{
  "Event": {
    "analysis": "1",
    "date": "2026-04-27",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-04-28",
    "publish_timestamp": "1777413608",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1777413607",
    "uuid": "b386637f-dd0a-4e97-ba8e-911ad76270d5",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:19+00:00",
        "timestamp": "1777395619",
        "to_ids": false,
        "type": "url",
        "uuid": "dbc53c64-92b5-48ce-801e-2adb168a79b2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/a27a43de0d00cfde69e0e686a6f69ba6c5d4de84",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:19+00:00",
        "timestamp": "1777395619",
        "to_ids": false,
        "type": "url",
        "uuid": "8a8b85ca-c077-497d-9a50-b4721e7ff8e4",
        "value": "https://x.com/suyog41/status/2049003157532115232",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:19+00:00",
        "timestamp": "1777395619",
        "to_ids": false,
        "type": "url",
        "uuid": "5c784195-8140-4c1e-bca0-689519686be1",
        "value": "https://www.virustotal.com/gui/file/8f91252d4ac62ce03680f9d945b453cc95934c5b5878c0022fc5e9f3e72530b2/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:20+00:00",
        "timestamp": "1777395620",
        "to_ids": true,
        "type": "domain",
        "uuid": "c14a6c44-f2c7-4e96-9fe0-98df6c2e9a6c",
        "value": "mysaltwaterhome.screenconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "connectwise",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:20+00:00",
        "timestamp": "1777395620",
        "to_ids": true,
        "type": "domain",
        "uuid": "57f21895-d312-47af-b906-6e0286dd9d59",
        "value": "server-ovh30010055-web.screenconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:20+00:00",
        "timestamp": "1777395620",
        "to_ids": false,
        "type": "url",
        "uuid": "f2c0233a-dc2d-4136-a83a-20c8bc6c9fd6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b152c89d0ef575d873a0b7239d454f3dc35ff70f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:20+00:00",
        "timestamp": "1777395620",
        "to_ids": false,
        "type": "url",
        "uuid": "54f9f402-7d1d-4847-b2b9-e80c15793e57",
        "value": "https://x.com/suyog41/status/2049098438089073128",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:20+00:00",
        "timestamp": "1777395620",
        "to_ids": false,
        "type": "url",
        "uuid": "e48105c3-0dd9-4467-88d5-2d55831b5fd1",
        "value": "https://www.virustotal.com/gui/file/2936ed377af3292ac35d98d433523002691ac1dd50151c93fc58c6a4161cee88/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:20+00:00",
        "timestamp": "1777395621",
        "to_ids": true,
        "type": "domain",
        "uuid": "9737fe6f-deed-4ce0-8e0f-59e38d969d6b",
        "value": "glowmedaesthetics.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:21+00:00",
        "timestamp": "1777395621",
        "to_ids": false,
        "type": "url",
        "uuid": "4f43cb02-6667-408f-a37d-a45670d2e163",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ffe46b842ab89ad4c7d3c975cfe4a370ba4dade6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "santa",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:21+00:00",
        "timestamp": "1777395621",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0637ed2-5cf6-44f3-b7de-ce3a3063a2aa",
        "value": "cosmic-nebula.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "mintsloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:21+00:00",
        "timestamp": "1777395621",
        "to_ids": false,
        "type": "url",
        "uuid": "b8794c86-a3eb-4209-afe5-0db265a19354",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5641153e2d334684a8fcfe37a5f2bc9dc931c72d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "mintsloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:21+00:00",
        "timestamp": "1777395621",
        "to_ids": true,
        "type": "domain",
        "uuid": "35b31016-894c-4604-b3cb-0578367b077e",
        "value": "theater-reward.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:21+00:00",
        "timestamp": "1777395622",
        "to_ids": false,
        "type": "url",
        "uuid": "26dd5f37-453f-482b-af09-70c440e96694",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5941c7d510b66bf7057671f53fd36407ec71fff5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_donot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T17:00:22+00:00",
        "timestamp": "1777395622",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4386200-54ae-46c2-b93b-cbd5b580622d",
        "value": "shadoworkz.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:04+00:00",
        "timestamp": "1777399205",
        "to_ids": false,
        "type": "url",
        "uuid": "1c0eee4c-f5e4-42f2-9eac-bd7a2e1e63ec",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3ea37650033ec7bacedd88ca350ac83599c84753",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:05+00:00",
        "timestamp": "1777399205",
        "to_ids": false,
        "type": "url",
        "uuid": "45a049e1-af40-4bf4-a2fe-b883112a5fb3",
        "value": "https://x.com/malwrhunterteam/status/2049068289607737541",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:05+00:00",
        "timestamp": "1777399205",
        "to_ids": false,
        "type": "url",
        "uuid": "5e6c2d5e-8359-4b8f-b3d9-d780418e7cb8",
        "value": "https://x.com/malwrhunterteam/status/2049069126254030995",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:05+00:00",
        "timestamp": "1777399206",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bb0b79fb-a8d2-4d21-88af-1f3280231167",
        "value": "70.34.205.43",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:06+00:00",
        "timestamp": "1777399206",
        "to_ids": false,
        "type": "url",
        "uuid": "1c4fc2cb-a8d7-4bc4-8a77-d5dce3403b80",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/426cd7b9365707a985788ef3bb541db761c732cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:06+00:00",
        "timestamp": "1777399206",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee2a9134-e0f1-43e2-8213-084c748a7702",
        "value": "screenly.cam",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:06+00:00",
        "timestamp": "1777399206",
        "to_ids": false,
        "type": "url",
        "uuid": "7f79c687-852b-4bd3-8af1-8afa5c9785ef",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f5ac3df2af7e999ec7d14f7cfaf314a004308388",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:06+00:00",
        "timestamp": "1777399206",
        "to_ids": false,
        "type": "url",
        "uuid": "b0aa00e5-67cf-4960-898e-59155ce07ef1",
        "value": "https://x.com/i/status/2049068289607737541",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:06+00:00",
        "timestamp": "1777399207",
        "to_ids": true,
        "type": "domain",
        "uuid": "b00288f6-ad10-4294-9509-22fd65c80d1e",
        "value": "fabolouspanels.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:07+00:00",
        "timestamp": "1777399207",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e9ae3e5-47ee-401d-930a-89634dc85c77",
        "value": "paysolutions.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:07+00:00",
        "timestamp": "1777399207",
        "to_ids": true,
        "type": "domain",
        "uuid": "6da3c5bd-9fc9-4cfd-8978-60d7a6c1b670",
        "value": "xtrafftrck.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:07+00:00",
        "timestamp": "1777399207",
        "to_ids": false,
        "type": "url",
        "uuid": "6ddd4cba-01ee-43c3-8bdf-5e10be61c09d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f300e8f39abff1cb9f979f823cdf54d38ba6401c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:07+00:00",
        "timestamp": "1777399207",
        "to_ids": false,
        "type": "url",
        "uuid": "1fad1544-5dc5-412d-aafe-4f0e4c2b2ed9",
        "value": "https://x.com/malwrhunterteam/status/2049177426706481303",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:07+00:00",
        "timestamp": "1777399207",
        "to_ids": false,
        "type": "url",
        "uuid": "6219c8b7-13d5-44f3-aea7-eba40f3cea29",
        "value": "https://www.virustotal.com/gui/file/6ecb67bebce635ef12428803015b06586d1cfe5519504baefc3cc0b927b85699/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:07+00:00",
        "timestamp": "1777399208",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "61301547-0e55-49a3-9e8d-c9455d8345cc",
        "value": "43.139.81.96",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_mirai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:08+00:00",
        "timestamp": "1777399208",
        "to_ids": true,
        "type": "domain",
        "uuid": "30b1aa8a-8155-4ac5-83aa-7347a616468d",
        "value": "scp749.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:08+00:00",
        "timestamp": "1777399208",
        "to_ids": false,
        "type": "url",
        "uuid": "c93326b9-6c10-4fe6-b609-7a0524666bd1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9ef9078cb4c7b953fad34c06939d11f0b8c75c7b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:08+00:00",
        "timestamp": "1777399208",
        "to_ids": false,
        "type": "url",
        "uuid": "d92064d7-e807-4377-ae4f-cab366bc059f",
        "value": "https://x.com/L0Psec/status/2049158325372125450",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:08+00:00",
        "timestamp": "1777399208",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e00dc2e2-4002-4435-b4a4-b734a30676a3",
        "value": "148.251.11.208",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:08+00:00",
        "timestamp": "1777399208",
        "to_ids": true,
        "type": "domain",
        "uuid": "a963d502-9638-4b58-9e0c-8ea9c8a5252b",
        "value": "faulttolerantdigitalengine.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:08+00:00",
        "timestamp": "1777399208",
        "to_ids": false,
        "type": "url",
        "uuid": "df1eee7b-ccf3-4b83-8d87-a14443ae314f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/bb1ea7ef420267f81b53c7439875e1f79c2a4c33",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399209",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac87427d-c72e-459e-b254-6c84f44d7b85",
        "value": "coolkshop-scrences.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399209",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d29435b-4288-4a88-89b6-377d6eb4f8a4",
        "value": "gotrack.seniorsorbit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399209",
        "to_ids": true,
        "type": "domain",
        "uuid": "b010dd55-01f1-44aa-a8bc-a7928c650f9d",
        "value": "meetmeup.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399209",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba5e8842-6bd7-4c1f-bd7f-759321094bc1",
        "value": "seniorsorbit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399209",
        "to_ids": true,
        "type": "domain",
        "uuid": "e485c659-a853-42fe-b923-16d93db3818c",
        "value": "track.meetmeup.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399209",
        "to_ids": false,
        "type": "url",
        "uuid": "c5d9221a-8ad8-460a-9428-41dc75b1b1c5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3d880561c908e031e81ba6491957ecb1bd253964",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:09+00:00",
        "timestamp": "1777399210",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0aac4799-bb0c-4ada-a2db-301f135bffac",
        "value": "110.40.171.61",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:10+00:00",
        "timestamp": "1777399210",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b515af8b-7d2e-4acc-bced-16866f3bd2ad",
        "value": "144.172.117.57",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:10+00:00",
        "timestamp": "1777399210",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "2ff0f307-32f6-4f17-ac00-5b24c5668d16",
        "value": "163.7.6.60",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:10+00:00",
        "timestamp": "1777399210",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e4758f2e-54ec-472b-9b4e-5663eba3ff75",
        "value": "180.97.215.181",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:10+00:00",
        "timestamp": "1777399210",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "61adf3bf-cc8c-463d-b226-ac277705d40c",
        "value": "187.124.51.55",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:10+00:00",
        "timestamp": "1777399210",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ed160f89-41ec-4b1f-b748-c43d032c5aca",
        "value": "47.79.234.34",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:10+00:00",
        "timestamp": "1777399211",
        "to_ids": false,
        "type": "url",
        "uuid": "a711baad-c6cf-4d55-b482-6e02935ff87c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f3b8a42b68e54db9a78c9c4f8065fd2312f250fb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:11+00:00",
        "timestamp": "1777399211",
        "to_ids": true,
        "type": "domain",
        "uuid": "b16861b8-f1fb-435d-9f23-f2eda73bfab0",
        "value": "amanhje.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:11+00:00",
        "timestamp": "1777399211",
        "to_ids": true,
        "type": "domain",
        "uuid": "edeee6c8-a6dc-4a0e-be45-ce5a2181172d",
        "value": "ebaghe.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:11+00:00",
        "timestamp": "1777399211",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4f33a4c-dd4d-46bb-a463-c4d1481910b2",
        "value": "sukjet.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:11+00:00",
        "timestamp": "1777399211",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb9a100d-f277-4c19-8b7f-eb252d2b7306",
        "value": "tetnma.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:11+00:00",
        "timestamp": "1777399211",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bbb8c5d-3446-48c8-9d04-b7f5bcb62732",
        "value": "vebger.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:11+00:00",
        "timestamp": "1777399212",
        "to_ids": true,
        "type": "domain",
        "uuid": "400c24e2-e78f-448e-af5b-e8df4eebae8e",
        "value": "vehaje.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T18:00:12+00:00",
        "timestamp": "1777399212",
        "to_ids": true,
        "type": "domain",
        "uuid": "22c1a1a7-39c9-4431-a768-a26a9c0d230e",
        "value": "wmjika.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "qatar",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T19:00:03+00:00",
        "timestamp": "1777402804",
        "to_ids": false,
        "type": "url",
        "uuid": "e02074e3-d20b-404a-b3f7-1c4f0f345772",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/85f4400ae5fb2fef82f3a95197456c44e43235fb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "qatar",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T19:00:04+00:00",
        "timestamp": "1777402804",
        "to_ids": false,
        "type": "url",
        "uuid": "a29863b0-be41-46d1-b976-0de72c046efe",
        "value": "https://x.com/solostalking/status/2048988205882732888",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "qatar",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T19:00:05+00:00",
        "timestamp": "1777402805",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8a67c7ff-a88f-4e32-b5af-dd94d0d61f07",
        "value": "217.145.227.150",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T19:00:05+00:00",
        "timestamp": "1777402805",
        "to_ids": false,
        "type": "url",
        "uuid": "c57f78c8-b7d6-4613-a16a-93d6be0c3ba7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/154fdf13317f3d664cbf9cf6f0b0e21c201d19f1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T19:00:05+00:00",
        "timestamp": "1777402805",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6895cd6-fd42-4975-9918-03c0726cd242",
        "value": "lyingapy.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:06+00:00",
