",
        "value": "user-verify-authen.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ee049e0-fe84-4f00-8d28-4a2a18e1d15d",
        "value": "v1.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4f4c1b9-8be0-46f7-aadb-897c38ecd192",
        "value": "v2.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd287d59-0cf8-4670-a27c-922e63f27536",
        "value": "validate-authn.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "18866e0a-660d-4e94-9c51-f067132bd226",
        "value": "validate.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773018",
        "to_ids": true,
        "type": "domain",
        "uuid": "68ab7019-be79-4fd6-bf65-3c8d408a9f6e",
        "value": "vbnm-altr.id-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:38+00:00",
        "timestamp": "1776773019",
        "to_ids": true,
        "type": "domain",
        "uuid": "7be8275d-0eb6-4dd1-852a-acb8007c0234",
        "value": "ver-information.id-us.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:39+00:00",
        "timestamp": "1776773019",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eec3acc-143d-44a9-9f83-9a7ede87fa85",
        "value": "verify-app.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:39+00:00",
        "timestamp": "1776773019",
        "to_ids": true,
        "type": "domain",
        "uuid": "24543e75-1bbd-4dc4-8201-aa7136a92d58",
        "value": "verify-apple-account-val.idate.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:39+00:00",
        "timestamp": "1776773019",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4e4c38b-353f-4488-94ac-0a0bacb3fb75",
        "value": "verify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:39+00:00",
        "timestamp": "1776773019",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9997a7f-26b7-4bb5-aa2b-8b4a0f103765",
        "value": "verify-apple.id-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:39+00:00",
        "timestamp": "1776773019",
        "to_ids": true,
        "type": "domain",
        "uuid": "44dcda34-0579-43ef-bc78-d43714114e98",
        "value": "verify-bdf.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:39+00:00",
        "timestamp": "1776773020",
        "to_ids": true,
        "type": "domain",
        "uuid": "f24d059d-1429-479f-a90e-66227669c3a1",
        "value": "verify-icloud.en-id.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:40+00:00",
        "timestamp": "1776773020",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9083ea9-9530-4f30-9f52-fbc622c69ad9",
        "value": "verify-id.acc-mn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:40+00:00",
        "timestamp": "1776773020",
        "to_ids": true,
        "type": "domain",
        "uuid": "7af502f7-c482-4f3a-9a31-b347ec09344c",
        "value": "verify-identity-apple.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:40+00:00",
        "timestamp": "1776773020",
        "to_ids": true,
        "type": "domain",
        "uuid": "42869a8f-b2bc-4ab9-912e-155e6414cc93",
        "value": "verify-identity.me-relay.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:40+00:00",
        "timestamp": "1776773020",
        "to_ids": true,
        "type": "domain",
        "uuid": "caed6043-9ddd-42e1-9896-89f2c8b83b8f",
        "value": "verify-infor.mation.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:40+00:00",
        "timestamp": "1776773020",
        "to_ids": true,
        "type": "domain",
        "uuid": "913ca6e2-3739-4e25-a20a-452538119aa7",
        "value": "verify-isupport.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:40+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf40f80d-fa69-487c-9a14-dfdb40100d55",
        "value": "verify-login.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f555661-27c9-4901-8593-38dc497d30e6",
        "value": "verify-mail-authn.tication.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8a6a640-5bef-4897-ade5-82aa73d80a4f",
        "value": "verify-mofa-gov-bh.le-ar.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "28ee171d-ed55-4a93-8f75-f30c520a99a3",
        "value": "verify-rev.ms-mng.ac",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "c93657d7-5542-4c51-8716-78aa95ef1c98",
        "value": "vhpniqnpchepkxqbsfcjcpanel.ar-id.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f8c3133-6c14-423e-892f-b959ff4e649d",
        "value": "vpn.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773021",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3dc1e49-47bf-47c6-a1dc-8e2d88cc3143",
        "value": "vrsompac.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:41+00:00",
        "timestamp": "1776773022",
        "to_ids": true,
        "type": "domain",
        "uuid": "65952bae-0636-472a-89a6-db1c840f7a06",
        "value": "w.entity-me.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:42+00:00",
        "timestamp": "1776773022",
        "to_ids": true,
        "type": "domain",
        "uuid": "41dfc369-eae4-40a0-8ceb-1e4fbc3a37da",
        "value": "wdki.en-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:42+00:00",
        "timestamp": "1776773022",
        "to_ids": true,
        "type": "domain",
        "uuid": "16ec9eb3-a9b7-4b3d-84b0-bb5217ce66c8",
        "value": "web-ft.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:42+00:00",
        "timestamp": "1776773022",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d5b7025-d2c0-4ca5-b4f2-f1b49ea15f62",
        "value": "web-info.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:42+00:00",
        "timestamp": "1776773022",
        "to_ids": true,
        "type": "domain",
        "uuid": "99fe921c-5353-48ac-a2c1-b1bf2579354a",
        "value": "web-sgnl.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:42+00:00",
        "timestamp": "1776773022",
        "to_ids": true,
        "type": "domain",
        "uuid": "4dbf6ccd-2406-4242-a92a-ce427c66041e",
        "value": "web-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:42+00:00",
        "timestamp": "1776773023",
        "to_ids": true,
        "type": "domain",
        "uuid": "384a7073-f29e-4aee-9581-ad2942e7960a",
        "value": "web-signal.org-status.nl",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:43+00:00",
        "timestamp": "1776773023",
        "to_ids": true,
        "type": "domain",
        "uuid": "0274216f-bf6b-4583-9894-ab257aec038c",
        "value": "web-wa.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:43+00:00",
        "timestamp": "1776773023",
        "to_ids": true,
        "type": "domain",
        "uuid": "70a4b355-03a6-4ff3-8b50-6b9f74fcb170",
        "value": "web-whatsapp.com-en-uk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:43+00:00",
        "timestamp": "1776773023",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebbd749b-f26b-44eb-90c0-20d88050f8af",
        "value": "web.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:43+00:00",
        "timestamp": "1776773023",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd3a091c-0d95-4f66-8154-12372507f81e",
        "value": "web.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:43+00:00",
        "timestamp": "1776773023",
        "to_ids": true,
        "type": "domain",
        "uuid": "020284af-8165-4ef6-9243-86416efaa7a1",
        "value": "webs-ft.com-me.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:43+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "23cbb694-d0d1-4930-a1fe-c11503b458cd",
        "value": "webtest.app-care.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "538e3377-ce8c-4549-943d-6386761f49dc",
        "value": "webtest.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4a9eced-2ce0-4c02-af52-a30c93363c78",
        "value": "webvpn.mailbdf-bh.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "c79090e7-cffd-4696-81a0-699e0d836567",
        "value": "wegrow.ecomservices.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbc3c259-b867-4ab4-8e64-e8090b2c1829",
        "value": "widethh.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "f521e96c-0be5-48a4-98b7-9d4267884c5d",
        "value": "widjhdoijhoisudof.serviceinfo.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773024",
        "to_ids": true,
        "type": "domain",
        "uuid": "53feb1e3-da2e-4324-a582-dc4899b1cb9d",
        "value": "wildcard.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:44+00:00",
        "timestamp": "1776773025",
        "to_ids": true,
        "type": "domain",
        "uuid": "664d0aa1-920b-464d-b021-92b4560285ba",
        "value": "wishduv.id-en.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:45+00:00",
        "timestamp": "1776773025",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9a0fa83-c357-4db9-b4a7-56c4c0bef508",
        "value": "wow-way.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:45+00:00",
        "timestamp": "1776773025",
        "to_ids": true,
        "type": "domain",
        "uuid": "4451b52e-b698-4470-a4b4-eea6f9d01f83",
        "value": "wtzdscpanel.logs.re",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:45+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "0594f795-9574-4e64-a725-f828d0477819",
        "value": "xk.linedata.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:46+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "e076f486-978a-497b-9152-8dceff02b241",
        "value": "xnwhrsssssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:46+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "76d951ab-2268-45c7-89f9-a5fb091cd751",
        "value": "xsadasd.en-ar.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:46+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "37e8f959-4369-4e70-a25c-bcf51151ff29",
        "value": "xyz-abv.connect-signal.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:46+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b95b41c-d919-45d2-ae45-4a5b7b2b3588",
        "value": "xyz-alt.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:46+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "9322d5b8-563b-4314-9e0b-784ab528d49f",
        "value": "xyz-alt.id-en.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:46+00:00",
        "timestamp": "1776773026",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a99d52e-a64e-4348-872a-6a92fd19964e",
        "value": "ydtyuehugufgeygushguysgudyhg.en-account.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:47+00:00",
        "timestamp": "1776773027",
        "to_ids": true,
        "type": "domain",
        "uuid": "c655d83b-c613-457b-b08c-4bfdda988a66",
        "value": "yhjdshisdg.en-info.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:47+00:00",
        "timestamp": "1776773027",
        "to_ids": true,
        "type": "domain",
        "uuid": "81aa6cbb-1e8a-4341-af63-62cf82cbe53c",
        "value": "yhtesting.accountservice.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:47+00:00",
        "timestamp": "1776773027",
        "to_ids": true,
        "type": "domain",
        "uuid": "5274fc67-b7cc-452b-b73b-f00bdd077876",
        "value": "yqgsfstaging.ale-soun.com-en-us.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:47+00:00",
        "timestamp": "1776773027",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d834de5-8a46-4bf0-8ffd-d9645a5f691a",
        "value": "zhsexssssssm.ssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:47+00:00",
        "timestamp": "1776773027",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7a38ea6-9ed1-418e-943b-b78b051cfb63",
        "value": "zjzmfsssm.ssssverify-apple.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:47+00:00",
        "timestamp": "1776773027",
        "to_ids": true,
        "type": "domain",
        "uuid": "54c78009-ba35-49b4-92e0-ae874b47be89",
        "value": "zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773028",
        "to_ids": true,
        "type": "domain",
        "uuid": "317522e8-d05c-4916-8aff-14beab761509",
        "value": "zm-web.id-ar.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773028",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3ec450a-41ad-4865-bfca-f277f0272291",
        "value": "zo-ref.mn-id.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773028",
        "to_ids": true,
        "type": "domain",
        "uuid": "75e8ea77-efab-47a0-b320-437a6a986196",
        "value": "zocp.zm-me.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773028",
        "to_ids": true,
        "type": "domain",
        "uuid": "688a4e39-540e-4333-9ea5-12cf851addb5",
        "value": "zoom-meet.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773028",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0f89e03-ef43-4c92-91e4-6f4aac317b2e",
        "value": "zoom-meet.com-cc.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773028",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e2f8e90-8a56-4f55-969e-143e95f40cf8",
        "value": "zoom-meet.me-ar.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:48+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "8803c126-d24d-497a-b379-03a77379c60d",
        "value": "zoom-uk.ar-me.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:49+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "a60d2dc3-6355-4466-b63b-423769378fa7",
        "value": "zoom.com-info.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:49+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "77eab823-a312-4b85-8042-6913795a48fa",
        "value": "zoomandfghu3grufe.id-ar.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:49+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "99d3b17c-0a7c-40b5-a282-e8f5816292d7",
        "value": "zpciomail.com-ae.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:49+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "beb5cb9e-41a1-4487-905d-a340e2002bef",
        "value": "ai-messenger.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:49+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "facfd649-5c4a-4469-8df7-809ba2b6d76d",
        "value": "app-totok.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:49+00:00",
        "timestamp": "1776773029",
        "to_ids": true,
        "type": "domain",
        "uuid": "197b8337-5215-4c78-a877-3fd54d1b7c51",
        "value": "appupdate.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773030",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff797079-d0e9-4670-80a0-9a3722fb7a79",
        "value": "latestversion.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773030",
        "to_ids": true,
        "type": "domain",
        "uuid": "87b1c7ff-453b-40ad-b401-2123e36fab14",
        "value": "noblico.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773030",
        "to_ids": true,
        "type": "domain",
        "uuid": "2468e401-183d-49a8-b44d-2c1dffab6891",
        "value": "sgnlapp.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773030",
        "to_ids": true,
        "type": "domain",
        "uuid": "4abb6797-fa18-4698-9add-2c9bd4132e89",
        "value": "signal.ct.ws",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773030",
        "to_ids": true,
        "type": "domain",
        "uuid": "03301187-7fe5-4cbc-9a8a-743b0a5a2b41",