        "timestamp": "1777406406",
        "to_ids": false,
        "type": "url",
        "uuid": "216a8943-7358-4b40-bb88-c9274e317530",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/3b499b489c8450542065c0f656774b561bc8d06f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:06+00:00",
        "timestamp": "1777406406",
        "to_ids": false,
        "type": "url",
        "uuid": "f7defbfb-90d8-4392-9f1d-c6e5908281be",
        "value": "https://x.com/Cyberteam008/status/2048596656141340906",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:07+00:00",
        "timestamp": "1777406407",
        "to_ids": false,
        "type": "url",
        "uuid": "0f770b1b-ddde-4f2a-9548-cf269798c137",
        "value": "https://www.virustotal.com/gui/file/e032080c5afeb99bd8bd87e3f68d2b655162a90a78d1207ec12bc0e81563a077/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:07+00:00",
        "timestamp": "1777406407",
        "to_ids": false,
        "type": "url",
        "uuid": "c51de50f-8bf6-4392-8d3e-3ff9b7e600db",
        "value": "https://www.virustotal.com/gui/file/159c47db6c9a162c47167ff4d9ebb892e44acf946c95aaad0ec49935627844fc/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:07+00:00",
        "timestamp": "1777406407",
        "to_ids": true,
        "type": "domain",
        "uuid": "442e40ff-d1b8-4cbc-b0db-ee363b57bb05",
        "value": "direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:07+00:00",
        "timestamp": "1777406407",
        "to_ids": true,
        "type": "domain",
        "uuid": "89a644f4-7980-4ea6-bcf5-3e5439c11d89",
        "value": "geneva-mofa-gov-bd.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:07+00:00",
        "timestamp": "1777406407",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fc50767-6e47-4a0e-bb4d-9850f851e721",
        "value": "mofa-go-np.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:08+00:00",
        "timestamp": "1777406408",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cd7240b-3a2a-4b92-b69f-7efe4fb187e5",
        "value": "mofa-gov-np.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:08+00:00",
        "timestamp": "1777406408",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc445262-3c2c-4930-a1cb-fe44d4c02ff6",
        "value": "pakun-org.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:08+00:00",
        "timestamp": "1777406408",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fea22c8-5350-45fc-8db4-6c006ca52ea2",
        "value": "wg.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:08+00:00",
        "timestamp": "1777406408",
        "to_ids": true,
        "type": "domain",
        "uuid": "44c72c80-914f-408c-a1cf-8c623a56345f",
        "value": "www-fbr-gov-pk.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:08+00:00",
        "timestamp": "1777406408",
        "to_ids": true,
        "type": "domain",
        "uuid": "23cc7f29-9796-4e0b-89e6-8ab85ef9304d",
        "value": "www-securitycouncilreport-org.direct880.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:08+00:00",
        "timestamp": "1777406409",
        "to_ids": false,
        "type": "url",
        "uuid": "af572a2c-a390-47b6-b06e-4a232d3b8605",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/97788772149cbe31860fb0cbbdf1902cf9c45e22",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:09+00:00",
        "timestamp": "1777406409",
        "to_ids": false,
        "type": "url",
        "uuid": "236e34a7-0aca-4571-bcc4-3dfc436b669c",
        "value": "https://x.com/skocherhan/status/2048912545444950279",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:09+00:00",
        "timestamp": "1777406409",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce7978a0-de0b-4750-9797-20754b7bd44f",
        "value": "ins10ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:09+00:00",
        "timestamp": "1777406409",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbb031ce-351e-49c6-a72b-39f6b9a3ae9b",
        "value": "ins15ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:09+00:00",
        "timestamp": "1777406410",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0828c06-dfad-4228-8d68-75d29971453b",
        "value": "ins16ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:10+00:00",
        "timestamp": "1777406410",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8b1c2e7-a510-4499-a8ca-9497ac38066a",
        "value": "ins19ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:10+00:00",
        "timestamp": "1777406410",
        "to_ids": true,
        "type": "domain",
        "uuid": "62a67102-54bc-47c9-9f5b-c0c4603b5182",
        "value": "ins1ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:10+00:00",
        "timestamp": "1777406410",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b0ef594-cdb6-4f5a-9f92-12912d9c5383",
        "value": "ins23ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:10+00:00",
        "timestamp": "1777406410",
        "to_ids": true,
        "type": "domain",
        "uuid": "829860a3-a7fa-46ab-92de-824111b82bb7",
        "value": "ins27ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:10+00:00",
        "timestamp": "1777406410",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc96a9fd-cbae-4688-bc5b-718379cdcc3a",
        "value": "ins29ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:11+00:00",
        "timestamp": "1777406411",
        "to_ids": true,
        "type": "domain",
        "uuid": "20cef615-7431-448e-8e26-ff5735aedc84",
        "value": "ins5ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:11+00:00",
        "timestamp": "1777406411",
        "to_ids": true,
        "type": "domain",
        "uuid": "33539039-1c66-4151-b2f9-bd7dd3786911",
        "value": "ins6ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:11+00:00",
        "timestamp": "1777406411",
        "to_ids": true,
        "type": "domain",
        "uuid": "72235d92-bf66-4cb2-8ff7-56ef6df98444",
        "value": "n-cloud.ins16ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:11+00:00",
        "timestamp": "1777406411",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6b11e26-1a6a-4ccc-b2f7-fadb490b753b",
        "value": "n-cloud.ins23ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:11+00:00",
        "timestamp": "1777406411",
        "to_ids": true,
        "type": "domain",
        "uuid": "37df9bee-3cbe-47f5-977e-16136f11ec87",
        "value": "n-corp.ins27ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:11+00:00",
        "timestamp": "1777406412",
        "to_ids": true,
        "type": "domain",
        "uuid": "2922343a-945f-4a64-bf82-585c53e80d06",
        "value": "n-store.ins10ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:12+00:00",
        "timestamp": "1777406412",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c6351df-e343-401d-97af-9263518ced31",
        "value": "n-store.ins19ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:12+00:00",
        "timestamp": "1777406412",
        "to_ids": true,
        "type": "domain",
        "uuid": "405290bd-4732-41f0-afe6-6c7aca7f164b",
        "value": "nid-user.ins5ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:12+00:00",
        "timestamp": "1777406412",
        "to_ids": true,
        "type": "domain",
        "uuid": "88da0a9b-fcfb-46bb-bd10-b2c5b219bf29",
        "value": "nid-user.ins6ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:12+00:00",
        "timestamp": "1777406412",
        "to_ids": true,
        "type": "domain",
        "uuid": "2835cceb-d2d8-498a-b6b6-3730556e5a3b",
        "value": "nos16ips.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:12+00:00",
        "timestamp": "1777406413",
        "to_ids": true,
        "type": "domain",
        "uuid": "f05b7170-8a2a-4780-88c0-0d5bbe202b3e",
        "value": "ns13ios.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:13+00:00",
        "timestamp": "1777406413",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba78de9d-9c2a-4a5c-814b-e50ffdd5e31a",
        "value": "ns18ios.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:13+00:00",
        "timestamp": "1777406413",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4c59779-5a9a-4db8-bde7-3fb08b84943e",
        "value": "nuser-login.pes28ip.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:13+00:00",
        "timestamp": "1777406413",
        "to_ids": true,
        "type": "domain",
        "uuid": "797f1946-6563-48c7-842f-0667dfb25047",
        "value": "pes28ip.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:13+00:00",
        "timestamp": "1777406413",
        "to_ids": false,
        "type": "url",
        "uuid": "835b769e-848d-4e9e-bd42-4ce27ba27b12",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9a6e69d61330c5d255ce7f39f32c5cdcfb672e28",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:13+00:00",
        "timestamp": "1777406413",
        "to_ids": false,
        "type": "url",
        "uuid": "4d0144a5-e8bd-4057-97fa-b918e0354552",
        "value": "https://x.com/skocherhan/status/2048839411962396813",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:13+00:00",
        "timestamp": "1777406414",
        "to_ids": true,
        "type": "domain",
        "uuid": "33f4c3b1-7241-41f7-b35a-4010a14d6641",
        "value": "abusecenter.eboardreports63s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:14+00:00",
        "timestamp": "1777406414",
        "to_ids": true,
        "type": "domain",
        "uuid": "de77a767-6440-43c0-9520-446adcce75b7",
        "value": "abusecenter.ublogrec1s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:14+00:00",
        "timestamp": "1777406414",
        "to_ids": true,
        "type": "domain",
        "uuid": "77769333-3aaf-4fa2-9970-f5163363b408",
        "value": "auth-umblog98s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:14+00:00",
        "timestamp": "1777406414",
        "to_ids": true,
        "type": "domain",
        "uuid": "960e65b6-0975-4445-ba27-7456f8bbd286",
        "value": "blogasreport18s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:15+00:00",
        "timestamp": "1777406415",
        "to_ids": true,
        "type": "domain",
        "uuid": "db3a9dad-6060-4c9e-9d5f-bf914b39bbed",
        "value": "blogasreport23s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:15+00:00",
        "timestamp": "1777406415",
        "to_ids": true,
        "type": "domain",
        "uuid": "14e8f647-bf2f-4599-af6d-a4edc94f3576",
        "value": "blogasreport3s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:15+00:00",
        "timestamp": "1777406415",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e9fafa7-6b0b-442f-97ce-4b298a18d811",
        "value": "blogasreport53s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:15+00:00",
        "timestamp": "1777406415",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac3e694d-4d17-4e12-a04d-2529481db210",
        "value": "blogasreport57s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:15+00:00",
        "timestamp": "1777406415",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfa2047e-0252-4328-b742-d2b2228ad01b",
        "value": "blogasreport64s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:15+00:00",
        "timestamp": "1777406416",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6059bff-294d-4a2e-87e7-8af7d1534efd",
        "value": "blogasreport6s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:16+00:00",
        "timestamp": "1777406416",
        "to_ids": true,
        "type": "domain",
        "uuid": "77e66a1b-d46f-4405-b26f-20217dd5f75c",
        "value": "blogasreport82s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:16+00:00",
        "timestamp": "1777406416",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f490113-a0b4-4d2b-9497-b59ab983bf81",
        "value": "blogasreport89s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:16+00:00",
        "timestamp": "1777406416",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a735b72-c48c-41cc-a2d2-1b0c1a9e1415",
        "value": "blogasreport90s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:16+00:00",
        "timestamp": "1777406416",
        "to_ids": true,
        "type": "domain",
        "uuid": "4aee36bd-04c4-4e90-99ab-58adcb8c4f0b",
        "value": "blogasreport95s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:16+00:00",
        "timestamp": "1777406416",
        "to_ids": true,
        "type": "domain",
        "uuid": "5458bb57-7ca1-4c4e-8e02-31c60be82da4",
        "value": "blogasreport98s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:16+00:00",
        "timestamp": "1777406417",
        "to_ids": true,
        "type": "domain",
        "uuid": "656e32f9-afc0-4f1b-b802-43aca07570d7",
        "value": "docinf.eboardreport29s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:17+00:00",
        "timestamp": "1777406417",
        "to_ids": true,
        "type": "domain",
        "uuid": "f33a7747-702a-4ca2-8593-1b4dae27c126",
        "value": "eblogflag14s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:17+00:00",
        "timestamp": "1777406417",
        "to_ids": true,
        "type": "domain",
        "uuid": "723f731f-7dd9-46e6-aaa3-0ff8a171356f",
        "value": "eblogflag16s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:17+00:00",
        "timestamp": "1777406417",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf98c37b-8858-4b25-9a63-34ffa9e765d8",
        "value": "eblogflag1s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:17+00:00",
        "timestamp": "1777406417",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0057637-c8f1-4403-bd14-7127863547fa",
        "value": "eboardreport13s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:18+00:00",
        "timestamp": "1777406418",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d1c4f9d-8df9-4323-8852-7339cf187fa7",
        "value": "eboardreport14s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:18+00:00",
        "timestamp": "1777406418",
        "to_ids": true,
        "type": "domain",
        "uuid": "481fc8bc-cd9c-40d4-8a53-feca7567c003",
        "value": "eboardreport18s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:18+00:00",
        "timestamp": "1777406418",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b51d533-f2c4-4b24-ab71-5fc17199b673",
        "value": "eboardreport20s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:18+00:00",
        "timestamp": "1777406418",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d6dcf7b-d8b2-4fa8-8a75-b58df456f8e7",
        "value": "eboardreport23s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:18+00:00",
        "timestamp": "1777406418",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f0b2bf6-3e3e-49b8-93d4-177c2cf2c02d",
        "value": "eboardreport25s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:18+00:00",
        "timestamp": "1777406418",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae058231-0edf-4418-a93a-491d84424c95",
        "value": "eboardreport29s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:19+00:00",
        "timestamp": "1777406419",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7d0f7ba-720f-4fd4-81cb-a9008be5e45c",
        "value": "eboardreport5s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:19+00:00",
        "timestamp": "1777406419",
        "to_ids": true,
        "type": "domain",
        "uuid": "83596b3b-4784-4e82-859c-c2f281027f1d",
        "value": "eboardreports.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:19+00:00",
        "timestamp": "1777406419",
        "to_ids": true,
        "type": "domain",
        "uuid": "44e41017-66fa-4c51-91db-f986b94a9dfa",
        "value": "eboardreports0s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:19+00:00",
        "timestamp": "1777406419",
        "to_ids": true,
        "type": "domain",
        "uuid": "575f1568-1278-4f3d-8577-e09d96365051",
        "value": "eboardreports14s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:19+00:00",
        "timestamp": "1777406419",
        "to_ids": true,
        "type": "domain",
        "uuid": "e872abe3-c9db-418f-8862-4e858f9f4c23",
        "value": "eboardreports20s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:19+00:00",
        "timestamp": "1777406420",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ac15725-4a97-4fc8-8722-16ae61754f6e",
        "value": "eboardreports35s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:20+00:00",
        "timestamp": "1777406420",
        "to_ids": true,
        "type": "domain",
        "uuid": "95087c75-2251-4c56-b2c4-461b9b77e79e",
        "value": "eboardreports38s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:20+00:00",
        "timestamp": "1777406420",
        "to_ids": true,
        "type": "domain",
        "uuid": "932f5435-c6e7-4258-aa62-29befe497fc2",
        "value": "eboardreports63s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:20+00:00",
        "timestamp": "1777406420",
        "to_ids": true,
        "type": "domain",
        "uuid": "169b17bf-2a2a-4b01-b46d-7efbfa147a81",
        "value": "eboardreports65s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:20+00:00",
        "timestamp": "1777406420",
        "to_ids": true,
        "type": "domain",
        "uuid": "e920210c-ed38-4d75-abb7-cad45a0ec6a3",
        "value": "eboardreports73s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:20+00:00",
        "timestamp": "1777406420",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f3b8c9f-3f75-4b60-a7d7-39a0ccd70990",
        "value": "eboardreports84s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:21+00:00",
        "timestamp": "1777406421",
        "to_ids": true,
        "type": "domain",
        "uuid": "911e9f23-e08a-493c-88d9-6daefc73295b",
        "value": "enboardingreport14s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:21+00:00",
        "timestamp": "1777406421",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6e03938-2e6b-4b0e-993c-b49e90f8a32c",
        "value": "enboardingreport18s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:21+00:00",
        "timestamp": "1777406421",
        "to_ids": true,
        "type": "domain",
        "uuid": "3665b317-388b-41da-b7db-9ca3da9e2d91",
        "value": "enboardingreport31s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:21+00:00",
        "timestamp": "1777406421",
        "to_ids": true,
        "type": "domain",
        "uuid": "3582148c-3b37-4de7-a435-839f5d498af2",
        "value": "enboardingreport42s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:21+00:00",
        "timestamp": "1777406422",
        "to_ids": true,
        "type": "domain",
        "uuid": "805b8165-edec-4d45-868e-b76106814250",
        "value": "enboardingreport85s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:22+00:00",
        "timestamp": "1777406422",
        "to_ids": true,
        "type": "domain",
        "uuid": "76cdc805-235f-444c-9398-db875788cf02",
        "value": "manage-mublog4id.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:22+00:00",
        "timestamp": "1777406422",
        "to_ids": true,
        "type": "domain",
        "uuid": "70b6a547-f9a4-484a-a2e4-377a8e10ec02",
        "value": "mem-authcenter42s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:22+00:00",
        "timestamp": "1777406422",
        "to_ids": true,
        "type": "domain",
        "uuid": "bce73c2c-e00d-4d3d-9de7-fd2555e3c424",
        "value": "mem-authcenter44s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:22+00:00",
        "timestamp": "1777406422",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce979b0a-d6d4-4c08-8e0e-49e07be97d17",
        "value": "nid-blog.eblogflag16s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:22+00:00",
        "timestamp": "1777406422",
        "to_ids": true,
        "type": "domain",
        "uuid": "dac66b4c-520d-4f06-b657-ac1dd6d77b18",
        "value": "nid-blog.eboardreports14s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:23+00:00",
        "timestamp": "1777406423",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1284b3-a605-4c53-9fa2-a03eaf9af93a",
        "value": "nid-blog.enboardingreport18s.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:23+00:00",
        "timestamp": "1777406423",
        "to_ids": true,
        "type": "domain",
        "uuid": "cce5f6e3-5ab8-4ce3-be80-df71d2b1a354",
        "value": "nid.blogasreport18s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:23+00:00",
        "timestamp": "1777406423",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e293821-d845-4f3f-94e8-c27de4140a00",
        "value": "nidcenter.blogasreport3s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:23+00:00",
        "timestamp": "1777406423",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f570e8c-7dee-4a67-842c-e13b90055ba1",
        "value": "nidcenter.eboardreport25s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:23+00:00",
        "timestamp": "1777406423",
        "to_ids": true,
        "type": "domain",
        "uuid": "be0ad8d3-e1fb-46fa-a20c-e672b819a14a",
        "value": "ntha-13s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:23+00:00",
        "timestamp": "1777406424",
        "to_ids": true,
        "type": "domain",
        "uuid": "b49d1348-ca69-43b5-81fc-13485fe27724",
        "value": "ntha-32s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:24+00:00",
        "timestamp": "1777406424",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f7855e5-ab06-486d-9249-59be66687a88",
        "value": "ntha-36s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:24+00:00",
        "timestamp": "1777406424",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6169b3c-a7b3-4c02-8ac6-68609dc01702",
        "value": "nvtcorp-90bid.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:24+00:00",
        "timestamp": "1777406424",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff96e432-6e05-4f90-8ae9-f5d407c8a86c",
        "value": "reportml21id.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:24+00:00",
        "timestamp": "1777406424",
        "to_ids": true,
        "type": "domain",
        "uuid": "d030ad7d-c611-45d4-8333-d60d8572cf75",
        "value": "reportml30id.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:24+00:00",
        "timestamp": "1777406424",
        "to_ids": true,
        "type": "domain",
        "uuid": "4495df83-56fa-4563-9b23-169a162b15ed",
        "value": "ublogrec1s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:24+00:00",
        "timestamp": "1777406425",
        "to_ids": true,
        "type": "domain",
        "uuid": "3aacedc8-eaeb-425d-ac48-dc444dd1514b",
        "value": "ublogrec44s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:25+00:00",
        "timestamp": "1777406425",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc888890-4919-40c5-9796-7b67abd245b5",
        "value": "ublogrec49s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:25+00:00",
        "timestamp": "1777406425",
        "to_ids": true,
        "type": "domain",
        "uuid": "97ea5237-e680-4e62-8e7e-ba64b3eb65cb",
        "value": "ublogrec85s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:25+00:00",
        "timestamp": "1777406425",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c0994e1-2aad-4589-83e3-73ab47a996b5",
        "value": "unlockeblog10s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:25+00:00",
        "timestamp": "1777406425",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca42402d-f72b-499b-92f8-d405fe39cbb7",
        "value": "unlockeblog12s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:25+00:00",
        "timestamp": "1777406426",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4bb6600-b719-42ba-af4b-6aaec1330059",
        "value": "unlockeblog15s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:26+00:00",
        "timestamp": "1777406426",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e6b7188-6e60-4049-a415-d018d0cf1dfc",
        "value": "unlockeblog17s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:26+00:00",
        "timestamp": "1777406426",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1fab7f3-e5b9-4292-ab3d-415b32b8d3de",
        "value": "unlockeblog19s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:26+00:00",
        "timestamp": "1777406426",
        "to_ids": true,
        "type": "domain",
        "uuid": "31d2cd71-efed-4dcf-bbcf-783cf1f8bb6b",
        "value": "unlockeblog24s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:26+00:00",
        "timestamp": "1777406426",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7f5aec4-42eb-4e2d-bb76-fbcae9123e6f",
        "value": "unlockeblog27s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:26+00:00",
        "timestamp": "1777406426",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b7ed301-ee98-4987-825f-6affd553686a",
        "value": "unlockeblog29s.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:26+00:00",
        "timestamp": "1777406427",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eb65b21-c53f-4d0d-b203-66c86089e0d3",
        "value": "userbreport26s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:27+00:00",
        "timestamp": "1777406427",
        "to_ids": true,
        "type": "domain",
        "uuid": "06df09d8-eed5-4db4-9af9-c5dc8ddd5eba",
        "value": "userbreport31s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:27+00:00",
        "timestamp": "1777406427",
        "to_ids": true,
        "type": "domain",
        "uuid": "11732274-a328-44d5-bbd2-a86bcc8e878b",
        "value": "userbreport3s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:27+00:00",
        "timestamp": "1777406427",
        "to_ids": true,
        "type": "domain",
        "uuid": "a04f0ba5-e7bf-420f-a068-ba61c1d7eaa9",
        "value": "userbreport43s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:28+00:00",
        "timestamp": "1777406428",
        "to_ids": true,
        "type": "domain",
        "uuid": "76028fa2-738e-49f3-bd14-c8c603272cec",
        "value": "userbreport4s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:28+00:00",
        "timestamp": "1777406428",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecaf0d43-6cb1-4a87-9831-b0acdb51f747",
        "value": "userbreport6s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:28+00:00",
        "timestamp": "1777406428",
        "to_ids": true,
        "type": "domain",
        "uuid": "15891abd-67e0-420a-9fc1-713ed8dafa60",
        "value": "userbreport73s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:28+00:00",
        "timestamp": "1777406428",
        "to_ids": true,
        "type": "domain",
        "uuid": "4502fe5d-44f1-4d1e-aac4-4fb980fea8c0",
        "value": "userbreport75s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:28+00:00",
        "timestamp": "1777406429",
        "to_ids": true,
        "type": "domain",
        "uuid": "736e1c0a-bfed-4848-b2c8-efe432c38315",
        "value": "userbreport86s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:29+00:00",
        "timestamp": "1777406429",
        "to_ids": false,
        "type": "url",
        "uuid": "a6dc2a75-da10-48a0-bbfc-c544b669b1e3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/496950ddb832b9262837206150ea90612a514735",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:29+00:00",
        "timestamp": "1777406429",
        "to_ids": false,
        "type": "url",
        "uuid": "fd4c56d3-1640-496c-993b-df6655303917",
        "value": "https://x.com/smica83/status/2049061239314076024",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:29+00:00",
        "timestamp": "1777406429",
        "to_ids": false,
        "type": "url",
        "uuid": "655831cf-944d-411c-969d-fdf5e5e0f9f7",
        "value": "https://tria.ge/260428-lmt11abw4k/behavioral1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:29+00:00",
        "timestamp": "1777406429",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bcbb7b62-19e1-4975-b1ae-ba09d3546ea4",
        "value": "154.246.73.25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:29+00:00",
        "timestamp": "1777406429",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "36414347-19ec-4e93-ba0b-ae4a19b38249",
        "value": "154.246.124.199",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:29+00:00",
        "timestamp": "1777406430",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7b879eb4-69c7-4a8c-809a-34d0a155be73",
        "value": "154.240.183.11",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:30+00:00",
        "timestamp": "1777406430",
        "to_ids": true,
        "type": "domain",
        "uuid": "67d17f8e-1544-481b-9567-99de348a78f5",
        "value": "hx1.bounceme.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:30+00:00",
        "timestamp": "1777406430",
        "to_ids": false,
        "type": "url",
        "uuid": "2587b744-c77b-49c1-b061-7c1b41312a76",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/25b44df40de8f2dbf5fb37427cc7a637a47ba041",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:30+00:00",
        "timestamp": "1777406430",
        "to_ids": true,
        "type": "domain",
        "uuid": "657fa911-dbc1-4e9c-8d34-3deda71377f2",
        "value": "nidenaver.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:30+00:00",
        "timestamp": "1777406431",
        "to_ids": false,
        "type": "url",
        "uuid": "0ea1557b-ab37-4c4f-9dd2-88317d088a65",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f6f8720aea89a9cd75956b8d4786b3b04fe50b05",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:31+00:00",
        "timestamp": "1777406431",
        "to_ids": false,
        "type": "url",
        "uuid": "f445698d-2688-4d0b-ba3a-d42eef92feec",
        "value": "https://x.com/malwrhunterteam/status/2049190442084835702",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:31+00:00",
        "timestamp": "1777406431",
        "to_ids": false,
        "type": "url",
        "uuid": "757d518b-477f-4650-895e-9bb06af78f50",
        "value": "https://www.virustotal.com/gui/file/69b89845c4f4d92ac33a7cecb47b1eee08e626966ca63b2c537dbe39940ca0b3/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:31+00:00",
        "timestamp": "1777406431",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "2e807aa2-62bb-4677-99d4-cd2ad8c4b160",
        "value": "176.125.240.169",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:31+00:00",
        "timestamp": "1777406431",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b25bd87c-9b4a-4b4b-a907-ce4cf32575bd",
        "value": "176.125.240.33",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:31+00:00",
        "timestamp": "1777406432",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "074b7cae-f7d4-434e-bf5e-f986fa93fa6c",
        "value": "45.90.97.211",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:32+00:00",
        "timestamp": "1777406432",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1d1e8064-4371-4cf2-b7b4-701861a39a11",
        "value": "45.90.97.21",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:32+00:00",
        "timestamp": "1777406432",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6d48cc9-0707-4063-aa17-f1d9bdad7e81",
        "value": "forwindowstesting.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:32+00:00",
        "timestamp": "1777406432",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ef12aa7-8595-4568-8a2e-13a5ae498494",
        "value": "forwindowstesting.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:32+00:00",
        "timestamp": "1777406432",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2db1bf8-6a5b-476c-90b8-e6089697c6d2",
        "value": "mmmmsys.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:32+00:00",
        "timestamp": "1777406432",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c09fc8d-e4f2-49e3-b36c-ff87cf29e27d",
        "value": "mmmmsys.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:32+00:00",
        "timestamp": "1777406433",
        "to_ids": true,
        "type": "domain",
        "uuid": "1292d395-ad20-494d-b16f-02c3476f2989",
        "value": "ftp.czwaluk.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_transparenttribe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:33+00:00",