        "value": "spiralkey.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773030",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf4eab96-fc84-4f0d-98c4-a9b50cd560f5",
        "value": "totok-pro.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:50+00:00",
        "timestamp": "1776773031",
        "to_ids": true,
        "type": "domain",
        "uuid": "10edb3b8-ed77-403a-be32-8192a4b32dfe",
        "value": "totokapp.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:51+00:00",
        "timestamp": "1776773031",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ca4c7db-fff9-4158-9798-3e893daf06a0",
        "value": "totokupdate.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:51+00:00",
        "timestamp": "1776773031",
        "to_ids": true,
        "type": "domain",
        "uuid": "c983ff85-0100-4388-928e-aa10bce06f6c",
        "value": "encryption-plug-in-signal.com-ae.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:51+00:00",
        "timestamp": "1776773031",
        "to_ids": true,
        "type": "domain",
        "uuid": "a60f880e-8cbf-4f5e-b2bf-dc6ab72c0245",
        "value": "download.appupdate.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:51+00:00",
        "timestamp": "1776773031",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5f874da-b5a9-4fb4-bda4-2d43e7033c67",
        "value": "mail.app-totok.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:51+00:00",
        "timestamp": "1776773031",
        "to_ids": true,
        "type": "domain",
        "uuid": "56ea9a9f-db02-48a5-958d-3b4b7c6daf96",
        "value": "static.appupdate.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:51+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "edf77794-fea7-4b9e-9de9-07b7c3e72e09",
        "value": "store.appupdate.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:52+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "31276529-4808-485a-ac6c-83a1cbfa498b",
        "value": "store.latestversion.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:52+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4af9993-a149-4f56-b81d-bf9dc30ea7f6",
        "value": "update.totokapp.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:52+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6d70bf6-6dca-4ff5-bc78-3c2464d58533",
        "value": "relaxmode.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:52+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "309b9e7d-226a-41b3-84c1-0c1670a067f4",
        "value": "signal-encryption-service.ct.ws",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:52+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "a431958f-d4ef-4756-aeac-95f9f3ff61b1",
        "value": "totok-pro.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:52+00:00",
        "timestamp": "1776773032",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cc5ce64-fca4-4b37-835e-efc1b47df857",
        "value": "totok-shop.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:53+00:00",
        "timestamp": "1776773033",
        "to_ids": false,
        "type": "url",
        "uuid": "0a3d8668-8466-42e8-8aa1-5ef829d364f9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1c15f816103c1dec3921a1c452ac0ad561be72f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:53+00:00",
        "timestamp": "1776773033",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcab038a-3862-465b-bf4b-5a42fc31be06",
        "value": "ai-ae.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:53+00:00",
        "timestamp": "1776773033",
        "to_ids": true,
        "type": "domain",
        "uuid": "6dd5284e-f6bc-44b3-869f-ad395a3f4db7",
        "value": "botim-app.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:53+00:00",
        "timestamp": "1776773033",
        "to_ids": true,
        "type": "domain",
        "uuid": "843445d8-72d5-422c-8699-8c7925a111fb",
        "value": "totok-pro.ae",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_promptspy",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T12:03:53+00:00",
        "timestamp": "1776773034",
        "to_ids": true,
        "type": "domain",
        "uuid": "24a801c7-f5e4-4768-abec-16b584d6cc37",
        "value": "totok-pro.ai-ae.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:04+00:00",
        "timestamp": "1776776404",
        "to_ids": false,
        "type": "url",
        "uuid": "8dea710e-dffa-43ca-9097-7d9048c4736c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a24074461bbd9f7119bde96d247f6d886c9e4290",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:04+00:00",
        "timestamp": "1776776404",
        "to_ids": false,
        "type": "url",
        "uuid": "6e95c4d3-a2bc-4811-af36-a3e1cee31f90",
        "value": "https://intel.breakglass.tech/post/needle-crimeware-platform-twizt-phorpiex-wallet-drainer-960m-credentials",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:04+00:00",
        "timestamp": "1776776404",
        "to_ids": false,
        "type": "url",
        "uuid": "a5ace4b7-a040-49ff-99b9-a0cc58b3c605",
        "value": "https://www.virustotal.com/gui/file/116852523703245c2c8deda85572eb51a71fe82639ba7aa8cbba19a38a65be0c/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:04+00:00",
        "timestamp": "1776776404",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5327db5d-0985-4113-a745-0bdc05fde8d0",
        "value": "130.12.180.135",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:04+00:00",
        "timestamp": "1776776405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "cff019b7-df3f-4c62-bb41-1ce720a5abb5",
        "value": "144.31.151.223",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:05+00:00",
        "timestamp": "1776776405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f56e6647-6a28-4461-870d-ed1c76a96fa1",
        "value": "178.16.54.109",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:05+00:00",
        "timestamp": "1776776405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "de42078e-5774-4539-b99b-3d41d9846085",
        "value": "178.16.55.234",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:05+00:00",
        "timestamp": "1776776405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "041e1830-6550-44e7-b613-1c7ba8c667f9",
        "value": "193.24.123.23",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:05+00:00",
        "timestamp": "1776776405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e257ef57-3a4e-4e4f-9cc8-94d2b8c5b92a",
        "value": "195.160.220.49",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:05+00:00",
        "timestamp": "1776776406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "eb4d2f4d-9795-4ed0-b157-403a8e9ccf12",
        "value": "209.17.118.17",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:06+00:00",
        "timestamp": "1776776406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "956ed9e7-b7de-4b20-9a7b-2f4063b66005",
        "value": "34.225.141.85",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:06+00:00",
        "timestamp": "1776776406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c33c287f-2b44-43e0-8842-ffab63fafa71",
        "value": "45.151.106.204",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:06+00:00",
        "timestamp": "1776776406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b2133c2e-a22c-437a-970e-866ec53c317a",
        "value": "82.38.96.253",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:06+00:00",
        "timestamp": "1776776406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d1fe126d-936d-4ee1-9a63-db5073babd66",
        "value": "94.103.91.192",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:06+00:00",
        "timestamp": "1776776406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6bc31811-3050-417e-955d-c600f2d56305",
        "value": "94.26.83.82",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:07+00:00",
        "timestamp": "1776776407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8c7a8560-b302-468e-9213-69f40bfa42a5",
        "value": "95.179.181.208",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:07+00:00",
        "timestamp": "1776776407",
        "to_ids": true,
        "type": "domain",
        "uuid": "439d3242-ad8c-4e7b-8e49-6f6399df18df",
        "value": "loaderinsight.agency",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phorpiex",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:07+00:00",
        "timestamp": "1776776407",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbb7804a-ebd0-438a-826c-cb239f490e9b",
        "value": "insights.loaderinsight.agency",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:07+00:00",
        "timestamp": "1776776407",
        "to_ids": false,
        "type": "url",
        "uuid": "d1d4c74a-d7dd-4713-a843-e0acf269b78c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7d4281f8d9b273297b481e5fba6ed11e031cf143",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:10+00:00",
        "timestamp": "1776776410",
        "to_ids": false,
        "type": "url",
        "uuid": "bd90f450-4508-4e28-a6f6-4a7ecc30fd5d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/cb3f15671b0854825715c20d4393bba5c03b7aa0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:10+00:00",
        "timestamp": "1776776410",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5b83488-3681-415d-ad8c-c6a621557c9e",
        "value": "638798112751129792.warsaw-shledrc-acak.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:10+00:00",
        "timestamp": "1776776410",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c5d2455-9167-4f00-a435-b08142c653a9",
        "value": "638798250265338711.kerman-shledrc-acak.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:10+00:00",
        "timestamp": "1776776410",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1401e65-e8a5-4da4-839d-65ecec1d08f7",
        "value": "638799976464357707.lahijan-shledrc-acan.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:10+00:00",
        "timestamp": "1776776410",
        "to_ids": true,
        "type": "domain",
        "uuid": "d95d7402-3aa4-453b-b9ad-6c40d656350a",
        "value": "638800616981987041.dublin-shledrc-acao.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:10+00:00",
        "timestamp": "1776776411",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4c46bb6-cac8-4d19-8637-7c2d654e462c",
        "value": "638800814946931618.berlin-shledrc-acap.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:11+00:00",
        "timestamp": "1776776411",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a76103b-bdd2-4c97-ad4b-6049ea0219b9",
        "value": "638807774991052514.athens-shledrc-acaz.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:11+00:00",
        "timestamp": "1776776411",
        "to_ids": true,
        "type": "domain",
        "uuid": "72ef80e0-6208-4a63-aaa2-b83c5cc2f706",
        "value": "638808279286809264.malayer-shledrc-acaz.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:11+00:00",
        "timestamp": "1776776411",
        "to_ids": true,
        "type": "domain",
        "uuid": "3de3d621-1dac-4157-90d8-02f2cfdf980a",
        "value": "638808705259632794.budapest-shledrc-acba.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:11+00:00",
        "timestamp": "1776776411",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccdfeb08-9c72-4bbe-92e5-1c2acd527834",
        "value": "638808983049892586.birjand-shledrc-acba.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:11+00:00",
        "timestamp": "1776776412",
        "to_ids": true,
        "type": "domain",
        "uuid": "3070ac92-61d8-474c-a9b9-6889b7bbd876",
        "value": "638809434544857586.dublin-shledrc-acbb.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:12+00:00",
        "timestamp": "1776776412",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c33757a-b0f6-440e-9253-135c85bdcb8c",
        "value": "638809712977746654.athens-shledrc-acbc.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T13:00:12+00:00",
        "timestamp": "1776776412",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e6cfe4-4282-4465-8b48-f4e8c43caf29",
        "value": "638810089169181655.shiraz-shledrc-acbc.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:04+00:00",
        "timestamp": "1776780005",
        "to_ids": false,
        "type": "url",
        "uuid": "b2f6652c-7838-4557-8b6f-d8572810eb09",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e3e34e36bb90e890479d37d2e596c4db003e13cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:05+00:00",
        "timestamp": "1776780006",
        "to_ids": false,
        "type": "url",
        "uuid": "f76e50f7-0a48-4a7b-98c7-5fc9b2afb3fd",
        "value": "https://www.virustotal.com/gui/ip-address/45.158.127.70/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:06+00:00",
        "timestamp": "1776780006",
        "to_ids": true,
        "type": "domain",
        "uuid": "24d3aa0c-4a17-41c7-a9bc-8decda0c028e",
        "value": "cloudflare-static17.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:06+00:00",
        "timestamp": "1776780006",
        "to_ids": true,
        "type": "domain",
        "uuid": "da78cadd-5496-4a11-8880-7a4b7a418c37",
        "value": "cloudflare-static1.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:06+00:00",
        "timestamp": "1776780007",
        "to_ids": true,
        "type": "domain",
        "uuid": "433f98bc-11e4-49a6-a6d4-c90c39c729de",
        "value": "cloudflare-static9.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:07+00:00",
        "timestamp": "1776780007",
        "to_ids": false,
        "type": "url",
        "uuid": "dbe2eaa2-280d-4c95-8414-3de81958e69c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b405f4c8133634c2d623f5e9b65d698cbfd00937",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:07+00:00",
        "timestamp": "1776780007",
        "to_ids": false,
        "type": "url",
        "uuid": "162a2857-683e-472a-a2db-90fee6e1d9bd",
        "value": "https://www.virustotal.com/gui/ip-address/45.158.127.27/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:07+00:00",
        "timestamp": "1776780007",
        "to_ids": true,
        "type": "domain",
        "uuid": "9245111c-c415-4c78-888a-6813b40b60d4",
        "value": "cloudflare-static17.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:07+00:00",
        "timestamp": "1776780007",
        "to_ids": false,
        "type": "url",
        "uuid": "1108c4ac-fe02-4804-a1b7-31aebe6ada5d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c8b32c8a6867d52d75c4fc90096303a40dde1511",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:07+00:00",
        "timestamp": "1776780007",
        "to_ids": false,
        "type": "url",
        "uuid": "01807960-bff9-4858-98fb-dc77b670b81c",
        "value": "https://www.joesecurity.org/blog/621128515416801396",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:07+00:00",
        "timestamp": "1776780008",
        "to_ids": true,
        "type": "domain",
        "uuid": "704cc696-9934-475b-93d5-f0e916672d12",
        "value": "analytics.green-it.lu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:08+00:00",
        "timestamp": "1776780008",
        "to_ids": true,
        "type": "domain",
        "uuid": "f93f694a-e64e-4cb8-8642-b3914fba6df2",
        "value": "microsoft.otp.lu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:08+00:00",
        "timestamp": "1776780008",
        "to_ids": false,
        "type": "url",
        "uuid": "8cd17249-03e4-4205-a504-3043b19f4c0e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4d0eea2509120f5f255f68796fa0fe0f51c0e7e6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:08+00:00",
        "timestamp": "1776780008",
        "to_ids": false,
        "type": "url",
        "uuid": "d9fe7a59-d4af-45c1-ab6f-876fd0f12816",
        "value": "https://any.run/cybersecurity-blog/lazarus-macos-malware-mach-o-man",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:08+00:00",
        "timestamp": "1776780008",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0bc5e80c-9d06-45a4-a3dc-218d1f3a62b4",
        "value": "144.172.114.220",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:08+00:00",
        "timestamp": "1776780009",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4e49bb90-c7bc-482f-9ec8-59866f4bdb84",
        "value": "172.86.91.195",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_bluenoroff",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:12+00:00",
        "timestamp": "1776780012",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3b838f8-2ec3-444d-8f82-ae05c8e27707",
        "value": "livemicrosft.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_skycloak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:12+00:00",
        "timestamp": "1776780012",
        "to_ids": false,
        "type": "url",
        "uuid": "9673e0eb-3b02-4d0c-b092-e2193ade80f3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/91e122f10d2bc8f5cf91586108b749ce21f2437d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_skycloak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:12+00:00",
        "timestamp": "1776780013",
        "to_ids": false,
        "type": "url",
        "uuid": "644e7aca-6224-4d31-9571-9367085c2c9b",
        "value": "https://mp.weixin.qq.com/s/nJpqvXCYV3ZdvNgYGrG4ow",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_skycloak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:13+00:00",
        "timestamp": "1776780013",
        "to_ids": true,
        "type": "domain",
        "uuid": "93f9bbf3-aa77-4111-9244-1e60ef89b9ba",
        "value": "2zrek3mkl72d5b6evpkx2rz2glzrltiorgblpfb2ttg6lacwlsdk4iqd.onion",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_skycloak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:13+00:00",
        "timestamp": "1776780013",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e0b7342-2563-4da1-b43c-09b3fbf06063",
        "value": "imnlyhj4mtmtesqrvf7c4ma6dkxeyxw3ae53w6fuz42spndg7zpat6qd.onion",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_skycloak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T14:00:13+00:00",
        "timestamp": "1776780013",
        "to_ids": true,
        "type": "domain",
        "uuid": "562eb373-2e5f-482f-94cf-17dee5b71550",
        "value": "nytiplwknkinobjaeb5tajjiglip3vtaccju6ta7d47u5u64ktrwhrqd.onion",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:04+00:00",
        "timestamp": "1776783604",
        "to_ids": false,
        "type": "url",
        "uuid": "81e826e5-025e-44cb-9ea4-76c536c1f375",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d856487208a0171165066596567344c5462f2762",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:04+00:00",
        "timestamp": "1776783604",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e98fad54-eb01-420d-ab49-f83ad76acbd3",
        "value": "103.79.77.181",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:04+00:00",
        "timestamp": "1776783605",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e2c7aee-8e88-493b-9efc-76ec462c5ed5",
        "value": "unassigned.172-81-60-97.spryt.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:05+00:00",
        "timestamp": "1776783605",
        "to_ids": false,
        "type": "url",
        "uuid": "1611a010-85c3-4dd0-99ed-c9a61e5f1ef3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/169f027f3fd1ee1e186e1a8bec86d42feec093da",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:05+00:00",
        "timestamp": "1776783605",
        "to_ids": false,
        "type": "url",
        "uuid": "11fb609b-677f-45d3-bfd9-24cf05636f6d",
        "value": "https://www.acronis.com/en/tru/posts/same-packet-different-magic-mustang-panda-hits-indias-banking-sector-and-korea-geopolitics",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:05+00:00",
        "timestamp": "1776783605",
        "to_ids": false,
        "type": "url",
        "uuid": "dd754ec3-3cdf-42df-831e-f1a8c5f08de1",
        "value": "https://www.virustotal.com/gui/file/18bc0e0f627d90fb283aa243055b46d0bfb5d85a7240d0f63ec2d1c0a2c15893/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:05+00:00",
        "timestamp": "1776783605",
        "to_ids": true,
        "type": "domain",
        "uuid": "27740808-3b6f-4ea5-8e00-888fa8fbd3d0",
        "value": "editor.gleeze.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_mustangpanda",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:05+00:00",
        "timestamp": "1776783605",
        "to_ids": true,
        "type": "domain",
        "uuid": "47e9c563-8187-4360-b996-545eefafb1f4",
        "value": "cosmosmusic.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:05+00:00",
        "timestamp": "1776783606",
        "to_ids": false,
        "type": "url",
        "uuid": "5581880d-39d4-4a8d-952e-e9e0a18f5496",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/dbfb5bac9318405b02c8e4084286afcab7d03cff",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:06+00:00",
        "timestamp": "1776783606",
        "to_ids": false,
        "type": "url",
        "uuid": "28a7f317-c162-4651-bb21-2bf6a1908772",
        "value": "https://x.com/JAMESWT_WT/status/2046597473284620754",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:06+00:00",
        "timestamp": "1776783606",
        "to_ids": false,
        "type": "url",
        "uuid": "bf9d9d82-6db1-4b38-a97b-3a1c79e2836f",
        "value": "https://app.any.run/tasks/33c4acae-d906-482e-b581-e138528b52a5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:06+00:00",
        "timestamp": "1776783606",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0b7d125-bd40-4fba-82f8-edae48991768",
        "value": "controlpanelbkngreservationcheck.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:06+00:00",
        "timestamp": "1776783606",
        "to_ids": true,
        "type": "domain",
        "uuid": "abf29065-1909-46b8-bc8a-bf5dd4c5e11d",
        "value": "erzurumyoresel.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:06+00:00",
        "timestamp": "1776783606",
        "to_ids": true,
        "type": "domain",
        "uuid": "963981c9-361a-4900-ac8a-d0b77ee61591",
        "value": "gskqf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:06+00:00",
        "timestamp": "1776783607",
        "to_ids": true,
        "type": "domain",
        "uuid": "44e575c9-3ac2-42f0-9d55-680d14e3abc1",
        "value": "hotel-equatorial.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783607",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb9d675d-7094-461f-90e9-dea5fce382d1",
        "value": "qdfljwx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783607",
        "to_ids": false,
        "type": "url",
        "uuid": "4202c3ed-a3b6-46f0-9943-cfcb3c073e7b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/59c3e99204b7f42d1436e35294cfa5cf6fee753d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783607",
        "to_ids": false,
        "type": "url",
        "uuid": "f2447edb-b0ac-4777-9849-c2c0f0161c33",
        "value": "https://x.com/suyog41/status/2046592187606220864",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783607",
        "to_ids": false,
        "type": "url",
        "uuid": "8d5ada12-3d5a-4dba-95be-ea291c851189",
        "value": "https://www.virustotal.com/gui/file/067d10ed45e4ea30f74f8f5bee4553239d3bb27b2130269616114805ad71642c/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783607",
        "to_ids": false,
        "type": "url",
        "uuid": "abb877e5-79d5-4503-89b4-fdda9dcb7b01",
        "value": "https://www.virustotal.com/gui/file/203d19fc2d1c704ece17dc5c5bd1401ba2862f8ef9c753141c31e8615660acde/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783607",
        "to_ids": false,
        "type": "url",
        "uuid": "a77d2804-924e-4a7c-8331-4b21a46224fa",
        "value": "https://www.virustotal.com/gui/file/6661a54fc25274662edf4ae01e717a8c3c9dbe5c62daa9a45568c928fa7b757c/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:07+00:00",
        "timestamp": "1776783608",
        "to_ids": false,
        "type": "url",
        "uuid": "b6d20d2f-2066-406a-97fa-1c62af5c03ff",
        "value": "https://www.virustotal.com/gui/file/67748c0f5c0cf5ae965d928c9c005f0a785763fadd6ea9a1519a5d51e7bb24ff/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:08+00:00",
        "timestamp": "1776783608",
        "to_ids": false,
        "type": "url",
        "uuid": "237b7823-2193-4de5-9a7e-d11870756cc3",
        "value": "https://www.virustotal.com/gui/file/783ede544551781f7a66e1220abed6714ae626954bbb0cbdec5b74cbb819b6f5/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:08+00:00",
        "timestamp": "1776783608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ae16491a-5fdf-425d-8687-cd4b2883bf71",
        "value": "200.98.65.130",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:08+00:00",
        "timestamp": "1776783608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "a51c3395-c4dd-449b-ba50-57d1232a91ec",
        "value": "54.207.138.9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:08+00:00",
        "timestamp": "1776783608",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fc35cff-8f65-4c10-b32d-48839ea882d8",
        "value": "futuregroupstar.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "enmity",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:08+00:00",
        "timestamp": "1776783608",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6c7236f-c6bd-41e7-9763-dea8b9c90c68",
        "value": "enmity.discloud.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:08+00:00",
        "timestamp": "1776783609",
        "to_ids": false,
        "type": "url",
        "uuid": "be4116df-2c83-4cc5-a7ec-a44f1cbdb3be",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9ebbb4469cc9080b83e208a0c538b95aca66238f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:09+00:00",
        "timestamp": "1776783609",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dcf9d2b-735a-4202-9b28-b22b0342f800",
        "value": "istatics.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:09+00:00",
        "timestamp": "1776783609",
        "to_ids": true,
        "type": "domain",
        "uuid": "720dca52-3dd5-4e7f-8456-2f05894701be",
        "value": "lstatics.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:09+00:00",
        "timestamp": "1776783609",
        "to_ids": true,
        "type": "domain",
        "uuid": "f375e46f-6db1-4826-8521-699a6496adcf",
        "value": "nstatics.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:09+00:00",
        "timestamp": "1776783609",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddae01d8-b698-4899-9dd6-1f505bfc3dc3",
        "value": "zstatics.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:09+00:00",
        "timestamp": "1776783609",
        "to_ids": false,
        "type": "url",
        "uuid": "682f5604-d9d0-4469-8c55-af7f1d57478e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/307bd289126ecb1563af4dfa148aed3c2daa73bd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:09+00:00",
        "timestamp": "1776783609",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c87d040-24f7-42a2-b9f0-a4683b99ff82",
        "value": "ey.static17-jquery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:10+00:00",
        "timestamp": "1776783610",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae385c6f-0778-4f49-80bc-faf6404861e7",
        "value": "ez.static18-jquery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:10+00:00",
        "timestamp": "1776783610",
        "to_ids": false,
        "type": "url",
        "uuid": "4852f7c2-4e02-481e-9392-a539a23c4e84",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7d94222147b2989b0751f24c67b055bddb44c43d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:10+00:00",
        "timestamp": "1776783610",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8963235-fccb-41eb-8c79-8ddad6bd45cd",
        "value": "static17-jquery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T15:00:10+00:00",
        "timestamp": "1776783610",
        "to_ids": true,
        "type": "domain",
        "uuid": "30cfa6bc-ded5-45bf-96a5-58076970377b",
        "value": "static18-jquery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:03+00:00",
        "timestamp": "1776787204",
        "to_ids": false,
        "type": "url",
        "uuid": "9b149b25-b653-4d8e-9b41-02e4944dd32d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/44d105eea2f69bc0a4c8c2db50e9b5fa95ede1a1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:04+00:00",
        "timestamp": "1776787205",
        "to_ids": false,
        "type": "url",
        "uuid": "3764e421-f055-4164-ae38-3aa57ced3068",
        "value": "https://x.com/volrant136/status/2046603826296234102",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:05+00:00",
        "timestamp": "1776787205",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0b8586d-5fec-4058-8048-3a3c2e8bbccd",
        "value": "pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:05+00:00",
        "timestamp": "1776787206",
        "to_ids": true,
        "type": "domain",
        "uuid": "8aff6f31-1ff9-4464-b57a-b78363280fd2",
        "value": "cabinet.gov.bd.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:06+00:00",
        "timestamp": "1776787206",
        "to_ids": true,
        "type": "domain",
        "uuid": "d47abfc7-32e8-4eaa-a3bc-3c69e464dc64",
        "value": "cbsl.lk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:06+00:00",
        "timestamp": "1776787206",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5ceb682-a7e0-475d-a114-2bbe1d375055",
        "value": "commerce.gov.pk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:06+00:00",
        "timestamp": "1776787206",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f297d47-dbff-46a9-a267-d617cb1aa771",
        "value": "control.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:06+00:00",
        "timestamp": "1776787206",
        "to_ids": true,
        "type": "domain",
        "uuid": "a62250ec-fb78-4505-8934-bc1867e2dc82",
        "value": "cpj.org.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:06+00:00",