        "timestamp": "1777406433",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb7571f4-cca1-4eba-b6ad-cb4110eedd0f",
        "value": "vdsd.whypay.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:33+00:00",
        "timestamp": "1777406433",
        "to_ids": false,
        "type": "url",
        "uuid": "1f970450-a399-4e30-a777-384d42e798a0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/674c9fea7bda03875256c4f1f40ed4297456e72e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:33+00:00",
        "timestamp": "1777406433",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd97b291-6734-4bec-85b5-365ae946d6f1",
        "value": "ncodbspass.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:33+00:00",
        "timestamp": "1777406433",
        "to_ids": true,
        "type": "domain",
        "uuid": "abd4ac35-1c9f-47e8-97ad-65423b9b7046",
        "value": "nuserlogin.julgiya.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:33+00:00",
        "timestamp": "1777406434",
        "to_ids": false,
        "type": "url",
        "uuid": "41d95e64-09df-4440-958c-0b4921caa62f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/21f1191cf0dc52a2db20dd91422076f2c6711634",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:34+00:00",
        "timestamp": "1777406434",
        "to_ids": false,
        "type": "url",
        "uuid": "a0147b73-3f07-427e-b07c-85e156f43721",
        "value": "https://www.virustotal.com/gui/ip-address/27.102.137.226/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:34+00:00",
        "timestamp": "1777406434",
        "to_ids": false,
        "type": "url",
        "uuid": "6dfc09cf-d2fe-4ee3-b19e-af1b235c42ce",
        "value": "https://www.virustotal.com/gui/ip-address/27.102.138.119/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:34+00:00",
        "timestamp": "1777406434",
        "to_ids": true,
        "type": "domain",
        "uuid": "025cc068-ca7f-4cd4-b988-edb561508074",
        "value": "accountnaver.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:34+00:00",
        "timestamp": "1777406434",
        "to_ids": true,
        "type": "domain",
        "uuid": "6279610e-95ef-47ed-b5be-524aafc99936",
        "value": "plusmembership.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:34+00:00",
        "timestamp": "1777406435",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f376bd3-7f37-4df1-9754-0785b109911b",
        "value": "kkbblg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:35+00:00",
        "timestamp": "1777406435",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1d119b6-0cb9-4048-b8a4-54c07cf2bdfe",
        "value": "klooknoreply.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:35+00:00",
        "timestamp": "1777406435",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0e1c09c-3561-4f39-8595-7b2bf776f7fa",
        "value": "nidinaver.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:35+00:00",
        "timestamp": "1777406435",
        "to_ids": true,
        "type": "domain",
        "uuid": "706577af-9918-4aed-bae8-fcaaa7d3d837",
        "value": "nidnoreply.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T20:00:35+00:00",
        "timestamp": "1777406435",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d18145c-a008-4072-b3f3-f863f0133e7b",
        "value": "noreplynaver.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:04+00:00",
        "timestamp": "1777410005",
        "to_ids": false,
        "type": "url",
        "uuid": "7e1f7be8-12d0-44fc-bde2-39665194778e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/525f1783f0c9255fe1f5b620cda0ba974c93435b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:05+00:00",
        "timestamp": "1777410005",
        "to_ids": false,
        "type": "url",
        "uuid": "09acc6ae-f93f-4057-b521-ea41786f8eac",
        "value": "https://x.com/skocherhan/status/2049195306487853319",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:05+00:00",
        "timestamp": "1777410005",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf744e81-9a76-4eab-9e6e-0bf23106f450",
        "value": "docinfo.inlinepol1s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:05+00:00",
        "timestamp": "1777410005",
        "to_ids": true,
        "type": "domain",
        "uuid": "7739113f-7de0-470a-89a4-39edb5d36bc9",
        "value": "docinfo.newaltercm33s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:05+00:00",
        "timestamp": "1777410005",
        "to_ids": true,
        "type": "domain",
        "uuid": "33b85ab8-4133-4269-a418-be323e222b0c",
        "value": "edoc.inlinepol14s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:05+00:00",
        "timestamp": "1777410005",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7ee4055-2a2e-4661-9d5d-3b401df55166",
        "value": "edoc.newpolinf46s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:05+00:00",
        "timestamp": "1777410006",
        "to_ids": true,
        "type": "domain",
        "uuid": "719a9c79-ab01-4300-8c5e-a31872ee96d0",
        "value": "inlinepol14s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:06+00:00",
        "timestamp": "1777410006",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8bed487-8122-42eb-b44b-884559e27f96",
        "value": "inlinepol17s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:06+00:00",
        "timestamp": "1777410006",
        "to_ids": true,
        "type": "domain",
        "uuid": "68290ad0-0de5-4179-96f8-6ffdbd3453e4",
        "value": "inlinepol19s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:06+00:00",
        "timestamp": "1777410006",
        "to_ids": true,
        "type": "domain",
        "uuid": "21e39abb-799c-42c6-872d-7bdb31ebcd3e",
        "value": "inlinepol1s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:06+00:00",
        "timestamp": "1777410006",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5b61978-8590-44c8-ba2c-689e93dab178",
        "value": "invoice.newaltercm36s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:06+00:00",
        "timestamp": "1777410006",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d0d5e41-a3e4-4085-ba74-bd16c27185aa",
        "value": "invoice.newaltercm4s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:06+00:00",
        "timestamp": "1777410007",
        "to_ids": true,
        "type": "domain",
        "uuid": "19925fad-7ab9-4010-8430-d7ce395f0689",
        "value": "invoice.newpolinf45s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:07+00:00",
        "timestamp": "1777410007",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb29b14a-9925-44e6-a19c-3d8c9282155d",
        "value": "newaltercm10s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:07+00:00",
        "timestamp": "1777410007",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab824aa1-0669-4cb7-b6b5-709372ef514b",
        "value": "newaltercm12s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:07+00:00",
        "timestamp": "1777410007",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a0cc20c-5e5a-41a9-aba2-4b7f92b1e259",
        "value": "newaltercm17s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:08+00:00",
        "timestamp": "1777410008",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a9074ff-c184-40df-ad34-ff8c4e981336",
        "value": "newaltercm21s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:08+00:00",
        "timestamp": "1777410008",
        "to_ids": true,
        "type": "domain",
        "uuid": "e04e6570-483b-4ec9-8777-f62c97e0eac1",
        "value": "newaltercm26s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:08+00:00",
        "timestamp": "1777410008",
        "to_ids": true,
        "type": "domain",
        "uuid": "35b9968e-df43-47b5-b666-a5210dc9736e",
        "value": "newaltercm27s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:08+00:00",
        "timestamp": "1777410008",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbb8a1c4-415c-4e5e-9d94-1c4006b4c944",
        "value": "newaltercm28s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:08+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5c730ac-7bec-4d83-9752-253e063e39b6",
        "value": "newaltercm30s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:09+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "56faad8f-d6f2-4fe6-8a8c-5ce2886111ae",
        "value": "newaltercm33s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:09+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfbbb5f0-8272-4f88-ac2f-87c333f61e84",
        "value": "newaltercm36s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:09+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "c509653c-91bf-4267-a620-e5c881795acb",
        "value": "newaltercm39s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:09+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "febcdc62-c654-4db0-9f44-d00e688b1718",
        "value": "newaltercm3s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:09+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ad5f076-8ea9-429c-a233-5f5a0a3765a3",
        "value": "newaltercm41s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:09+00:00",
        "timestamp": "1777410009",
        "to_ids": true,
        "type": "domain",
        "uuid": "576a3fbc-3d76-427a-b0fc-268f33d7d683",
        "value": "newaltercm42s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410010",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9ec1e8e-be17-46b8-b73b-a1b5918a934d",
        "value": "newaltercm47s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410010",
        "to_ids": true,
        "type": "domain",
        "uuid": "83315b56-1df1-4449-b616-f4b562f032ef",
        "value": "newaltercm4s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410010",
        "to_ids": true,
        "type": "domain",
        "uuid": "c28ec15c-180a-4aac-9966-b6e8671cb57a",
        "value": "newpolinf1s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410010",
        "to_ids": true,
        "type": "domain",
        "uuid": "560cc885-f2a8-4503-92ed-66287482a4fe",
        "value": "newpolinf22s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410010",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9e3d2a9-6dd3-466b-aba2-b4954fcc524b",
        "value": "newpolinf28s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410010",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb2891c8-09ef-4f9c-8e79-4ddd8f89ab06",
        "value": "newpolinf29s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:10+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "714e7015-c3b4-4702-ab65-965b14ed455d",
        "value": "newpolinf2s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "85ab0eee-3d7e-4eb6-8c33-2d6143a50fa5",
        "value": "newpolinf33s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ff439f2-b3ed-4e8e-b5d7-0a89f02abcbf",
        "value": "newpolinf35s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "e474ac29-51fa-48a3-8140-ede74496967c",
        "value": "newpolinf36s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d86ced3-fb0e-4c2b-8265-e62c68a96777",
        "value": "newpolinf3s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba41e984-851a-46c1-adcf-946d2fad141a",
        "value": "newpolinf45s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410011",
        "to_ids": true,
        "type": "domain",
        "uuid": "52810995-121c-46e8-a692-ab1fea9a4474",
        "value": "newpolinf46s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:11+00:00",
        "timestamp": "1777410012",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d217c42-ec04-4cf5-b92f-b18c954f483e",
        "value": "newpolinf47s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:12+00:00",
        "timestamp": "1777410012",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb8f5b9a-1925-47a5-a9f6-b1c2d7ded796",
        "value": "newpolinf48s.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:12+00:00",
        "timestamp": "1777410012",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1fde489-a970-4d9b-a1ba-ca59102fb9bd",
        "value": "nid.newaltercm17s.roxa.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:12+00:00",
        "timestamp": "1777410012",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2e18b58-4676-492f-ae2e-cdfa960151f2",
        "value": "uofficialerc22v.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:12+00:00",
        "timestamp": "1777410012",
        "to_ids": false,
        "type": "url",
        "uuid": "1c042b51-c2e4-4ce1-95ce-022d60a6969b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/612aecb67931145895621f8d4c33f4f844a3858a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:12+00:00",
        "timestamp": "1777410012",
        "to_ids": false,
        "type": "url",
        "uuid": "abdc6adb-12ca-40ee-a1ca-f950f3638fde",
        "value": "https://x.com/malwrhunterteam/status/2049223060062970275",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:12+00:00",
        "timestamp": "1777410013",
        "to_ids": false,
        "type": "url",
        "uuid": "7ba8b78a-1aa4-4099-912c-68e3d95b406b",
        "value": "https://www.virustotal.com/gui/file/ce4bdb4e07d291997310b65fae74280c81ecb2651658fc4a97192346297c3df9/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "elf_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410013",
        "to_ids": false,
        "type": "url",
        "uuid": "1ba109d7-e5da-4776-bae9-69c29229a720",
        "value": "https://www.virustotal.com/gui/file/e41c635e4c3514e266d143d544ad1abde5db3dcfe6cccdf9bb7a218003f8ab6a/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "elf_generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410013",
        "to_ids": true,
        "type": "domain",
        "uuid": "9176d460-4fa6-44b7-94bc-dc2dd17b838a",
        "value": "spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410013",
        "to_ids": false,
        "type": "url",
        "uuid": "f904fba0-74ed-4db2-bd0d-84e356c6ea84",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d4b57122b5343b7ca44deebc5b6342cb93fb0dc0",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410013",
        "to_ids": true,
        "type": "domain",
        "uuid": "97e683d6-052c-4ae0-9119-6b303d5bf8a9",
        "value": "dexispointnexus.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410013",
        "to_ids": true,
        "type": "domain",
        "uuid": "d767b196-f110-4f3d-9214-b7cf68725344",
        "value": "qivornodeunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410013",
        "to_ids": false,
        "type": "url",
        "uuid": "03f91494-4034-45f3-b3cc-ade33a7970f7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ddbb25bc660f471fe7b9fe168e56ee4fadf7b933",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:13+00:00",
        "timestamp": "1777410014",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4108f5cc-3745-4335-9732-0a055ffacca2",
        "value": "77.90.185.24",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:14+00:00",
        "timestamp": "1777410014",
        "to_ids": false,
        "type": "url",
        "uuid": "050a4f36-e27a-4741-9561-c87b86128fbf",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/76c45d8d15e10e5a93c0442bf507493666a7a0cb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:14+00:00",
        "timestamp": "1777410014",
        "to_ids": true,
        "type": "domain",
        "uuid": "406e9e75-1d6b-4591-bcb3-2c306fa3d5ed",
        "value": "17393sm.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:14+00:00",
        "timestamp": "1777410014",
        "to_ids": true,
        "type": "domain",
        "uuid": "01e95676-32ac-47f4-b708-fba456360ca1",
        "value": "1oade4-zone.sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:14+00:00",
        "timestamp": "1777410014",
        "to_ids": true,
        "type": "domain",
        "uuid": "47fd0604-ebff-437f-b1d4-7a40359423e9",
        "value": "1r72in.sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:14+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "9004d37b-b1ec-4403-8084-daf925ad073d",