        "timestamp": "1776787207",
        "to_ids": true,
        "type": "domain",
        "uuid": "c996906f-2576-4a22-8962-a382f7962dac",
        "value": "dmerpccc.gov.pk.gmail.com.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:07+00:00",
        "timestamp": "1776787207",
        "to_ids": true,
        "type": "domain",
        "uuid": "83cded61-15a0-48d5-aa17-ee49ef4d74ce",
        "value": "estabiishment.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:07+00:00",
        "timestamp": "1776787207",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8a86387-62a7-4777-a9d8-69040e564a93",
        "value": "fbr.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:07+00:00",
        "timestamp": "1776787207",
        "to_ids": true,
        "type": "domain",
        "uuid": "df6d54ad-9e3b-4aef-8878-6ca93096e322",
        "value": "fpsc.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:07+00:00",
        "timestamp": "1776787207",
        "to_ids": true,
        "type": "domain",
        "uuid": "84ff7f8e-bf2e-45d7-834e-9e31ef490988",
        "value": "gmail.com.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:07+00:00",
        "timestamp": "1776787208",
        "to_ids": true,
        "type": "domain",
        "uuid": "d51613ff-ca91-4ba7-9273-2e30500099d7",
        "value": "gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:08+00:00",
        "timestamp": "1776787208",
        "to_ids": true,
        "type": "domain",
        "uuid": "90c51d33-e6f4-4482-be28-d10c7199ec52",
        "value": "gunaso.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:08+00:00",
        "timestamp": "1776787208",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4e94592-d22c-4e61-a9c6-9ca7d30aa644",
        "value": "hotmail.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:08+00:00",
        "timestamp": "1776787208",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fa6f65e-56e2-4118-b596-4c7c891c1640",
        "value": "info.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:09+00:00",
        "timestamp": "1776787209",
        "to_ids": true,
        "type": "domain",
        "uuid": "194eb309-b27a-44e6-aab3-a87ec45e54d8",
        "value": "info2.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:09+00:00",
        "timestamp": "1776787209",
        "to_ids": true,
        "type": "domain",
        "uuid": "3019e5d4-6afd-4917-9df2-87cb25981e3e",
        "value": "interior.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:09+00:00",
        "timestamp": "1776787209",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3c0ac3f-bfe7-4629-ab02-592c1521920e",
        "value": "mha.gov.bd.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:09+00:00",
        "timestamp": "1776787209",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb54c305-d251-4fc7-87a5-b697aea6706a",
        "value": "mishal.com.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:09+00:00",
        "timestamp": "1776787210",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd3ff0fa-5d19-44b2-acf1-bcf8bc88a44d",
        "value": "mo.treasury.gov.lk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:10+00:00",
        "timestamp": "1776787210",
        "to_ids": true,
        "type": "domain",
        "uuid": "921c73b6-5d2f-449f-ad1e-a13bcbe86772",
        "value": "mod.gov.bd.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:10+00:00",
        "timestamp": "1776787210",
        "to_ids": true,
        "type": "domain",
        "uuid": "26dfbd8b-7dac-4b07-bd91-f03ea9421f3f",
        "value": "mof.gov.np.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:10+00:00",
        "timestamp": "1776787210",
        "to_ids": true,
        "type": "domain",
        "uuid": "84a338bd-0b79-4391-86e9-2baf5d8df515",
        "value": "mofa.gov.bd.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:10+00:00",
        "timestamp": "1776787210",
        "to_ids": true,
        "type": "domain",
        "uuid": "504bf825-44d8-44e4-b272-0d783a6e8e3d",
        "value": "moha.gov.bd.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:10+00:00",
        "timestamp": "1776787210",
        "to_ids": true,
        "type": "domain",
        "uuid": "f382c723-f537-466d-8040-2f4ced625d89",
        "value": "moha.gov.np.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:10+00:00",
        "timestamp": "1776787211",
        "to_ids": true,
        "type": "domain",
        "uuid": "6eadfd39-5462-4c61-bb4e-98bd5b1f0299",
        "value": "moib.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:11+00:00",
        "timestamp": "1776787211",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5a0207f-da15-4e3b-8f21-c4ceec425038",
        "value": "ndma.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:11+00:00",
        "timestamp": "1776787211",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ad9a77d-7744-451c-9070-6f073fcccb12",
        "value": "org.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:11+00:00",
        "timestamp": "1776787211",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd66ddb-a287-4e5c-a18e-c884fa0785f2",
        "value": "osacadmin.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:11+00:00",
        "timestamp": "1776787212",
        "to_ids": true,
        "type": "domain",
        "uuid": "92422114-9c3d-4268-b8d9-1f2921b83552",
        "value": "pakun.org.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:12+00:00",
        "timestamp": "1776787212",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff06a199-67a2-48c7-8a80-5f9b4164fd02",
        "value": "pk.gmail.com.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:12+00:00",
        "timestamp": "1776787212",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aa9fee3-ab6f-4d6e-9722-616a95df927c",
        "value": "pk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:12+00:00",
        "timestamp": "1776787212",
        "to_ids": true,
        "type": "domain",
        "uuid": "97d14099-a65d-4a6f-90d2-c9a7fca4c90e",
        "value": "pubad.gov.lk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:12+00:00",
        "timestamp": "1776787213",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab060fe7-23da-4a27-bedb-38fb62a4d653",
        "value": "reliefweb.int.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:13+00:00",
        "timestamp": "1776787213",
        "to_ids": true,
        "type": "domain",
        "uuid": "e46d535e-806e-40e8-9c22-6e4d9aba8ab7",
        "value": "securitycouncilreport.org.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:13+00:00",
        "timestamp": "1776787213",
        "to_ids": true,
        "type": "domain",
        "uuid": "b127a93b-f9a7-4d66-884a-ba3f8363ec8f",
        "value": "sltnet.lk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:13+00:00",
        "timestamp": "1776787213",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f95c85c-29a9-4f9e-af37-025766b79a68",
        "value": "state.gov.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:13+00:00",
        "timestamp": "1776787213",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d8fe089-06af-406b-8fc0-84e7e7728c25",
        "value": "treasury.gov.lk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:13+00:00",
        "timestamp": "1776787214",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b43eb16-908a-44a1-bc4e-c3dd7f48ce04",
        "value": "un.org.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:14+00:00",
        "timestamp": "1776787214",
        "to_ids": true,
        "type": "domain",
        "uuid": "6eca4e1f-c463-4dc0-9b3e-415ddbe11929",
        "value": "webdisk.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:14+00:00",
        "timestamp": "1776787214",
        "to_ids": true,
        "type": "domain",
        "uuid": "8df4e284-5840-466e-8afe-159b01aa3a21",
        "value": "webmail.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:14+00:00",
        "timestamp": "1776787214",
        "to_ids": true,
        "type": "domain",
        "uuid": "f51b024b-9457-4d88-bde1-098001e17423",
        "value": "whm.pk-mailgov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:14+00:00",
        "timestamp": "1776787214",
        "to_ids": false,
        "type": "url",
        "uuid": "34f0f583-4d80-4ca2-bfc7-d070bf52aede",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ff8038b02df97acb5c38b27f0ee12497a55099f6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:15+00:00",
        "timestamp": "1776787215",
        "to_ids": false,
        "type": "url",
        "uuid": "43f6c3d1-0be1-4bf5-abb5-4648708aa8b0",
        "value": "https://x.com/_SEAL_Org/status/2046584841425047722",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:15+00:00",
        "timestamp": "1776787215",
        "to_ids": false,
        "type": "url",
        "uuid": "92c7a33f-2384-486e-8ad6-ee50b44f0d47",
        "value": "https://radar.securityalliance.org/malicious-google-ads-targeting-crypto",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:15+00:00",
        "timestamp": "1776787215",
        "to_ids": true,
        "type": "domain",
        "uuid": "7480e9a6-8b09-48ac-97f3-3b5236ad7a64",
        "value": "hipviz.art",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:15+00:00",
        "timestamp": "1776787215",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3df8061-e29e-4b40-8242-a7587ce39189",
        "value": "thirdtemple.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:15+00:00",
        "timestamp": "1776787215",
        "to_ids": true,
        "type": "domain",
        "uuid": "20699780-9c06-4abc-8bb5-e4e2e58f3ff5",
        "value": "node1.bundlr.network",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:15+00:00",
        "timestamp": "1776787216",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0c10d4f-8137-4c02-80cb-acea8ca8b37b",
        "value": "node1.irys.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:16+00:00",
        "timestamp": "1776787216",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bb2b911-4f5c-492c-aa76-4f95735611a7",
        "value": "node2.bundlr.network",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:16+00:00",
        "timestamp": "1776787216",
        "to_ids": true,
        "type": "domain",
        "uuid": "434f481c-1f5e-4781-8858-b0327d7d053a",
        "value": "node2.irys.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:16+00:00",
        "timestamp": "1776787216",
        "to_ids": true,
        "type": "domain",
        "uuid": "48f45607-e2ec-488a-9d9e-d5927099ba4a",
        "value": "perlearbitrary.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:16+00:00",
        "timestamp": "1776787216",
        "to_ids": true,
        "type": "domain",
        "uuid": "961ec817-84ea-4350-ba23-37c84036596c",
        "value": "arweave.mainnet.irys.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T16:00:17+00:00",
        "timestamp": "1776787217",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c7e5c00-08ca-4cc2-ab31-b7ad74a7b6f9",
        "value": "rough-star-cb21.perlearbitrary.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:02+00:00",
        "timestamp": "1776790802",
        "to_ids": false,
        "type": "url",
        "uuid": "30c08024-1912-4850-aab2-561e132aba95",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ff0a22f88b004edb529fe59c8086b6d434f7e3b2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:02+00:00",
        "timestamp": "1776790803",
        "to_ids": false,
        "type": "url",
        "uuid": "fa33a175-a623-429f-b7a5-dad0e0d8399f",
        "value": "https://www.malwarebytes.com/blog/threat-intel/2026/04/fake-google-antigravity-downloads-are-stealing-accounts-in-minutes",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:03+00:00",
        "timestamp": "1776790803",
        "to_ids": false,
        "type": "url",
        "uuid": "2f910640-ae1d-4032-9de5-21a41b7f8380",
        "value": "https://www.virustotal.com/gui/ip-address/89.124.96.27/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:03+00:00",
        "timestamp": "1776790803",
        "to_ids": false,
        "type": "url",
        "uuid": "aee58c07-7b78-465a-97be-8c1c20624122",
        "value": "https://www.virustotal.com/gui/file/61aca585687ec21a182342a40de3eaa12d3fc0d92577456cae0df37c3ed28e99/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:03+00:00",
        "timestamp": "1776790804",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bd65a3a4-c831-4a73-a2ce-c6b7ed88d029",
        "value": "89.124.96.27",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:04+00:00",
        "timestamp": "1776790805",
        "to_ids": true,
        "type": "domain",
        "uuid": "e186e210-b078-404f-af2f-8dccda0326c1",
        "value": "antigravity-google.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:05+00:00",
        "timestamp": "1776790805",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfe01b70-a678-4a99-9087-6b3f15cdd0ca",
        "value": "antigravity-ide-com.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:05+00:00",
        "timestamp": "1776790805",
        "to_ids": true,
        "type": "domain",
        "uuid": "377eb767-89e0-4281-b4af-a69f941d75ed",
        "value": "antigravity-ide.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:05+00:00",
        "timestamp": "1776790805",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5f1f511-235d-467c-a14f-ab67a2802e13",
        "value": "antigravityai.cn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:05+00:00",
        "timestamp": "1776790805",
        "to_ids": true,
        "type": "domain",
        "uuid": "c303bed1-c770-4159-87be-ac50ad255fc9",
        "value": "antigravityai.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:05+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "f72cce8f-7311-4d6b-8342-f6d92dde1869",
        "value": "antigravityai.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:06+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "49bba06d-7c4f-4e0e-aa5e-8ab1a68759e8",
        "value": "dev-admin-hris.kueindonesia.id",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:06+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4df38dd-4e91-4dfb-a368-5f75a27cef58",
        "value": "easycapturex.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:06+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ddc14fc-f1ed-4946-87e0-96948292606e",
        "value": "google-antigravity.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:06+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "21aea59b-7ec6-4f2b-84c4-88f79cd3add0",
        "value": "jurigcode.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:06+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2ad0454-e9a0-4e8a-9719-952808e6ea8d",
        "value": "wan35.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:06+00:00",
        "timestamp": "1776790806",
        "to_ids": true,
        "type": "domain",
        "uuid": "6897fa88-b9c1-4674-aa56-f135fcea987e",
        "value": "opus-dsn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790807",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7961d3b-c273-4468-8b75-e662d6421a9d",