        "value": "23ofcfv.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "6eae4f54-3e89-4c9d-8290-569868ad92e6",
        "value": "2585gqld.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "9310b761-437b-44e4-b8f7-59b849fcd4e1",
        "value": "37dmj.leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f8e3135-249e-4625-bf3c-5b99a2f37721",
        "value": "4hs7joli.sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "f14c77ea-a129-4026-ae24-5c4e7944631d",
        "value": "4wyk.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaa674dd-eb66-4757-903d-bcba0df10558",
        "value": "5un-drive.frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410015",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d0a8688-707b-49fb-8660-668d18f346f6",
        "value": "5urv3-layer.stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:15+00:00",
        "timestamp": "1777410016",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5d88622-6b77-44b9-8817-1bf6bf493f9c",
        "value": "5urvey-spark.exhumat8urgle.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:16+00:00",
        "timestamp": "1777410016",
        "to_ids": true,
        "type": "domain",
        "uuid": "a05e1199-556a-4df4-a92c-3d15c1b215b1",
        "value": "63efwnh.leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:16+00:00",
        "timestamp": "1777410016",
        "to_ids": true,
        "type": "domain",
        "uuid": "30d55609-3a10-4574-a4e1-c38e113f18f1",
        "value": "6lzo5xl.tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:16+00:00",
        "timestamp": "1777410016",
        "to_ids": true,
        "type": "domain",
        "uuid": "36378e77-fcb0-4a89-8e62-1b51544e1362",
        "value": "93f5qz.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:16+00:00",
        "timestamp": "1777410016",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f9c4a38-5ac1-47ce-a881-088ab60dbcb4",
        "value": "97d1n21t.betav2ryazhsky.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:16+00:00",
        "timestamp": "1777410016",
        "to_ids": true,
        "type": "domain",
        "uuid": "091fa741-1061-4737-9efe-e4abaaa5da14",
        "value": "agjlskc.pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:16+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "40d034fe-26da-459a-afb9-a31146316f20",
        "value": "alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "b640c49d-7ee1-4dcf-8869-f84b31eaff89",
        "value": "alt-enc0.sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "2566d473-31e5-4137-b099-d317959a7f9c",
        "value": "alt-w1nd.leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "79fc085a-868f-4e98-970b-f68d66631046",
        "value": "apex3stormlink.cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b10ae7e-75a6-49dc-8833-7113788b868b",
        "value": "approugesoft.novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fac474d-c634-4512-a901-0543ef2a0d7d",
        "value": "aq4saw1.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410017",
        "to_ids": true,
        "type": "domain",
        "uuid": "b236eeb3-d595-4be4-9bfd-7693133834ea",
        "value": "aridlogicnode.canyonsyncgate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:17+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "23224dd1-985c-4ace-963f-9a15171c3659",
        "value": "arkcoreix.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:18+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "7121f698-8d57-416a-8e9f-ad2fa550d9c3",
        "value": "arkmarkix.rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:18+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "66611896-78cf-49f8-89c2-7d1b5b7551f0",
        "value": "arrayterminal.shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:18+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c70975c-5445-4aa7-b675-803df20d4f57",
        "value": "asse4-track.frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:18+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "8432f941-fd38-4df0-aba0-90f6a9ec8385",
        "value": "asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:18+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "60ea90ec-5d9b-4b03-be79-b301a6039768",
        "value": "atlasgridflow.alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:18+00:00",
        "timestamp": "1777410018",
        "to_ids": true,
        "type": "domain",
        "uuid": "e69db5f9-0fdd-4d6f-a2b8-d55121cda2c0",
        "value": "atom2logicnet.quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410019",
        "to_ids": true,
        "type": "domain",
        "uuid": "a69803c4-0411-475c-8bd4-b5a743451c41",
        "value": "audiomeshbase.sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410019",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d0c291b-e5df-4936-ab9f-76132e27918a",
        "value": "azur3-branch.sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410019",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d4b3ad3-e482-4283-a759-e4ea52788ee9",
        "value": "b74fa.mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410019",
        "to_ids": true,
        "type": "domain",
        "uuid": "a878dd4f-fd40-4cfa-b542-41dbdcbf9dd5",
        "value": "banncip.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410019",
        "to_ids": true,
        "type": "domain",
        "uuid": "08a68615-9876-4142-96cf-fe31653a8996",
        "value": "basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410019",
        "to_ids": true,
        "type": "domain",
        "uuid": "8de030a4-0125-4ddc-bb2c-09536ed5afd1",
        "value": "base7wavenet.basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:19+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1f12935-9c4e-45b3-b472-497ef8d2255f",
        "value": "baseopenwald.mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:20+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "73a6dc01-d917-4058-b04e-23ac0ffa62f3",
        "value": "baseopenwald.qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:20+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "03e349e6-b777-4b0a-8fff-476ab4925b74",
        "value": "bay6-beam.kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:20+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "88017826-5d7e-46f9-8388-013bcd82ff3f",
        "value": "bcfapelw.mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:20+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2f8b94b-b72b-4296-8f2b-3310ac438072",
        "value": "betav2ryazhsky.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:20+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c0d370a-921f-484d-8cf0-a323f507f6e1",
        "value": "biomecave.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:20+00:00",
        "timestamp": "1777410020",
        "to_ids": true,
        "type": "domain",
        "uuid": "5788e8f2-1260-4709-b4ab-5d7c83d3196e",
        "value": "birchpayload.qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410021",
        "to_ids": true,
        "type": "domain",
        "uuid": "56954307-b936-4baf-9d8a-1e76ef74c6d9",
        "value": "bitbluemond.raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410021",
        "to_ids": true,
        "type": "domain",
        "uuid": "b72684fd-8351-4467-8b93-680440e96dcd",
        "value": "bitbluemond4.vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410021",
        "to_ids": true,
        "type": "domain",
        "uuid": "be03c5be-3784-48aa-a1ce-bdba870f524c",
        "value": "bleu-3.dexis-serv.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410021",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba29c69-3353-4a2f-be76-4af863986991",
        "value": "bleu-3k.syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410021",
        "to_ids": true,
        "type": "domain",
        "uuid": "df25d9e6-5c1f-4829-8144-54c751284b5b",
        "value": "bleu-9.sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410021",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1358110-ba28-46dc-8ef1-effc6ad592dc",
        "value": "bleuzeit8zone.dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:21+00:00",
        "timestamp": "1777410022",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee316637-b21c-416e-932d-e2b9ed64a688",
        "value": "blue-fire-8w.syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:22+00:00",
        "timestamp": "1777410022",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb0f954b-4f84-439a-b347-51c23c372ce3",
        "value": "blue-mond-3k.raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:22+00:00",
        "timestamp": "1777410022",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd2f8a85-6a8f-4b27-9f46-346d9468b188",
        "value": "blue3zonepath.orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:22+00:00",
        "timestamp": "1777410022",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1e86edb-0743-457f-8946-07eb498593f7",
        "value": "bold7logicgate.zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:22+00:00",
        "timestamp": "1777410022",
        "to_ids": true,
        "type": "domain",
        "uuid": "a590a14e-9ee3-4e3e-96b1-cb2a4cb6bece",
        "value": "booey.rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:22+00:00",
        "timestamp": "1777410022",
        "to_ids": true,
        "type": "domain",
        "uuid": "3564b99d-9745-4689-9f10-52553fe00981",
        "value": "brand-vau.sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:22+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "870971f7-8a14-4744-bbe8-c95bef34820a",
        "value": "bright3nodeview.cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "67d27feb-d1df-41c7-805a-591523168a41",
        "value": "broad7-grid.shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "640a0f04-3034-4443-8e2a-19b099290cea",
        "value": "broadfilte.exhumat8urgle.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "1217acdf-50ac-4dbc-bf8e-5c25e2aaf282",
        "value": "brookcano.sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "923bee6b-e3ca-4ee5-9010-ecfb891de801",
        "value": "bz110bs.kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3d35320-10ed-4e90-8ec9-67755d67265e",
        "value": "c3da-glow.pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410023",
        "to_ids": true,
        "type": "domain",
        "uuid": "46d6f945-7a69-459b-96fe-55e4c1831d50",
        "value": "campaigndefen.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:23+00:00",
        "timestamp": "1777410024",
        "to_ids": true,
        "type": "domain",
        "uuid": "05c9ba24-1ac3-455c-b03f-9c7f15af9175",
        "value": "canyonsyncgate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:24+00:00",
        "timestamp": "1777410024",
        "to_ids": true,
        "type": "domain",
        "uuid": "975e5e56-4963-4859-8b89-5c22c2ff90b2",
        "value": "carbonmeshnode.silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:24+00:00",
        "timestamp": "1777410024",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2eea752-dc3e-4daa-82bf-37252a9c5950",
        "value": "cedthe.qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:24+00:00",
        "timestamp": "1777410024",
        "to_ids": true,
        "type": "domain",
        "uuid": "e38304e4-ef90-4073-bd06-2e6cab59299c",
        "value": "chillmeshsite.tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:24+00:00",
        "timestamp": "1777410024",
        "to_ids": true,
        "type": "domain",
        "uuid": "02d5bca8-a2be-4176-910c-a5b5649715bb",
        "value": "cin3m2-frame.vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:24+00:00",
        "timestamp": "1777410024",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca71aab2-a3fc-4943-bb47-bf0471f4961c",
        "value": "cine2-path.nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:24+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "29747d4a-dd3c-4399-8d90-301254bed55f",
        "value": "civi-opti.shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "88b2d516-7008-48e2-988b-713dcea8c9ff",
        "value": "claudedesktop-llm.gitlab.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "06ec0eb4-19b6-462f-b061-891c50e3fad5",
        "value": "clearpointdata.zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "05d9d65f-6fe5-4d07-8d7d-16c0c7f8e78f",
        "value": "clif7-bridge.mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bf164ce-c9cc-4f50-8f0b-94f2159f2a8f",
        "value": "clisan.mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c3db9d3-ae88-4bdb-aa27-1225827cd363",
        "value": "columdee.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410025",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a3f0fab-8eac-42ca-9dc6-ffe7c4fba165",
        "value": "comp-vine.greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:25+00:00",
        "timestamp": "1777410026",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb8034e6-994a-4ceb-a85c-14ae3e5b22c7",
        "value": "cool2meshbit.cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:26+00:00",
        "timestamp": "1777410026",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a1d1224-dcd3-4e21-b518-c669d93a6880",
        "value": "core3darkstar.novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:26+00:00",
        "timestamp": "1777410026",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3a5ab91-bfb6-4746-8c05-a5e2e52d72f1",
        "value": "core3gatehost.basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:26+00:00",
        "timestamp": "1777410026",
        "to_ids": true,
        "type": "domain",
        "uuid": "3064eb4c-0a9f-426f-bf05-8dd1cad20ab8",
        "value": "corehostunit5.quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:26+00:00",
        "timestamp": "1777410026",
        "to_ids": true,
        "type": "domain",
        "uuid": "4aaa98c6-1ad1-4560-8df7-62e02392d506",
        "value": "cort4-node.kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:26+00:00",
        "timestamp": "1777410026",
        "to_ids": true,
        "type": "domain",
        "uuid": "698376a7-57b5-43cc-b08d-9de71ab1e38f",
        "value": "cour1e-core.kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:26+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "928bfed2-31e4-40d4-9774-c226eba58cf4",
        "value": "crawlerstory.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "99aebb38-82c8-43e7-b443-ae71781a5af9",
        "value": "cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "3accf335-c9c0-42d7-827d-ec4bdf36a067",
        "value": "culqxa.nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "6164d1cf-5c78-4801-81b0-b83bd43beb2d",
        "value": "cultu3-array.rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ff10d94-0cfc-432b-8b48-a42bc47508f8",
        "value": "culturebold.rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "400ef03b-092c-4dcc-80ba-df633e8f5253",
        "value": "culturebrook.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410027",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b20bc1f-456f-4ba4-bcc5-4169d999d1c9",
        "value": "cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:27+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "6085371a-6c12-4951-a61d-1c6971c94efe",
        "value": "daemon-hill.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:28+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "85ac3cb2-82af-4a21-b28f-f0fdd964e44b",
        "value": "dark-land-8b.dexis-serv.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:28+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "8fd7e6a3-8e37-4d95-98be-69f719493584",
        "value": "dark-star-4.vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:28+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba14cf39-f2b3-40ad-bdbe-31f9e9c79bfb",
        "value": "dark-wald-3.sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:28+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c5e3ad1-3272-4b04-aa5b-b3b3efbed379",
        "value": "darkstarcore.dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:28+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6d74046-d277-451d-ab04-1cdc2f6db9d0",