        "value": "screen-capturex.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790807",
        "to_ids": true,
        "type": "domain",
        "uuid": "441ef38e-d760-47be-ba4b-b766503dd671",
        "value": "captr.b-cdn.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790807",
        "to_ids": false,
        "type": "url",
        "uuid": "e022346f-b661-4cfb-9232-9962416ea019",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a016e8f348274a4610fa43b7a530a09f004ee963",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790807",
        "to_ids": false,
        "type": "url",
        "uuid": "76721046-cc1f-4253-aac2-37cd8560bfcd",
        "value": "https://x.com/g0njxa/status/2046605636494885329",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790807",
        "to_ids": false,
        "type": "url",
        "uuid": "b00f7119-c6ab-4c47-8a39-378f690e65f4",
        "value": "https://app.any.run/tasks/b5be817c-56c5-4b88-aa1a-d5b5380a032f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790807",
        "to_ids": false,
        "type": "url",
        "uuid": "ad2e07bd-dbd0-4800-af2e-2a359ffbacc8",
        "value": "https://www.virustotal.com/gui/file/5071921cb1ca369fe8f7af522a00373c8c85e4357f7ea1879d2cb4ae791797d6/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:07+00:00",
        "timestamp": "1776790808",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2a1a597-2a8d-457f-a177-3ea3a4832cee",
        "value": "claude-setup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:08+00:00",
        "timestamp": "1776790808",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b21ac1d-6fe5-40e0-a6c9-f84efd9d9d4f",
        "value": "codex-install.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:08+00:00",
        "timestamp": "1776790808",
        "to_ids": true,
        "type": "domain",
        "uuid": "88908ce2-8123-4195-afb8-68dbffb1aa1f",
        "value": "gemini-cli.co.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:08+00:00",
        "timestamp": "1776790808",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f0c2b35-51c6-4b09-ac52-a5d13ae7ae30",
        "value": "gemini-cli.kro.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:08+00:00",
        "timestamp": "1776790808",
        "to_ids": true,
        "type": "domain",
        "uuid": "722f4ca8-73ce-4555-bfc6-c8d419679c4d",
        "value": "gemini-console.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:08+00:00",
        "timestamp": "1776790808",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fbea40a-5a4a-4b6a-99b7-bad50b25f08b",
        "value": "gemini-setup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:08+00:00",
        "timestamp": "1776790809",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e8b756-4224-4141-ae8c-9706fe69fb39",
        "value": "geminicli.co.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:09+00:00",
        "timestamp": "1776790809",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ece90c6-fddd-4017-b3c2-e0ac7a9d4b22",
        "value": "mo2307.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:09+00:00",
        "timestamp": "1776790809",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5f4257a-28b9-4a61-a58a-55aa27615113",
        "value": "msft23.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T17:00:09+00:00",
        "timestamp": "1776790809",
        "to_ids": true,
        "type": "domain",
        "uuid": "a94ec4a0-19ec-46d0-a642-f362e48050ad",
        "value": "events.msft23.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:03+00:00",
        "timestamp": "1776794404",
        "to_ids": false,
        "type": "url",
        "uuid": "de868f16-d8fd-4a76-9028-3337f6bf0a0f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4483092678a37ad4d576fe5aa0da41b5a3747de6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:04+00:00",
        "timestamp": "1776794405",
        "to_ids": false,
        "type": "url",
        "uuid": "af616223-b3c8-4c05-914b-bf8c11cbbb60",
        "value": "https://x.com/JustWantToQ1/status/2046629702236787155",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:05+00:00",
        "timestamp": "1776794405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7025d241-b172-40e9-bd1a-b40895a41a63",
        "value": "13.248.236.92",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:05+00:00",
        "timestamp": "1776794405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "440a5ffd-dcda-4d4d-aa37-08948f171be7",
        "value": "18.166.30.239",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hvncrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:05+00:00",
        "timestamp": "1776794405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d58775ec-0f65-4ddc-aa04-3503b5b8cfcc",
        "value": "99.83.192.149",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:05+00:00",
        "timestamp": "1776794405",
        "to_ids": false,
        "type": "url",
        "uuid": "899dd99a-ebfa-4a87-a24e-8a3c7c7e28ae",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3630f29bc23b5791b2c67f405cd2739ee3393e89",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:05+00:00",
        "timestamp": "1776794406",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4a72eb5-89fd-4e2d-8ca5-4dfcba128f84",
        "value": "david-taylor87.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:06+00:00",
        "timestamp": "1776794406",
        "to_ids": true,
        "type": "domain",
        "uuid": "df01e788-10a1-440a-972b-c1836073bf32",
        "value": "kieutrinh831993.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:06+00:00",
        "timestamp": "1776794406",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf2db853-d83d-4af7-86b9-4806646bfa5e",
        "value": "lelinh140797.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:06+00:00",
        "timestamp": "1776794406",
        "to_ids": true,
        "type": "domain",
        "uuid": "60375cca-3ac1-40e6-95a2-00b456d9d6e1",
        "value": "lindagreen2009.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:06+00:00",
        "timestamp": "1776794406",
        "to_ids": true,
        "type": "domain",
        "uuid": "40433f2d-2817-4125-ad0b-4af27148f86b",
        "value": "lindajackson449.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:06+00:00",
        "timestamp": "1776794406",
        "to_ids": true,
        "type": "domain",
        "uuid": "65bdcb29-43f7-4772-b2e3-6f0011751127",
        "value": "olivia-thomas764.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:07+00:00",
        "timestamp": "1776794407",
        "to_ids": false,
        "type": "url",
        "uuid": "25a55168-af7d-4cf9-aa2e-f54de6d73a86",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2ac3e21c7b6ae62f8feff0faf7a132c2b3db491f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:07+00:00",
        "timestamp": "1776794407",
        "to_ids": false,
        "type": "url",
        "uuid": "3248542e-3826-4e1b-ba78-9becd1bf9c1b",
        "value": "https://x.com/FABO97662188/status/2046595945236750756",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:07+00:00",
        "timestamp": "1776794407",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf921f3e-0b39-4fc1-8c7f-f475241c94d6",
        "value": "apple-team.ghost.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:07+00:00",
        "timestamp": "1776794407",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7984156-7e71-49f0-8dcc-17a17464b901",
        "value": "clabrmercur.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:07+00:00",
        "timestamp": "1776794407",
        "to_ids": true,
        "type": "domain",
        "uuid": "14f7112e-60a8-4562-a983-80a3bb13bd02",
        "value": "claud-code-lastversion.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:07+00:00",
        "timestamp": "1776794408",
        "to_ids": true,
        "type": "domain",
        "uuid": "70dc5ad9-0cc3-45ec-8512-eba90557bee2",
        "value": "claud-new-tools591.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:08+00:00",
        "timestamp": "1776794408",
        "to_ids": true,
        "type": "domain",
        "uuid": "b84fd178-05d1-4be7-9472-ef646d150205",
        "value": "claude-code-deploy.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:08+00:00",
        "timestamp": "1776794408",
        "to_ids": true,
        "type": "domain",
        "uuid": "a77d587e-71af-438f-b8f4-3421ebd79e4c",
        "value": "claude-code-product.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:08+00:00",
        "timestamp": "1776794408",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7d93bcb-dc7f-41d8-8713-d30fa3c26716",
        "value": "claude-codeapp.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:08+00:00",
        "timestamp": "1776794408",
        "to_ids": true,
        "type": "domain",
        "uuid": "856c2d99-3458-4626-a7b4-3cdc45586f35",
        "value": "claude-cowork-desktop.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:08+00:00",
        "timestamp": "1776794408",
        "to_ids": true,
        "type": "domain",
        "uuid": "3148647e-0285-40d1-b337-9d2ff8313012",
        "value": "claude-download.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:08+00:00",
        "timestamp": "1776794409",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8e4bf75-c41a-4929-ad0e-594ea6a9fe20",
        "value": "claudecodeddocs.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:09+00:00",
        "timestamp": "1776794409",
        "to_ids": true,
        "type": "domain",
        "uuid": "1060f433-4fb7-4964-8867-82967f2691ba",
        "value": "claudecodedoc.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:09+00:00",
        "timestamp": "1776794409",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7722ffa-08fd-4b2d-ac5c-d725f1fc99ca",
        "value": "gkkma-glcaks-summ.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:09+00:00",
        "timestamp": "1776794409",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5507918-34a1-420b-b4a1-72f044bbb438",
        "value": "hidden-mac-guide.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:09+00:00",
        "timestamp": "1776794409",
        "to_ids": true,
        "type": "domain",
        "uuid": "75bab640-c983-4311-aa6c-373ff388737f",
        "value": "hidden-sun-ef93.lelinh140797.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:09+00:00",
        "timestamp": "1776794409",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dc11faf-857e-4e06-ad5f-059deac2d176",
        "value": "kj51-weathj-dsjka.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:10+00:00",
        "timestamp": "1776794410",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c50f3f5-d1fa-4201-8b6a-fc6fcd56448b",
        "value": "late-pond-d4f2.david-taylor87.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:10+00:00",
        "timestamp": "1776794410",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4d7b74d-3a35-4ed8-ab5b-95589a57234b",
        "value": "late-scene-2f6b.olivia-thomas764.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:10+00:00",
        "timestamp": "1776794410",
        "to_ids": true,
        "type": "domain",
        "uuid": "6be309e2-34b0-4d12-b592-1ee8a76c6d23",
        "value": "mac-clean.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:10+00:00",
        "timestamp": "1776794410",
        "to_ids": true,
        "type": "domain",
        "uuid": "2153c0ce-398d-4903-9338-29f5c4e71e0f",
        "value": "mac-showfiles.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:10+00:00",
        "timestamp": "1776794410",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dab8493-c5db-421a-8c69-64e15f046642",
        "value": "mac-storage-guide.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:10+00:00",
        "timestamp": "1776794411",
        "to_ids": true,
        "type": "domain",
        "uuid": "397de5c1-642a-4f4a-ab33-9c40afdd2345",
        "value": "mac-usb-drive.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:11+00:00",
        "timestamp": "1776794411",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4043394-a1df-4d70-9003-ad953a94f113",
        "value": "macboost.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:11+00:00",
        "timestamp": "1776794411",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ed0b444-6e59-46ef-98fc-3abc1e5950ed",
        "value": "maccleaner.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:11+00:00",
        "timestamp": "1776794411",
        "to_ids": true,
        "type": "domain",
        "uuid": "4214aa39-9a65-4376-a73d-730db6cc1873",
        "value": "man-5klfdsk134k13412-note.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:11+00:00",
        "timestamp": "1776794411",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0e6eb2d-0019-4ced-991b-9f69932c19af",
        "value": "new-csopcx4p6l-sl.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:11+00:00",
        "timestamp": "1776794411",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb4bc58b-5901-461b-af98-03fefe18cf8f",
        "value": "notebooklm-new-ver.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:11+00:00",
        "timestamp": "1776794412",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ff08af8-fe8d-4d90-b209-b55115aedf6e",
        "value": "notebooklm-update-version.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:12+00:00",
        "timestamp": "1776794412",
        "to_ids": true,
        "type": "domain",
        "uuid": "49f9e21f-7b90-42b4-96e4-558780904961",
        "value": "notebooklm-version-upd.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:12+00:00",
        "timestamp": "1776794412",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c1da01f-5fed-41a4-883a-7d861f90be9c",
        "value": "notegamskardas.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:12+00:00",
        "timestamp": "1776794412",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b09e3d9-0838-4237-9040-c2572acb56de",
        "value": "noteklmgoodk.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:12+00:00",
        "timestamp": "1776794412",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ff5b30d-e001-4a25-baf8-74135fdc8da2",
        "value": "notembkasjokk.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:12+00:00",
        "timestamp": "1776794412",
        "to_ids": true,
        "type": "domain",
        "uuid": "6630257f-3576-4c60-9494-02c7da4d4b48",
        "value": "proj-hid513291kzg.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:12+00:00",
        "timestamp": "1776794413",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8bb28cf-fd6e-464c-83f2-b6e7ba266bbc",
        "value": "project-clau05192.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:13+00:00",
        "timestamp": "1776794413",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdd589fe-6f9f-4626-8ae5-8f72e47526c3",
        "value": "project-clau350918kg.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:13+00:00",
        "timestamp": "1776794413",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b2b3aca-1163-4c86-a6e0-80f553d11e40",
        "value": "project-hidd501921.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:13+00:00",
        "timestamp": "1776794413",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ec86f89-f1a8-4d91-9c65-8ffd257ca380",
        "value": "project-ms50192kd15.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:13+00:00",
        "timestamp": "1776794413",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c4e1028-7d48-4187-855b-6bfeafd5e880",
        "value": "project-msg510901kja.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:13+00:00",
        "timestamp": "1776794414",
        "to_ids": true,
        "type": "domain",
        "uuid": "026430ab-7fd3-49e5-a739-382c08aeca1f",
        "value": "project-usb392891.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:14+00:00",
        "timestamp": "1776794414",
        "to_ids": true,
        "type": "domain",
        "uuid": "32a2317c-6e96-438d-8fb1-d3f643aa8e7e",
        "value": "pycharm.squarespace.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:14+00:00",
        "timestamp": "1776794414",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c441adb-2d16-402e-ab78-8d54dc897352",
        "value": "shrill-unit-1140.kieutrinh831993.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:14+00:00",
        "timestamp": "1776794414",
        "to_ids": true,
        "type": "domain",
        "uuid": "652b4de4-5b55-410c-8e7a-eda1f6d104ed",
        "value": "solitary-cell-f4f6.lindagreen2009.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:14+00:00",
        "timestamp": "1776794414",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aead6e0-fc3f-4a54-9300-e70cd8961f03",
        "value": "sparkling-truth-dcb9.lindajackson449.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T18:00:14+00:00",
        "timestamp": "1776794414",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ed31940-b753-4c99-ba78-018dc78a48c5",
        "value": "us5123proj59891ksjn3419.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:04+00:00",
        "timestamp": "1776798004",
        "to_ids": false,
        "type": "url",
        "uuid": "915bfabf-7a40-4f33-a01e-14212f523d77",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7e1f3b6a711744dbae860cd5bc31af3099218ec8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:04+00:00",
        "timestamp": "1776798004",
        "to_ids": false,
        "type": "url",
        "uuid": "eb76e72c-2f12-44fb-801b-a99ef7e4937a",
        "value": "https://x.com/smica83/status/2046662085837308179",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:04+00:00",
        "timestamp": "1776798005",
        "to_ids": false,
        "type": "url",
        "uuid": "563a71b2-5fea-4dd9-8dfa-a950a6212c77",
        "value": "https://www.virustotal.com/gui/file/7d1abbdb866dff61ad7cb8c0ba58812b026d29b19a3045bd968bffd72b7e7328/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "powershell_injector",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:05+00:00",
        "timestamp": "1776798005",
        "to_ids": true,
        "type": "domain",
        "uuid": "344524c3-c01c-464c-937e-859376a97086",
        "value": "acbcr.ro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:05+00:00",
        "timestamp": "1776798005",
        "to_ids": false,
        "type": "url",
        "uuid": "c9b194d2-6990-4b23-9609-69d848a3e8ba",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/87bf151f2f9ec1c77381077fce2ae12f7ee77d78",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:05+00:00",
        "timestamp": "1776798005",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee01e347-b218-4c77-81bb-c44106e51703",
        "value": "amgk-winte-osgksab.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:05+00:00",
        "timestamp": "1776798005",
        "to_ids": true,
        "type": "domain",
        "uuid": "25e87471-a0c9-4357-bdc0-4ce62cb79a6e",
        "value": "bsbdsbs.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:05+00:00",
        "timestamp": "1776798006",
        "to_ids": true,
        "type": "domain",
        "uuid": "0638f3a3-dfad-415f-a2ed-7e0813be1fe9",
        "value": "c3dxxvc234ef554f23c.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:06+00:00",
        "timestamp": "1776798006",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc12076c-e716-4bef-8f1d-0de01344751d",
        "value": "claude-code-info.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:06+00:00",
        "timestamp": "1776798006",
        "to_ids": true,
        "type": "domain",
        "uuid": "368063f2-7c4a-45c8-a113-2d6884c1b5e1",
        "value": "claude-code-main.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:06+00:00",
        "timestamp": "1776798006",
        "to_ids": true,
        "type": "domain",
        "uuid": "d04fc12e-d4f3-4044-8afe-11f3ae60d874",
        "value": "claudepage.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:06+00:00",
        "timestamp": "1776798006",
        "to_ids": true,
        "type": "domain",
        "uuid": "76e70d03-ea11-4927-92df-df904389c710",
        "value": "claufua.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:06+00:00",
        "timestamp": "1776798006",
        "to_ids": true,
        "type": "domain",
        "uuid": "edfb4d02-e5e4-4269-a2c1-909c5b4b4887",
        "value": "eragdkjsadga.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:06+00:00",
        "timestamp": "1776798007",
        "to_ids": true,
        "type": "domain",
        "uuid": "15284313-1a8e-4aef-95d4-ce872a8a5f85",
        "value": "fdfwasrgwrhfdgvwr.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:07+00:00",
        "timestamp": "1776798007",
        "to_ids": true,
        "type": "domain",
        "uuid": "267ea84d-2994-4f81-b284-b2643d59908f",
        "value": "fgwegweh.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:07+00:00",
        "timestamp": "1776798007",
        "to_ids": true,
        "type": "domain",
        "uuid": "a574889e-e0f1-458c-83f3-e835c8324106",
        "value": "fksf952-fsdkj1-weath1.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:07+00:00",
        "timestamp": "1776798007",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ec3771b-d98c-48e4-adc1-a054d6442f44",
        "value": "ghjkbhj.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:07+00:00",
        "timestamp": "1776798007",
        "to_ids": true,
        "type": "domain",
        "uuid": "54a95c46-5170-48c5-9bdf-808ede9d7c4f",
        "value": "hb8uu38hbx872bv28dbh29.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:07+00:00",
        "timestamp": "1776798007",
        "to_ids": true,
        "type": "domain",
        "uuid": "b035a7a9-a61b-4774-b969-d7af6b55eaad",
        "value": "jh893icndvbqw74bjchldl.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:07+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "47b99705-3484-45e5-8316-86ad72119006",
        "value": "natormcbjsdkmcsa.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:08+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "62f08156-f929-4d37-a5bf-342be078618a",
        "value": "new-csopcx4p6l-note.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:08+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "03d38335-332c-4d2c-a69c-d8ab84de29a1",
        "value": "nhb227nbx872bd6723g4d.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:08+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8ca6331-2094-4e81-a4e0-1bc42049098d",
        "value": "not-9rw.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:08+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0a11db0-9bc8-49a8-a40f-c8ada5d585a1",
        "value": "note-2knfq1qebv-notebook.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:08+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "81917e98-6174-403f-8d1e-0b1149c87dbf",
        "value": "note-8uv.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:08+00:00",
        "timestamp": "1776798008",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa694314-5867-4e2e-ae15-a0e7799d44ce",
        "value": "noteappbook.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798009",
        "to_ids": true,
        "type": "domain",
        "uuid": "22666543-afbe-4595-afa5-2ff904b43513",
        "value": "noteappncijskc.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798009",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe904590-a1c0-469c-b712-de927838da3f",
        "value": "notebook-dfb.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798009",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba0f8bb2-182f-4c3a-903b-4a6f2979b529",
        "value": "notebooklm-app-cg7.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798009",
        "to_ids": true,
        "type": "domain",
        "uuid": "99ea3fbf-9c6c-4143-9d2a-1b3ef1591828",
        "value": "notebooklm-app-site.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798009",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbc5c05b-95e7-4297-abde-b424a64237ae",
        "value": "notebooklm-info.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798009",
        "to_ids": true,
        "type": "domain",
        "uuid": "0802a5c1-9b4f-42fc-a22c-1c05c3a75cb1",
        "value": "notebooklm-page.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:09+00:00",
        "timestamp": "1776798010",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5b7b34f-8cd0-408a-9aaa-97d71b3ed8c6",
        "value": "noteone.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:10+00:00",
        "timestamp": "1776798010",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7a2cd8b-7cb6-4367-b532-589bb4b2a2b0",
        "value": "noteshbaerhwe.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:10+00:00",
        "timestamp": "1776798010",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e4156b8-52dd-4fea-bbc8-449d895cca46",
        "value": "notklmalans.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:10+00:00",
        "timestamp": "1776798010",
        "to_ids": true,
        "type": "domain",
        "uuid": "52dd304c-62a9-48b3-ba7c-081d9cd1fefa",
        "value": "project-note519201.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:10+00:00",
        "timestamp": "1776798010",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb83a1e7-f29a-4532-a3c1-80306f83d42e",
        "value": "sceqdsxcqdfcd.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:10+00:00",
        "timestamp": "1776798010",
        "to_ids": true,
        "type": "domain",
        "uuid": "f825b24c-23ce-4285-9ca6-68215890ac0a",
        "value": "uih9ehfbhdbfqudbfidfcikqhnegf.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:10+00:00",
        "timestamp": "1776798011",
        "to_ids": true,
        "type": "domain",
        "uuid": "f23c594d-77c5-42eb-9571-79d1a2adfecd",
        "value": "ymusic.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:11+00:00",
        "timestamp": "1776798011",
        "to_ids": false,
        "type": "url",
        "uuid": "a429381a-4fa6-4448-a3f1-bf8003adf5e1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a9bc47c488cee885a8136564cf25adaaf0b96103",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:11+00:00",
        "timestamp": "1776798011",
        "to_ids": true,
        "type": "domain",
        "uuid": "39a7e565-ba98-4d36-9d6f-6afc97792a31",
        "value": "gold-cazino-7k.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:11+00:00",
        "timestamp": "1776798011",
        "to_ids": false,
        "type": "url",
        "uuid": "e606a8ef-a271-4f1d-af08-e31c70eb712b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c95c0e830bf07a5835267c62cda23ddf3aa18a4e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:11+00:00",
        "timestamp": "1776798011",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6ec319f-b3dd-45bb-8448-0289741bef82",
        "value": "agidelgembee.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:11+00:00",
        "timestamp": "1776798011",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2e35577-19bd-4ff9-8dac-8518496b0d54",
        "value": "alldigipathplazz.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:11+00:00",
        "timestamp": "1776798012",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd4d842a-2e31-4cff-abb6-fdc302613809",
        "value": "babblelistwordtapplazu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:12+00:00",
        "timestamp": "1776798012",
        "to_ids": true,
        "type": "domain",
        "uuid": "98fa369d-8d17-41f9-aeba-bdbda9da9618",
        "value": "bestlivekey.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:12+00:00",
        "timestamp": "1776798012",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7d9e1dd-8d91-4a41-bcb2-048074e7278b",
        "value": "bestzkeyflowhub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:12+00:00",
        "timestamp": "1776798012",
        "to_ids": true,
        "type": "domain",
        "uuid": "78b8e74f-148e-44fd-b8d6-f50eb9febacb",
        "value": "bestzlivespace.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:12+00:00",
        "timestamp": "1776798012",
        "to_ids": true,
        "type": "domain",
        "uuid": "edba7ebe-4837-4a0f-9e01-8fd2800e2fea",
        "value": "bestznextpage.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:12+00:00",
        "timestamp": "1776798012",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d74c758-f6dd-437d-87b7-4163a3401d05",
        "value": "bestzonedomainzone.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:12+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcce4c3a-249e-49b4-84aa-5c2f31121393",
        "value": "bestzonelivekey.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:13+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8414828-cffa-4a7a-b996-416f366b5f36",
        "value": "bestzonereadpage.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:13+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f46d8c3-37ff-4486-aaec-d886043f24a3",
        "value": "bluexsmyfilesfambee.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:13+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "69dbdec7-4d4a-4a77-9120-23a89a6d6eb8",
        "value": "brightzonemilemilr.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:13+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b301d0c-20bc-4d8e-8d76-c74b8dbf9fa1",
        "value": "centiperiffboxmilr.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:13+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "facf8971-38a1-4571-a8af-2ab13253934f",
        "value": "chattertoolbrightjam.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:13+00:00",
        "timestamp": "1776798013",
        "to_ids": true,
        "type": "domain",
        "uuid": "27613374-02c1-45bd-bf47-893ac08150be",
        "value": "datavineinnocastsave.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:14+00:00",
        "timestamp": "1776798014",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e355fe7-03e3-47b8-81fc-5d66eff9c67b",
        "value": "datazoomaltblerzooyo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:14+00:00",
        "timestamp": "1776798014",