        "value": "datanoirgold5.sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:28+00:00",
        "timestamp": "1777410028",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d322b4d-a8a0-4c3d-8ad0-2f8301b0c3c2",
        "value": "deepcloud9base.cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410029",
        "to_ids": true,
        "type": "domain",
        "uuid": "2281026c-d9a5-4b33-9045-0cb8b8aa9fba",
        "value": "deepsurve.leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410029",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8bcd28c-4e3e-4f5d-b59b-f106ebf77a8e",
        "value": "deltahostgate.pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410029",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d609e78-25f6-4125-89ba-c1b61809514e",
        "value": "dexis-serv.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410029",
        "to_ids": true,
        "type": "domain",
        "uuid": "29129674-c6f8-458e-95a4-7ae6341dedc5",
        "value": "dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410029",
        "to_ids": true,
        "type": "domain",
        "uuid": "186aab93-ac39-4f1f-beac-5af59e8c71db",
        "value": "dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410029",
        "to_ids": true,
        "type": "domain",
        "uuid": "785e547a-07c6-4641-a657-a1751dd435f9",
        "value": "dock-visu.stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:29+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "e331ef0e-65fc-40c5-9323-f2e2f4affb18",
        "value": "drift2logicnet.tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ba2e60a-75ba-4b7a-8191-a88ed059bbb6",
        "value": "dust4hostunit.canyonsyncgate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5102e3a-ea78-4537-8150-a370da3f0d8c",
        "value": "dynvaleis.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "04e05fc5-9e84-4295-beae-0150d2ea05b6",
        "value": "echo2pathnode.sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "81fcc25c-afa8-4fe3-be2d-518897b43ed1",
        "value": "echomeshsite.canyonsyncgate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc034a51-740b-4409-807c-7dde689015f6",
        "value": "eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410030",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb1f4fb8-293c-4908-bcbe-b59288a14588",
        "value": "ejge.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:30+00:00",
        "timestamp": "1777410031",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6243590-8c14-4a0f-9407-67fcc3c1f9e2",
        "value": "embermeshnode.pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:31+00:00",
        "timestamp": "1777410031",
        "to_ids": true,
        "type": "domain",
        "uuid": "60028663-40de-4deb-bf3f-f3b063d0a687",
        "value": "eswcaywn.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:31+00:00",
        "timestamp": "1777410031",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bd3a767-93d8-49cc-8e92-273f8f1c6cb3",
        "value": "ew559.sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:31+00:00",
        "timestamp": "1777410031",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6580581-7bb8-49a9-8057-5ce8b5e3cf69",
        "value": "ezyunbs.kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:31+00:00",
        "timestamp": "1777410031",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c195fdc-f4af-4d63-a944-20d64960409f",
        "value": "f4ct0-span.lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:31+00:00",
        "timestamp": "1777410031",
        "to_ids": true,
        "type": "domain",
        "uuid": "81a05b62-bc75-4c30-a274-464bf5bda9e1",
        "value": "f532v.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:31+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c0dd316-c95e-49d3-a725-79a520a72cdc",
        "value": "fa1thf6-gate.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:32+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "99dd8f86-d2a6-4871-9fca-d426406ecc46",
        "value": "fast-2.syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:32+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9aeacc4-9242-4a7c-b9ae-eccdf8ab5aa1",
        "value": "fast-fire-9.raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:32+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad6fb20a-4d3e-4449-9a95-a3822ebba270",
        "value": "fast-star-5x.mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:32+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "1acbe89e-4797-4cb9-ac0e-2eeaf0e16bd5",
        "value": "fast-zeit-1.tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:32+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a5a7e52-89f5-4a2d-842a-ecaba5f5305d",
        "value": "fastland8zeit.mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:32+00:00",
        "timestamp": "1777410032",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fdb2013-43de-459a-9ad2-77b324cbe38f",
        "value": "fhgcivkk.sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410033",
        "to_ids": true,
        "type": "domain",
        "uuid": "009f2574-1401-4cb5-83de-aebb54f6ce67",
        "value": "filt3-scope.lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410033",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c50711a-858f-421e-a414-01615120379e",
        "value": "flintpathgate.quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410033",
        "to_ids": true,
        "type": "domain",
        "uuid": "69b929bb-a68e-46dd-a54f-c135c2c86039",
        "value": "flowironhaus.novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410033",
        "to_ids": true,
        "type": "domain",
        "uuid": "a850b73d-462e-4d74-83f6-ab3f82f3c201",
        "value": "formpea.lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410033",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b12fe2b-1493-459f-8819-506205787499",
        "value": "freetaskunit.cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410033",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c816da2-57d6-4df0-b4a8-c940ed1a2832",
        "value": "freq6taskunit.sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:33+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "32902f26-23cb-4b8c-9fbd-3dc1014b07f4",
        "value": "frost9taskunit.pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:34+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "9efadb80-cd75-4818-9954-06eb936d4261",
        "value": "frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:34+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "82dd0572-4292-4696-abc1-c2aacd33cd7a",
        "value": "frosthostbase.tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:34+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cb8e792-23f8-41ef-9f27-7930c906a7dd",
        "value": "frwyaofu.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:34+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4864eb0-8199-4cbb-aa84-6a8716359252",
        "value": "galesync7zone.tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:34+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "02c57a19-afa9-4760-9bdb-a098ae228bc0",
        "value": "gategoldberg.vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:34+00:00",
        "timestamp": "1777410034",
        "to_ids": true,
        "type": "domain",
        "uuid": "e68de653-35e9-403c-b991-0a90dca703ec",
        "value": "gategoldberg3.raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410035",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d19024a-54a5-48d5-a309-005b66e95fbf",
        "value": "gatewa-qua.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410035",
        "to_ids": true,
        "type": "domain",
        "uuid": "86765f3f-a4fb-4e84-9eae-eb4d3069cd79",
        "value": "genomeobserver.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410035",
        "to_ids": true,
        "type": "domain",
        "uuid": "21eb3372-5085-402e-be1e-a46dd8ca6c2d",
        "value": "ggitwz7y.betav2ryazhsky.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410035",
        "to_ids": true,
        "type": "domain",
        "uuid": "de885c58-465a-4f48-82e0-284310fa4461",
        "value": "glaze3meshnode.quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410035",
        "to_ids": true,
        "type": "domain",
        "uuid": "12624ea4-e7cf-4fda-9269-69050bd89d3c",
        "value": "globfastfire.vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410035",
        "to_ids": true,
        "type": "domain",
        "uuid": "586f79e8-d21f-4fbc-8b90-ccd3bb267c44",
        "value": "globfastfire7.raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:35+00:00",
        "timestamp": "1777410036",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d3b5638-b781-4143-8211-9b71e2b6021d",
        "value": "gold-land-3.tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:36+00:00",
        "timestamp": "1777410036",
        "to_ids": true,
        "type": "domain",
        "uuid": "068ca8f0-f078-4019-8bb4-fd1b786c6e31",
        "value": "gold-land-4m.raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:36+00:00",
        "timestamp": "1777410036",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae9d027d-f236-46a4-97c3-d7a24d2682d8",
        "value": "gold-mond-2.mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:36+00:00",
        "timestamp": "1777410036",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e1ea7e5-602b-4e3b-b293-d5fb9e5b3a86",
        "value": "gold-star-5s.qen9vital.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:36+00:00",
        "timestamp": "1777410036",
        "to_ids": true,
        "type": "domain",
        "uuid": "26338bf8-89a3-49ef-9d39-aebdd2c2617a",
        "value": "goldstarport.mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:36+00:00",
        "timestamp": "1777410036",
        "to_ids": true,
        "type": "domain",
        "uuid": "661d7f31-a68e-4d78-b1cd-a191edb8a1b5",
        "value": "goldstarport.qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:36+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3efefe1-b1b6-4394-8531-cdef29cd442d",
        "value": "goldunitpath5.silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "a75f08b9-21db-4cf6-b2f7-c97b8e1642b1",
        "value": "grand6nodehub.cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "85eebe48-673c-4a9a-9c73-3ac6447b23e7",
        "value": "gravit4fluxbox.alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "9239f5aa-a557-437e-9d9c-976059959bf6",
        "value": "greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a17f605-7722-411e-91a2-dfeecb8ac59b",
        "value": "h4rbor-phase.rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2253954-884e-47c6-97c6-77bd0efdadc4",
        "value": "handlerfalc.voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410037",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c22458-cf48-4e41-be32-bacd550d5450",
        "value": "hard5logicbox.basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:37+00:00",
        "timestamp": "1777410038",
        "to_ids": true,
        "type": "domain",
        "uuid": "812630ab-d674-476d-b6d9-2915f0b8968a",
        "value": "haus-1.mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:38+00:00",
        "timestamp": "1777410038",
        "to_ids": true,
        "type": "domain",
        "uuid": "30658e38-75f4-4f76-92c3-206928715b8f",
        "value": "haus-2x.sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:38+00:00",
        "timestamp": "1777410038",
        "to_ids": true,
        "type": "domain",
        "uuid": "2986632a-765c-4bc0-9847-0cb0133ff0f5",
        "value": "haus-4.syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:38+00:00",
        "timestamp": "1777410038",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcf2134b-6bad-49d2-be63-202c3b19ae17",
        "value": "hiddenbyt.vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:38+00:00",
        "timestamp": "1777410038",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b9bad26-7eb1-4c00-ac79-cf856bdd337d",
        "value": "hillwest.mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:38+00:00",
        "timestamp": "1777410038",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf18b33d-89e7-4271-b1d0-32a5f55aacd3",
        "value": "holz-baum-5.tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:38+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdafe921-ae0c-4461-a671-e4a60d14e73a",
        "value": "holz-baum-7k.mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "9203ba26-d8a9-44b4-a69b-a6b475808f93",
        "value": "holz-berg-5.sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a073cbf-3c7d-4d2f-97fe-c4fe309d4460",
        "value": "holzunit3link.mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2dcb3dc-a011-4b3a-b6fe-ed797d050ea9",
        "value": "honestlab.voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "44d7774b-e147-4a46-8019-dbd4e8f5d920",
        "value": "hostfastland.dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "a02b2110-04e7-40ae-b224-159f79a8cfef",
        "value": "hostfastland.novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410039",
        "to_ids": true,
        "type": "domain",
        "uuid": "568a26ce-6bf3-473d-bbd4-276ccbabbcee",
        "value": "hputcl37.pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:39+00:00",
        "timestamp": "1777410040",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1c7205-8b54-45cf-addf-8ba78c771017",
        "value": "htusgm8k.sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:40+00:00",
        "timestamp": "1777410040",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad040a33-a450-4577-996c-8b534876ad9b",
        "value": "ie78lu.greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:40+00:00",
        "timestamp": "1777410040",
        "to_ids": true,
        "type": "domain",
        "uuid": "f73fa6cc-692f-4536-b1cd-c63573c85eeb",
        "value": "if8drhcl.greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:40+00:00",
        "timestamp": "1777410040",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3753a8d-a76d-4cf8-8fae-ffd74d0fec60",
        "value": "incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:40+00:00",
        "timestamp": "1777410040",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1c2125a-b672-4dc7-b01e-0d5ae876ca64",
        "value": "innerflee.rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:40+00:00",
        "timestamp": "1777410040",
        "to_ids": true,
        "type": "domain",
        "uuid": "1879768f-317f-42a9-b92a-5e4e3de56f91",
        "value": "ioszf.qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:40+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "806cdff4-b117-4bc5-b574-201c3a1b1a82",
        "value": "iron-6.vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87fbebb-d19d-4b90-98dd-a11bfd3ed4ac",
        "value": "iron-fire-6s.novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "37b163ed-3d3f-4f7a-a67d-ac40543e5b35",
        "value": "iron5logicway.pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "3311b452-420c-41d5-ad9b-074e3989acb9",
        "value": "iron9siteview.basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "9079e713-8552-46b6-8dc3-363751bd3f6c",
        "value": "ironhausflow2.dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "9affed4f-501c-4a77-94d0-77b1f48fa2a9",
        "value": "ivorystorage.stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410041",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ff2fef7-59c7-4252-bdc3-9b8b1b287ee9",
        "value": "jp4j.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:41+00:00",
        "timestamp": "1777410042",
        "to_ids": true,
        "type": "domain",
        "uuid": "86ca3623-35cf-4d07-b094-43df7764b6a0",
        "value": "judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:42+00:00",
        "timestamp": "1777410042",
        "to_ids": true,
        "type": "domain",
        "uuid": "7224bf59-cd69-4636-a858-f25d1bf9e36d",
        "value": "kalt-5.novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:42+00:00",
        "timestamp": "1777410042",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d50bd54-f16d-4c77-bd4b-5104d1e23014",