        "to_ids": true,
        "type": "domain",
        "uuid": "963749f8-9bc0-4eae-a45c-67120b8bf4f5",
        "value": "deylytekspaceici.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:14+00:00",
        "timestamp": "1776798014",
        "to_ids": true,
        "type": "domain",
        "uuid": "ade7dbc4-5bd3-4c08-ad6d-20a570296f3e",
        "value": "digipathinnoifyfare.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:14+00:00",
        "timestamp": "1776798014",
        "to_ids": true,
        "type": "domain",
        "uuid": "2af33b3e-9bbf-4370-bbf2-480131e573b8",
        "value": "digitalwarechatworks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:14+00:00",
        "timestamp": "1776798014",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b770fb2-f74a-404b-88db-049b78963884",
        "value": "eamiatambeefileupload.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:14+00:00",
        "timestamp": "1776798014",
        "to_ids": true,
        "type": "domain",
        "uuid": "b13c7dcf-003d-4378-8be2-f81f59601b2a",
        "value": "eaveecoinblabeilium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798015",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cfad12a-7905-44b7-912c-761d3b7f1f5f",
        "value": "fastbuzzlistchatterspotgoodlist.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798015",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3aa5612-0c03-49e5-9683-b374f0c9ef39",
        "value": "fastlistjabberboxvinu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798015",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b376a74-48ad-4aa8-b56c-5b3d53b9bd31",
        "value": "fastzonevootasaveee.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798015",
        "to_ids": true,
        "type": "domain",
        "uuid": "ddc0b22c-02a8-452f-8fe6-270cc9ab3c3e",
        "value": "flipdrivegembeeagidel.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798015",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f05341c-eb70-4497-b084-9a68dca974e4",
        "value": "gabstertagopiaici.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798015",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d198fe4-d917-4f65-b6a3-3616864ca809",
        "value": "geziofastboxjetfox.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:15+00:00",
        "timestamp": "1776798016",
        "to_ids": true,
        "type": "domain",
        "uuid": "b63fcfd3-49cd-445c-b409-0c442cc5cb25",
        "value": "goodlistgoodshotschatterspot.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:16+00:00",
        "timestamp": "1776798016",
        "to_ids": true,
        "type": "domain",
        "uuid": "8617ce5e-4a91-439b-a0ef-dabbda67ac93",
        "value": "icigabstertagopia.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:16+00:00",
        "timestamp": "1776798016",
        "to_ids": true,
        "type": "domain",
        "uuid": "4edb59f2-932f-41f1-a10a-d4246ceabcd4",
        "value": "instabeatleepesaveo.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:16+00:00",
        "timestamp": "1776798016",
        "to_ids": true,
        "type": "domain",
        "uuid": "0367d6d3-cf06-4f97-8c58-fa89922e6fd2",
        "value": "instamixsnapbridgeapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:16+00:00",
        "timestamp": "1776798016",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c1c5371-8ffb-4e8b-bd48-93db2e145f73",
        "value": "instawaregoodtagsfree.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:16+00:00",
        "timestamp": "1776798016",
        "to_ids": true,
        "type": "domain",
        "uuid": "d77e81e5-6ad7-4e70-9d81-5bde7cac489a",
        "value": "intelfastboxcore.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:16+00:00",
        "timestamp": "1776798017",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f516f44-58d3-4467-83bc-9bb84302a21c",
        "value": "jetdevcat.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:17+00:00",
        "timestamp": "1776798017",
        "to_ids": true,
        "type": "domain",
        "uuid": "afadc25f-d503-4e2f-93fb-98afee4008a5",
        "value": "jetfoxgeziofastbox.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:17+00:00",
        "timestamp": "1776798017",
        "to_ids": true,
        "type": "domain",
        "uuid": "425b3e03-d960-4e7e-bbb2-2afd3cabeda9",
        "value": "justbitsetzoofieicero.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:17+00:00",
        "timestamp": "1776798017",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b956ef3-7d4e-4ebc-83f6-0ccaf9b4167f",
        "value": "justgoodshotsgoodlist.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:17+00:00",
        "timestamp": "1776798017",
        "to_ids": true,
        "type": "domain",
        "uuid": "00ac1658-2d15-4901-98d8-5d3aa90abe8c",
        "value": "justtanuskipmint.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:17+00:00",
        "timestamp": "1776798017",
        "to_ids": true,
        "type": "domain",
        "uuid": "71f42911-88b7-4b7d-8ac8-3cd62fd984a5",
        "value": "keylearnspace.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:17+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "11c37b4f-c994-49a7-b5eb-a7a21299b7f8",
        "value": "keyrealbestzone.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:18+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "d56bbf79-de7a-46f1-8373-8c5c21753db6",
        "value": "keyrealclub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:18+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "e095c96f-248d-406b-a871-1aa0f28e81cf",
        "value": "lambuwaytubebrainfile.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:18+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "efcafa88-235d-4f4b-8fd1-c84ba0c86f2e",
        "value": "learnbestzclub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:18+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b851c2e-e2af-4211-880e-24db177eaa7a",
        "value": "learnkeybestz.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:18+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "35a5aa7d-3403-4929-84c9-a6213c721165",
        "value": "learnnextpage.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:18+00:00",
        "timestamp": "1776798018",
        "to_ids": true,
        "type": "domain",
        "uuid": "bca15946-d6a3-43b4-9a8e-c0e3ee6a16ad",
        "value": "learnrealbestz.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798019",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c459aee-1465-4322-aac8-aa94f2b9bf6f",
        "value": "learnzonekeylink.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798019",
        "to_ids": true,
        "type": "domain",
        "uuid": "75a84675-aac6-40d6-94b3-3e88f58545b5",
        "value": "learnzonepagehub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798019",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cca884e-0a98-4fc6-8ff8-0416749b046c",
        "value": "livekeyspace.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798019",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0c79a34-669a-4647-88c9-77a90c28be6f",
        "value": "livepagezone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798019",
        "to_ids": true,
        "type": "domain",
        "uuid": "53573c88-c010-420c-8042-dd7977dae646",
        "value": "livespacecore.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798019",
        "to_ids": true,
        "type": "domain",
        "uuid": "106863b0-d9a7-4c76-a948-0498d67fe9a7",
        "value": "livespacecorezone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:19+00:00",
        "timestamp": "1776798020",
        "to_ids": true,
        "type": "domain",
        "uuid": "eeee5854-72cf-4e7e-b511-ef116efacf0a",
        "value": "livespacenextzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:20+00:00",
        "timestamp": "1776798020",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a952edf-431b-48e2-bc56-0e1d76381549",
        "value": "livetabgeziojetfox.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:20+00:00",
        "timestamp": "1776798020",
        "to_ids": true,
        "type": "domain",
        "uuid": "82100728-1b0b-407c-b826-8cc61940755a",
        "value": "livetabintelfastbox.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:20+00:00",
        "timestamp": "1776798020",
        "to_ids": true,
        "type": "domain",
        "uuid": "167b6c2b-787a-4693-aba8-c766f16b4f3b",
        "value": "livezonebestz.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:20+00:00",
        "timestamp": "1776798020",
        "to_ids": true,
        "type": "domain",
        "uuid": "737cf3a8-221e-4eb8-a894-d6d5c816dd5d",
        "value": "monsterskinusa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:20+00:00",
        "timestamp": "1776798020",
        "to_ids": true,
        "type": "domain",
        "uuid": "b41eb54e-2627-4a2f-8ca1-393ace520d6b",
        "value": "nextzonelivebest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:20+00:00",
        "timestamp": "1776798021",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b7dead7-8155-4b20-97c7-e6468853304f",
        "value": "oyogendatablab.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:21+00:00",
        "timestamp": "1776798021",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa6ff191-8f18-4600-ba0a-97f9d562d68f",
        "value": "pagebestzoneread.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:21+00:00",
        "timestamp": "1776798021",
        "to_ids": true,
        "type": "domain",
        "uuid": "21fb40e8-0a6f-4797-aa6f-54297e07105e",
        "value": "pagelearnnext.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:21+00:00",
        "timestamp": "1776798021",
        "to_ids": true,
        "type": "domain",
        "uuid": "d69faf18-6ca5-4d25-a984-38a00198ea79",
        "value": "pagezonelearn.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:21+00:00",
        "timestamp": "1776798021",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed320335-4438-4dd5-a46e-57922a96b636",
        "value": "plagensnapmarkjabberwire.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:21+00:00",
        "timestamp": "1776798021",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e72016b-167b-4171-b3b3-0ddb1e364e5f",
        "value": "podpediamydriveeafy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:21+00:00",
        "timestamp": "1776798022",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c6acc75-785b-4fa5-bd0b-d2712d1e912e",
        "value": "powergoodlistbuzzlistgoodshots.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:22+00:00",
        "timestamp": "1776798022",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e6acd17-bee5-4814-b3af-bdbe6863a899",
        "value": "powericitekspace.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:22+00:00",
        "timestamp": "1776798022",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4e5ebad-b4e6-4aab-a072-48bd3afcbd45",
        "value": "powerzoofibitseteicero.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:22+00:00",
        "timestamp": "1776798022",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf0f7dc8-0975-4e3f-b810-d1aa99755c3f",
        "value": "pullzone.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:22+00:00",
        "timestamp": "1776798022",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f32a7e1-2a05-4bc5-8f9f-ac93da30ebbe",
        "value": "ratingyammjambo.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:22+00:00",
        "timestamp": "1776798022",
        "to_ids": true,
        "type": "domain",
        "uuid": "edec32df-c0db-4e45-8699-e80ac0ac8759",
        "value": "realagideltopictube.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:22+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6a79ae4-c577-4a82-81ea-e21e5fe748df",
        "value": "realbestzclub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "33ac1d34-811a-4824-a183-25c0a4abb16e",
        "value": "realbestzkey.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cfd2a88-18ad-4539-ae15-55a678c06376",
        "value": "realclubbestz.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ad7e2eb-49f9-4c50-a812-aa2d9c8677a4",
        "value": "realclubzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "c928b93d-2f59-4f1c-871f-15a8fb965e29",
        "value": "realcubeoyogenmyfire.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "9daa846d-646b-49c9-89ab-27f63148d037",
        "value": "recognizecentibox.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798023",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a86dbbb-349e-4042-a179-8380b25460e6",
        "value": "rhyvuvooziolinktype.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:23+00:00",
        "timestamp": "1776798024",
        "to_ids": true,
        "type": "domain",
        "uuid": "252dffc9-b2d1-4d5f-9868-06fc8f1cf44d",
        "value": "seocastgabtoolsnew.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:24+00:00",
        "timestamp": "1776798024",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca6bbb92-c789-40d5-89ea-ea9fb0acb9f2",
        "value": "skinduvizzybrainverse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:24+00:00",
        "timestamp": "1776798024",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3f1ce37-105d-482a-af98-bc217e55f28d",
        "value": "snapmixavanyxyouverse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:24+00:00",
        "timestamp": "1776798024",
        "to_ids": true,
        "type": "domain",
        "uuid": "39da3b16-2be2-4c58-bbac-0ef098bfe1d2",
        "value": "spacekeyreal.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:24+00:00",
        "timestamp": "1776798024",
        "to_ids": true,
        "type": "domain",
        "uuid": "53e917d0-8a82-4088-929b-1ca53478f5a6",
        "value": "spacezonepage.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:24+00:00",
        "timestamp": "1776798024",
        "to_ids": true,
        "type": "domain",
        "uuid": "16651020-fb12-4f63-a0d2-faf12e4c6464",
        "value": "tanudevcatrealspot.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:24+00:00",
        "timestamp": "1776798025",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fe40168-03fa-4a85-b165-a0fcc4d6a992",
        "value": "truefareinnoify.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:25+00:00",
        "timestamp": "1776798025",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdd181e5-1133-4d46-8368-b7a5191606c9",
        "value": "trueflipdriveagidel.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:25+00:00",
        "timestamp": "1776798025",
        "to_ids": true,
        "type": "domain",
        "uuid": "c144dde8-a70c-4761-b7ec-d6c93b5eaf62",
        "value": "trustpull.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:25+00:00",
        "timestamp": "1776798025",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa23bb11-4a4c-469d-95e3-af370e515c6d",
        "value": "truvagentibrowsepulse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:25+00:00",