        "value": "kalt-berg-2.vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:42+00:00",
        "timestamp": "1777410042",
        "to_ids": true,
        "type": "domain",
        "uuid": "15471246-61b5-4774-8aaf-5e7c310866d8",
        "value": "kel-coreex.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:42+00:00",
        "timestamp": "1777410042",
        "to_ids": true,
        "type": "domain",
        "uuid": "696f996d-f48a-4be3-a5fe-304c0902ad78",
        "value": "kel-fluxor.qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:42+00:00",
        "timestamp": "1777410042",
        "to_ids": true,
        "type": "domain",
        "uuid": "44dfbe8f-98f5-4952-b91d-6ed237585933",
        "value": "kelcrest9ar.sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:42+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "b67a014f-089e-4c87-beea-d72875c7111d",
        "value": "kelcrestet.frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "88cab2da-b2fe-499d-bc9a-112b8522956b",
        "value": "kelforgeet4.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "749477e2-a28e-4364-807b-057aec0564ab",
        "value": "kellinear1.rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ff1f9c9-9783-4ee5-8184-910b01e46693",
        "value": "keltideal.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa9ab97f-31ca-44ff-a1eb-a2604fd1df0f",
        "value": "khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3ebf9e7-6b82-4ee8-afae-96ddded6eeac",
        "value": "kidjo.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410043",
        "to_ids": true,
        "type": "domain",
        "uuid": "34fd41b7-bfd2-4d9f-88ae-9168f2f07425",
        "value": "knyo.vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:43+00:00",
        "timestamp": "1777410044",
        "to_ids": true,
        "type": "domain",
        "uuid": "06e6d919-61ee-4ae4-b956-c6cde94ef54a",
        "value": "kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:44+00:00",
        "timestamp": "1777410044",
        "to_ids": true,
        "type": "domain",
        "uuid": "17e70d75-ed2c-4378-963c-b5fd26158b9f",
        "value": "l4tt1c-index.greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:44+00:00",
        "timestamp": "1777410044",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ddd5952-0f89-4d88-b2b9-7ed3843d1d20",
        "value": "lead4tasksys.silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:44+00:00",
        "timestamp": "1777410044",
        "to_ids": true,
        "type": "domain",
        "uuid": "f00ab9b2-180b-427b-ad6f-81be6d470bbc",
        "value": "leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:44+00:00",
        "timestamp": "1777410044",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bfd2154-dd3f-4be1-b422-642368bd8abd",
        "value": "light8siteview.zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:44+00:00",
        "timestamp": "1777410044",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ca278b4-98aa-4a96-b970-ab03dda947cf",
        "value": "lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:44+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "5335d5a6-5659-4336-b427-5d37ee68c006",
        "value": "linehostunit1.vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c69d65-7979-419f-b14b-5fd7bec25b85",
        "value": "linkholzbaum2.sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "5395557e-dc79-463b-93a7-5aca8f453f78",
        "value": "loadpetitstar.zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6a81a7a-280e-4e7d-856d-6c4213c618de",
        "value": "loadpetitstar3.dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "53a8a788-a0da-40e8-9e24-c02f96d98f7a",
        "value": "loose-mount.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad1fc0bf-2886-497a-a578-8d01a4f9af5a",
        "value": "lumlithex.mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410045",
        "to_ids": true,
        "type": "domain",
        "uuid": "c430875a-d2e2-4d82-9b95-aba1a7016813",
        "value": "lumvaleum3.kyr1vomen.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:45+00:00",
        "timestamp": "1777410046",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca6a16be-fc75-4437-92fc-1093caa30c52",
        "value": "lunar2waveunit.alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:46+00:00",
        "timestamp": "1777410046",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3b3e0d3-2f9e-4870-8c4e-4cd533b37344",
        "value": "lzukd.foot-ricochet.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:46+00:00",
        "timestamp": "1777410046",
        "to_ids": true,
        "type": "domain",
        "uuid": "565c9e8c-c968-4d0f-8c87-79d43deeee7a",
        "value": "m35h1-loop.vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:46+00:00",
        "timestamp": "1777410046",
        "to_ids": true,
        "type": "domain",
        "uuid": "c692c80f-fe44-4b08-a09e-b0cded243461",
        "value": "macro6siteview.alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:46+00:00",
        "timestamp": "1777410046",
        "to_ids": true,
        "type": "domain",
        "uuid": "2dc72df1-53f7-4bdd-95ac-326541bc4fce",
        "value": "massivedisco.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:46+00:00",
        "timestamp": "1777410046",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ee7a6c6-394f-4b5a-9cf3-24136e22d1e7",
        "value": "matrix6pathway.vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:46+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "d577083c-fbdb-44d0-a745-f24b7ce26d36",
        "value": "mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "bae35038-ed83-4811-908e-766f2bb0f585",
        "value": "meta-5umm.qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf8f63d7-29bd-4943-9948-b01d0100ddba",
        "value": "meta-v0ca.sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "6997f316-02aa-4e69-8136-b786fa87baeb",
        "value": "metabluefire.qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "48e263da-c9bc-4680-b39a-ab3e10dae821",
        "value": "metabluefire6.mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bb8c742-d959-4e51-a9d0-c463b8f12b20",
        "value": "mist4wavepath.tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410047",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7e7c6e6-d40b-47ba-8ccb-ce18d247723e",
        "value": "mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:47+00:00",
        "timestamp": "1777410048",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ef8124-b62f-443a-a6b7-139586bbd2fc",
        "value": "mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:48+00:00",
        "timestamp": "1777410048",
        "to_ids": true,
        "type": "domain",
        "uuid": "19494848-5642-4977-bc2e-2985c94b0f5b",
        "value": "mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:48+00:00",
        "timestamp": "1777410048",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ac51318-a229-486e-b2bb-3286b8cd3f14",
        "value": "mooncrest.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:48+00:00",
        "timestamp": "1777410048",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f7e8ee1-ab63-40d6-9893-004d2c2e8790",
        "value": "mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:48+00:00",
        "timestamp": "1777410048",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ac8037c-d244-4fdf-b098-deb9144ed888",
        "value": "neo-payl0.mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:48+00:00",
        "timestamp": "1777410048",
        "to_ids": true,
        "type": "domain",
        "uuid": "32e6554d-4294-4632-b096-c6714fb7b669",
        "value": "neogateway9sys.cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:48+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "896f2ae7-057d-4b94-a4c4-09b2fe719fce",
        "value": "neon2logicgate.silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "b396c4aa-1f6a-4dbb-b5d7-de6d4034cb45",
        "value": "netpetitwald9.novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "37178917-d560-484c-b11e-bfde06c431f3",
        "value": "nodezeitmond.sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5e6b937-6bbe-463f-8336-08810bbe1a49",
        "value": "noir-2.raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ca527b2-2408-48ce-8c58-01bea4f5cdb9",
        "value": "noir-8.tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a1e033e-efbf-448e-a921-0f5bc5549465",
        "value": "noir-9.mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410049",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4c47152-42d7-47e0-8d16-1399ea268b00",
        "value": "noirgoldstar.mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:49+00:00",
        "timestamp": "1777410050",
        "to_ids": true,
        "type": "domain",
        "uuid": "9365c56d-44c0-4234-a06c-4353fbea84af",
        "value": "noirmondsite.mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:50+00:00",
        "timestamp": "1777410050",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd3afeed-477f-4c41-acf4-49c6ced7e7ff",
        "value": "noirmondsite4.qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:50+00:00",
        "timestamp": "1777410050",
        "to_ids": true,
        "type": "domain",
        "uuid": "72d15660-94ea-4b21-98e9-f6de4d1cea63",
        "value": "nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:50+00:00",
        "timestamp": "1777410050",
        "to_ids": true,
        "type": "domain",
        "uuid": "8048c785-bb9a-4584-b318-4ed7a6f2b24e",
        "value": "nor-lithix.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:50+00:00",
        "timestamp": "1777410050",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9976b3f-7cec-4dd2-b02f-99ee317ea433",
        "value": "nor-meshix.mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:50+00:00",
        "timestamp": "1777410050",
        "to_ids": true,
        "type": "domain",
        "uuid": "c47e7810-68d4-4453-b7cc-73078fcb961b",
        "value": "norcore2ix.tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:50+00:00",
        "timestamp": "1777410051",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5ffa4b7-cdef-42ce-ae98-7f59ba03576f",
        "value": "normark3en.shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:51+00:00",
        "timestamp": "1777410051",
        "to_ids": true,
        "type": "domain",
        "uuid": "75a707c6-acfd-4d09-a5c7-4cc8830aee42",
        "value": "novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:51+00:00",
        "timestamp": "1777410051",
        "to_ids": true,
        "type": "domain",
        "uuid": "83634944-15fb-4ed3-87b8-4b271d9090c8",
        "value": "novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:51+00:00",
        "timestamp": "1777410051",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fe9e47d-faf8-4399-bdd9-0326d854e0a4",
        "value": "nubebdn.sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:51+00:00",
        "timestamp": "1777410051",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f2ad1e6-2a52-4f6c-a2c5-2fa4d2d620de",
        "value": "o6iz.rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:51+00:00",
        "timestamp": "1777410051",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b9e84ce-6eb4-4fbb-873c-1e9f8c123c83",
        "value": "oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:51+00:00",
        "timestamp": "1777410052",
        "to_ids": true,
        "type": "domain",
        "uuid": "02308625-748e-43ef-95db-6e1ff9675bec",
        "value": "ob53rv-mesh.greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:52+00:00",
        "timestamp": "1777410052",
        "to_ids": true,
        "type": "domain",
        "uuid": "b90b2357-9420-4a8b-a2c9-f45d5cdcd467",
        "value": "opalview4site.quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:52+00:00",
        "timestamp": "1777410052",
        "to_ids": true,
        "type": "domain",
        "uuid": "d93b80b9-2a33-44a5-b0ff-301e5b67a5b8",
        "value": "open-3n.novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:52+00:00",
        "timestamp": "1777410052",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c6b888c-e92f-46da-9020-9f7979a4a7c7",
        "value": "open-6.raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:52+00:00",
        "timestamp": "1777410052",
        "to_ids": true,
        "type": "domain",
        "uuid": "b874d9ef-1891-44d5-bd77-39235f710430",
        "value": "open-7.tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:52+00:00",
        "timestamp": "1777410052",
        "to_ids": true,
        "type": "domain",
        "uuid": "92c5aa35-0c71-43eb-9c65-13d8c6c3c80b",
        "value": "openmondkalt.mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:52+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cfe6ef1-d220-4778-a596-7a7bad649d0c",
        "value": "orbitmeshpath.quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3ccaf92-a918-441b-89c9-f8b941d7be18",
        "value": "orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b7f71da-ba54-4fa1-91b0-9589d325dc44",
        "value": "packnoirland.raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f88747b-f8df-4279-9fec-b11b8094c291",
        "value": "packnoirland7.vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eace693-0722-4b0d-bf88-db397dc648ad",
        "value": "palbind.judges-spire.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "648bc287-a1de-4661-b99b-9d799958c6b0",
        "value": "pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410053",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2d83389-e7cb-41b7-a130-fb698d558069",
        "value": "parfsdp.sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:53+00:00",
        "timestamp": "1777410054",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f3aa85e-e55d-4407-b914-ca1221f34b81",
        "value": "pastureclien.stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:54+00:00",
        "timestamp": "1777410054",
        "to_ids": true,
        "type": "domain",
        "uuid": "a49f1e75-0ceb-4a07-9ee3-3b21b1b8a84f",
        "value": "pathnoirbaum.dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:54+00:00",
        "timestamp": "1777410054",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5f68258-9319-443f-aba9-1c1539771cab",
        "value": "pathnoirbaum1.zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:54+00:00",
        "timestamp": "1777410054",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae4b9a74-4e7d-4609-bc49-cb229130a191",
        "value": "pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:54+00:00",
        "timestamp": "1777410054",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f95dd14-230c-4010-a0b3-bccf442a2782",
        "value": "pb6cs.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:54+00:00",
        "timestamp": "1777410054",
        "to_ids": true,
        "type": "domain",
        "uuid": "08351d44-6f9d-44de-895f-26e87fb80c59",
        "value": "petit-fire-5.dexis-serv.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:54+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e5b8c15-6da4-4ad5-ba50-7d03359c4631",
        "value": "petit-mond-1.vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:55+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "2483b6d2-3716-45a2-8514-28e8433cd0df",
        "value": "petit-star-8z.sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:55+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "360e0381-4111-45ae-bb14-6684a8a1d5d2",
        "value": "petitwaldnet.dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:55+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "aad0bfcf-063e-4264-be10-55466fd2c34a",
        "value": "pil0t1-mesh.nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:55+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "409a27d5-42ae-4beb-9537-0baa78abbcba",
        "value": "pitchzoneyview.sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:55+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d8eb45b-974d-4e0c-8afe-357c3a836d62",
        "value": "pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:55+00:00",