        "timestamp": "1776798025",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b82c2bf-5493-45a0-b64f-1cf874387b0c",
        "value": "verifiedpipe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:25+00:00",
        "timestamp": "1776798025",
        "to_ids": true,
        "type": "domain",
        "uuid": "bac0adb9-d03f-4b0a-b0f7-fba897a863f1",
        "value": "waytaplivepad.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:25+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bc7924f-ee6d-4d65-bf87-0269bbab3f5f",
        "value": "wikidootagvinesoft.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:26+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "53989403-4037-4389-a0fa-404694e3f61d",
        "value": "wikilooblogtuneapp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:26+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "a70a01d1-e0d3-4cdc-af2c-358fbf879aed",
        "value": "wikiyoquitrirealapp.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:26+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "00169312-f12e-4c79-9541-f3427606c8c8",
        "value": "wordbotquimmdivaneapp.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:26+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "1aadd65d-1e49-48ad-8d5e-9aa7120de590",
        "value": "yamminboxtrack.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:26+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba12d267-1055-4bc4-83a7-dbd71ba18b7f",
        "value": "zonedomainlivekey.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:26+00:00",
        "timestamp": "1776798026",
        "to_ids": true,
        "type": "domain",
        "uuid": "08b9171f-f624-4a79-b5d3-6f43dc779091",
        "value": "zonepagebest.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798027",
        "to_ids": true,
        "type": "domain",
        "uuid": "7bceb779-68f9-4da7-b0d9-a030466c325d",
        "value": "zoofieiceroseoware.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798027",
        "to_ids": false,
        "type": "url",
        "uuid": "7271e280-28fb-4882-be91-a46639e577d5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/4302f8611132af273af747644d92598764d9ab3a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798027",
        "to_ids": true,
        "type": "domain",
        "uuid": "cafde2e5-060c-46c3-9d4e-d9bcfa4dc61a",
        "value": "bestzclublearn.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798027",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbb48109-f720-410c-ac94-c42ef30bd130",
        "value": "bestzlearnhub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798027",
        "to_ids": true,
        "type": "domain",
        "uuid": "576fd6a1-6a61-494e-91b9-2415008ea110",
        "value": "bestzlearnkeyzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798027",
        "to_ids": true,
        "type": "domain",
        "uuid": "fed0cefe-11ea-4dd5-b35a-a70b9e85ecd5",
        "value": "bestzlearnzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:27+00:00",
        "timestamp": "1776798028",
        "to_ids": true,
        "type": "domain",
        "uuid": "eaa85f0c-bd94-4f4b-808c-25f4d7b7dc56",
        "value": "bestzlivecorezone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:28+00:00",
        "timestamp": "1776798028",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1122eac-98fc-469c-9e8a-1c0c039051dd",
        "value": "bestzlivehubspace.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:28+00:00",
        "timestamp": "1776798028",
        "to_ids": true,
        "type": "domain",
        "uuid": "dca09d38-992a-4cea-8800-0e3d7ccb0d19",
        "value": "bestzrealpage.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:28+00:00",
        "timestamp": "1776798028",
        "to_ids": true,
        "type": "domain",
        "uuid": "f22a8b68-990b-4abb-a57b-4bee671f7200",
        "value": "bestzrealpagehub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:28+00:00",
        "timestamp": "1776798028",
        "to_ids": true,
        "type": "domain",
        "uuid": "295af4ac-f6ca-4af2-bde0-0f2d4f8a2862",
        "value": "keylearncorebase.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:28+00:00",
        "timestamp": "1776798028",
        "to_ids": true,
        "type": "domain",
        "uuid": "156d65e6-8819-4bd2-95e0-4a87067a84ed",
        "value": "keyspaceclub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:28+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8c504a9-e77d-4046-9211-a054b3517b8c",
        "value": "keyzonelearnspace.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:29+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "baa92e62-520f-47e7-b645-fd050969bf6f",
        "value": "learnkeybestpage.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:29+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcd0c438-f321-46cc-af13-10dd93a35aa5",
        "value": "learnkeypage.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:29+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eea2234-baab-4d01-944f-558aed4d4334",
        "value": "learnpageflow.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:29+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "00ddc839-0fd6-4304-9e84-fe280c2328ff",
        "value": "learnpageflowhub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:29+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "10f4e079-9817-43f1-bdae-e852b2331e51",
        "value": "learnzonebest.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:29+00:00",
        "timestamp": "1776798029",
        "to_ids": true,
        "type": "domain",
        "uuid": "3657ebe4-5962-4093-9570-6a8797dab3e2",
        "value": "livebestzzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798030",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f61bae3-9562-4906-8eea-7acdc57903d4",
        "value": "livekeyzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798030",
        "to_ids": true,
        "type": "domain",
        "uuid": "65193b0e-ba13-40fb-b8d2-c41045a1db75",
        "value": "livekeyzoneflow.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798030",
        "to_ids": true,
        "type": "domain",
        "uuid": "25820ab8-cb20-4adc-891d-1cd1428469ee",
        "value": "livespacenext.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798030",
        "to_ids": true,
        "type": "domain",
        "uuid": "50cfd028-61d4-4b81-accb-1009edcbbbd3",
        "value": "pagekeylearnplus.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798030",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb4129e8-bae1-4a9b-9406-4ef84d5afea0",
        "value": "pagelearnhub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798030",
        "to_ids": true,
        "type": "domain",
        "uuid": "709b0720-b960-44ee-979a-cbdf51859b7e",
        "value": "pagelearnnextcore.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:30+00:00",
        "timestamp": "1776798031",
        "to_ids": true,
        "type": "domain",
        "uuid": "83f01866-862b-4c4d-82c2-9f9934112a6c",
        "value": "pagezonekey.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:31+00:00",
        "timestamp": "1776798031",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bb897e9-e852-423f-bd4b-741eea283fb1",
        "value": "realclublearnbest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:31+00:00",
        "timestamp": "1776798031",
        "to_ids": true,
        "type": "domain",
        "uuid": "50371c68-3aa8-4f76-9324-0afe2df7d0fb",
        "value": "realpageclub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:31+00:00",
        "timestamp": "1776798031",
        "to_ids": true,
        "type": "domain",
        "uuid": "7527875c-ca97-4c86-9511-5ff03ba4b500",
        "value": "spaceclubzone.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:31+00:00",
        "timestamp": "1776798031",
        "to_ids": true,
        "type": "domain",
        "uuid": "810657c1-a14b-4322-a3d7-359de90b2a22",
        "value": "zonelivepage.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T19:00:31+00:00",
        "timestamp": "1776798031",
        "to_ids": true,
        "type": "domain",
        "uuid": "10e4c01b-f598-4952-9393-cbc6c1edc585",
        "value": "zonerealhub.monster",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phantom",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T20:00:03+00:00",
        "timestamp": "1776801605",
        "to_ids": false,
        "type": "url",
        "uuid": "ddef6a3c-8761-4fce-8bd7-1a7b18f75480",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2be6874404331e503f0f1e3fa3674f37e5e8a391",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phantom",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T20:00:05+00:00",
        "timestamp": "1776801605",
        "to_ids": false,
        "type": "url",
        "uuid": "5692b991-6de3-4f1a-8a34-f64cb9703cd5",
        "value": "https://tria.ge/260421-xec83aax6r/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "phantom",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T20:00:05+00:00",
        "timestamp": "1776801606",
        "to_ids": false,
        "type": "url",
        "uuid": "338c8d01-89c8-47c6-b6ca-278ae468b0e1",
        "value": "https://www.virustotal.com/gui/file/c023166a028773efc229e5d4a052fd768d356f7674bc57de91169b9c47bcae55/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phantom",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T20:00:06+00:00",
        "timestamp": "1776801606",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c746f376-9268-4ce9-82a3-5c57e358f46f",
        "value": "109.73.128.91",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phantom",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T20:00:07+00:00",
        "timestamp": "1776801607",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a48738c-bb97-4bf2-ba57-6bcaf2d1c0e7",
        "value": "corella.ro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "phantom",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T20:00:07+00:00",
        "timestamp": "1776801607",
        "to_ids": true,
        "type": "domain",
        "uuid": "39a3cca5-1fd0-423d-8d4c-db583a5dd9fd",
        "value": "ftp.corella.ro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "aiolosrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:03+00:00",
        "timestamp": "1776805203",
        "to_ids": false,
        "type": "url",
        "uuid": "6e251e6e-d275-4325-b1bc-79f46180a5b7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2a234d9e7295fd290de16155afe8529c5a9283f8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "aiolosrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:03+00:00",
        "timestamp": "1776805204",
        "to_ids": false,
        "type": "url",
        "uuid": "b2f851bd-ff9e-4aea-8f43-a0da1394a561",
        "value": "https://x.com/smica83/status/2046686512775876928",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "aiolosrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:04+00:00",
        "timestamp": "1776805204",
        "to_ids": false,
        "type": "url",
        "uuid": "74d9a062-5f84-4d1f-9ebb-74e6746f29f4",
        "value": "https://tria.ge/260421-y5c7esbw8m/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "aiolosrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:04+00:00",
        "timestamp": "1776805204",
        "to_ids": false,
        "type": "url",
        "uuid": "bd6c9480-efd5-4db5-8da2-d3e84346818c",
        "value": "https://www.virustotal.com/gui/file/6a72e4207de732fdb7d1ff9795d2ce10ec08571c9ff32bf0ae02a9464f484f7c/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "aiolosrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:04+00:00",
        "timestamp": "1776805204",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c810390-355e-4bd7-a58f-e573be5b0b54",
        "value": "dailyroutineanimes.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "aiolosrat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:04+00:00",
        "timestamp": "1776805204",
        "to_ids": true,
        "type": "domain",
        "uuid": "79ad6127-7628-4883-aa3c-d44577934bc3",
        "value": "main.dailyroutineanimes.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:04+00:00",
        "timestamp": "1776805204",
        "to_ids": false,
        "type": "url",
        "uuid": "5c603267-ba75-474d-adef-53473e47fe84",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/1904a57f550a90f4a9ec55935f46f7d6ee3d9ba0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:05+00:00",
        "timestamp": "1776805205",
        "to_ids": false,
        "type": "url",
        "uuid": "cdf7a262-5fa3-4064-bf8c-cd9e1fbc1712",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/30db1e5c02a2439511e31c0e43972e1f604992d6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:05+00:00",
        "timestamp": "1776805206",
        "to_ids": false,
        "type": "url",
        "uuid": "ee074b2b-81a4-41ac-9a25-27920f5cb960",
        "value": "https://x.com/JAMESWT_WT/status/2046608181007122909",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:06+00:00",
        "timestamp": "1776805206",
        "to_ids": false,
        "type": "url",
        "uuid": "075c4bc9-0996-422f-bc21-58c54df6b994",
        "value": "https://app.any.run/tasks/3a314b61-93ff-4a4f-961d-be79029a4593",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:06+00:00",
        "timestamp": "1776805206",
        "to_ids": true,
        "type": "domain",
        "uuid": "d921b87a-4043-4de2-95a1-2ae29d5625fb",
        "value": "apoliw.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:06+00:00",
        "timestamp": "1776805206",
        "to_ids": true,
        "type": "domain",
        "uuid": "7eb6f4ec-9397-4752-821b-624356895804",
        "value": "attireecommerce.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:06+00:00",
        "timestamp": "1776805206",
        "to_ids": true,
        "type": "domain",
        "uuid": "a04f7d6d-3839-4335-abdf-015f8beed8af",
        "value": "fctkyin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:06+00:00",
        "timestamp": "1776805206",
        "to_ids": true,
        "type": "domain",
        "uuid": "745e9a1d-20f5-468b-8b0e-ef8b316fb31d",
        "value": "kaverimetalalloys.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:06+00:00",
        "timestamp": "1776805207",
        "to_ids": true,
        "type": "domain",
        "uuid": "10af759f-09a7-491a-a4f2-367c93b8ab76",
        "value": "muncut.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:07+00:00",
        "timestamp": "1776805207",
        "to_ids": true,
        "type": "domain",
        "uuid": "6feea161-192a-4880-976b-3f46ad476c38",
        "value": "onlinecontentads.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "formbook",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-21T21:00:07+00:00",
        "timestamp": "1776805207",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb15976d-fb44-4b46-a60b-bcf91c9af6d9",
        "value": "sarmaliinsaat.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}