        "timestamp": "1777410055",
        "to_ids": true,
        "type": "domain",
        "uuid": "34a49fb0-5c13-4cf0-8739-a77a1075eb27",
        "value": "planemeshlogic.vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410056",
        "to_ids": true,
        "type": "domain",
        "uuid": "aac41f20-8456-4f18-a699-be2a1a7d1403",
        "value": "po5ter-node.voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410056",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d50e0cb-3094-4880-8eb3-cf437eb79ed7",
        "value": "point8fluxsys.vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410056",
        "to_ids": true,
        "type": "domain",
        "uuid": "0769f9e4-7c21-4968-90f7-d66ba22dfadf",
        "value": "pointrougesoft.zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410056",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bb163d5-d4d2-4438-8f01-8934ae0ae0b1",
        "value": "pointrougesoft8.dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410056",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d778ffb-efe6-4f1e-800d-d3d86529c440",
        "value": "primeglowunit.zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410056",
        "to_ids": true,
        "type": "domain",
        "uuid": "96a28070-3b26-4707-9675-8b0f2480581a",
        "value": "prism6hostunit.quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:56+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "f49c3a13-8caa-4f4e-9fd4-35beef89e954",
        "value": "proto-hyp3r.mossgrove.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e21bf72-a971-474f-898f-a6e8d432a4f0",
        "value": "proxyfastzone.cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "023175b2-9672-4642-af05-7e1ae72ba9c9",
        "value": "public-shoot.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "aff5dea7-1fbc-4941-854d-eaf77c0f4065",
        "value": "publshi.tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb470fcd-37df-468d-89f3-9df7fb377405",
        "value": "pulse8sitebox.quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "df1f02f2-b6e1-4262-aaf3-a6c05246988c",
        "value": "puresyncbase1.pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410057",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5294778-126d-4e0b-85c0-cccebb4abd4f",
        "value": "qen9vital.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:57+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "253c635c-e4ad-459a-9e9c-8ad4231d248f",
        "value": "qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:58+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "07403ae2-d9b6-41e4-880c-c90c5b7d65e7",
        "value": "qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:58+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bd76886-927b-4235-8632-ef6f6e77452e",
        "value": "qncd.nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:58+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "74001cc7-66b9-46fc-9cf2-b927a3394b99",
        "value": "quant9wavegate.quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:58+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "496102f8-6270-420d-9f1f-cccc761d266b",
        "value": "quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:58+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "d84f9f24-c2dc-4b8d-a43c-69576bf40d06",
        "value": "quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:58+00:00",
        "timestamp": "1777410058",
        "to_ids": true,
        "type": "domain",
        "uuid": "c03eb0ef-13f3-4a31-8250-f6beb1cae6b6",
        "value": "queryspecimen.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410059",
        "to_ids": true,
        "type": "domain",
        "uuid": "29aae44d-9f4a-4be7-8bfd-e4b19ced535f",
        "value": "queuedirect.tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410059",
        "to_ids": true,
        "type": "domain",
        "uuid": "6feb6aac-80bb-4b0d-8014-9865b2699fbe",
        "value": "quor-draet.leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410059",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6c8c83c-bd5f-4cbf-8c42-26369f208805",
        "value": "quor-meshis.vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410059",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ccc0dde-d9c2-4ba4-baed-ecf173f087ee",
        "value": "radiant7path.orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410059",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb7bd9f5-f33b-481a-b5cc-4331edbc6be0",
        "value": "rapid8wavenet.pixelstormbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410059",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca374980-9837-43fe-b469-b375865b7e14",
        "value": "rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:00:59+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "19796a0f-b745-40bb-999d-8404c9dca78d",
        "value": "raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "e849d14b-5ee2-4937-9bb9-6caa92b14448",
        "value": "raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "868e8fbe-c857-471e-b7c8-12f3f3d0a173",
        "value": "reed8-drive.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f344bfd-6b68-46b2-8bf8-ba71bff65bf6",
        "value": "reelfla.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "a719670b-4c28-4ad7-a133-f728a0cb4210",
        "value": "refinesail.shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a3a2701-eb6f-4384-9e61-c6c7f6261269",
        "value": "rlkz.stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410060",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2a8c39a-3502-440b-98c3-d237f01a22c9",
        "value": "rn3tric-grid.sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:00+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb14f975-96a2-4418-b30b-62fb112c9f32",
        "value": "rockmeshunit.basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "d04b4a9a-a1ac-4e6e-a92e-27a05ce77beb",
        "value": "rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ce067e3-54f5-4cbf-a378-c43f4c1fa955",
        "value": "rouge-4.novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "328d86f9-634d-46c2-bef9-a1c31a3896d9",
        "value": "rouge-9v.vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "23bfc6cf-e6ef-47b1-834f-26dd8eac245b",
        "value": "rougesoft9app.dexisnetflow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fae5954-a110-4d8f-a9fd-45c520f88a51",
        "value": "rqhk6he.stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410061",
        "to_ids": true,
        "type": "domain",
        "uuid": "de2d9fca-99c7-49e7-9a58-d4f79f77ebf9",
        "value": "runvva-route.lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:01+00:00",
        "timestamp": "1777410062",
        "to_ids": true,
        "type": "domain",
        "uuid": "264a0a69-a86a-41db-aafe-05365847a003",
        "value": "rydr.vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:02+00:00",
        "timestamp": "1777410062",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb0966f8-1116-490e-85cf-fa37ac5b505a",
        "value": "sand6tasksys.canyonsyncgate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:02+00:00",
        "timestamp": "1777410062",
        "to_ids": true,
        "type": "domain",
        "uuid": "98ab7ccb-096b-47e2-9d85-7a6fca73b201",
        "value": "scalezoneyview.vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:02+00:00",
        "timestamp": "1777410062",
        "to_ids": true,
        "type": "domain",
        "uuid": "70d538da-ba20-4595-9483-1a04b52d2400",
        "value": "scanvertzeit.raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:02+00:00",
        "timestamp": "1777410062",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c875583-a52f-4d30-a81a-0f569d61adf8",
        "value": "scanvertzeit1.vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:02+00:00",
        "timestamp": "1777410062",
        "to_ids": true,
        "type": "domain",
        "uuid": "318ee5c6-70e8-437f-a9aa-da4648132f06",
        "value": "sche9-track.mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:02+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "eddb041f-e6df-4528-8870-bea18d826279",
        "value": "schem-mark.sleazyhe2ded.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "d83f75ed-e54a-4aeb-86e6-7ae2059ee238",
        "value": "sercresta4.rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c721cb2-4890-462c-8f0c-7ba8398aa598",
        "value": "serlineis.frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc2204ee-8f3e-455a-b678-b0bd106d176a",
        "value": "shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "c770da97-ac12-4fc7-9571-76f52e2e46bd",
        "value": "shield-sile.sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5ec39e8-a4b6-4570-9a46-62ac621e1d2d",
        "value": "shieldpurelink.cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410063",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae58e431-f07a-4c08-ac9b-bddb93df8ecb",
        "value": "shinenetview.quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:03+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "688f7143-2f01-4147-b6d3-c30327789a12",
        "value": "signalwestport.cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2b6cf0e-3abf-41c1-a648-5f05b375581a",
        "value": "silicon7point.silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "9878baf0-26a5-4d2c-840e-973c16d4d5f9",
        "value": "silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8fdf1ca-96d4-4c63-9add-55a87b8c05f9",
        "value": "smartmesh1sys.orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "c43a5723-b47d-4a4a-a96d-69b809594241",
        "value": "soft-5.vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "154ed1bb-b1aa-4311-8b9f-2b68d85bf38b",
        "value": "soft-land-1.novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410064",
        "to_ids": true,
        "type": "domain",
        "uuid": "67af21a0-3be5-41d6-a343-0d7511351271",
        "value": "sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:04+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c9e2533-bb53-4a0e-9db1-a6c239b3c584",
        "value": "solarpointnet.alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "1efbff37-f5af-4434-8715-179a828cde01",
        "value": "solforgeal3.lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "91f350b4-1b97-4bdc-b5e7-315c8fdf6060",
        "value": "solidpathlink.basaltlogicnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "77b92970-7070-4423-b7ac-08e644228806",
        "value": "sonic4wavehub.sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "222dd4d9-2f21-4fde-8ebd-949e28d9919d",
        "value": "sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "618757f4-be59-4914-bc31-cfcf067b3992",
        "value": "sortdynamic.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410065",
        "to_ids": true,
        "type": "domain",
        "uuid": "07720bf1-aab4-43a2-b7b4-2f0745835fb5",
        "value": "sparklogicway.quartzprismcloud.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:05+00:00",
        "timestamp": "1777410066",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae62171d-3a05-479a-92d7-b38bfc60d502",
        "value": "srvvertland.sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:06+00:00",
        "timestamp": "1777410066",
        "to_ids": true,
        "type": "domain",
        "uuid": "6beb3deb-85fb-480a-bea9-f28455d6129b",
        "value": "stagesteril.pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:06+00:00",
        "timestamp": "1777410066",
        "to_ids": true,
        "type": "domain",
        "uuid": "775c4f64-4c34-488c-be5b-ca2b9e009874",
        "value": "staticflowsys.quantumpathnet.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:06+00:00",
        "timestamp": "1777410066",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dac7af5-b3ac-40e4-b4a1-78dd71299359",
        "value": "stellar5bitnode.orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:06+00:00",
        "timestamp": "1777410066",
        "to_ids": true,
        "type": "domain",
        "uuid": "14fa9002-8e3f-4186-8f58-6c455c0dcc8f",
        "value": "sterilebundle.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:06+00:00",
        "timestamp": "1777410066",
        "to_ids": true,
        "type": "domain",
        "uuid": "65b1745f-5f4c-400b-b8d8-c7bb5eb1d10d",
        "value": "stoneflare.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:06+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2b6caca-e907-496e-af4f-f62484883a94",
        "value": "storm8taskhub.tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "44625003-801a-4670-826a-4ebc82ea2728",
        "value": "stormloader.shadowpeak.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "308f5881-2bed-459f-8c59-7715d2f6d7ce",
        "value": "sub-5ound.leafspring.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9a446e0-6371-47e7-8c65-e5ab98472967",
        "value": "subtledust.mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dfd6074-bf5d-4044-aabf-628c2953a8e9",
        "value": "sunmeadow.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "3686e628-1410-4c9e-a70d-514dbe34ae16",
        "value": "surve-chain.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410067",
        "to_ids": true,
        "type": "domain",
        "uuid": "34fcfcd9-ef78-43f6-a0cc-dfe7e60dc3e4",
        "value": "swift5tasknet.zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:07+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c38426f-b009-4737-b11e-8be5f4114cce",
        "value": "swiftbann.voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:08+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d17668e-b0ae-4a0e-8537-dbcf240157e4",
        "value": "sx56boo.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:08+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d3bae3a-fcfd-466a-be42-99c957ee7ef3",
        "value": "sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:08+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "98938c85-218e-4b86-91a4-ee048fa786c8",
        "value": "sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:08+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "eabe6870-776a-40b2-8d5b-1e432bd2dbcc",
        "value": "sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:08+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcc2bb46-6587-415b-bf2a-646526fac5b0",
        "value": "sync8kaltberg.sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:08+00:00",
        "timestamp": "1777410068",
        "to_ids": true,
        "type": "domain",
        "uuid": "cad3072b-6177-4468-b560-9c8c3e85f9f5",
        "value": "syncbergzeit5.mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410069",
        "to_ids": true,
        "type": "domain",
        "uuid": "15e003c1-1dd1-4ac2-a0ce-10a783bab52d",
        "value": "syntarepo.qim8vorel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410069",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cff60a8-a575-4c97-955c-06b25df56811",
        "value": "syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410069",
        "to_ids": true,
        "type": "domain",
        "uuid": "66045ecc-0762-49cd-a1a9-1fe4189538a9",
        "value": "sysvert7holz.mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410069",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab471439-4f9d-40bd-81a2-c115d2c1f137",
        "value": "sysvert7holz.qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410069",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf3ec43b-3f44-4db3-bbab-f5a286cec79d",
        "value": "tal-crestis.greenbloom.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410069",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2baa9a8-231d-4ede-8b8d-dcda1f086ab3",
        "value": "tal-draet.khudrukmumb1es.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:09+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4e2b684-c6b7-4e78-ba06-36af12791190",
        "value": "tal-lithix.tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f2bf7b7-a6dc-48d6-8a24-f4392502a0d8",
        "value": "tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "563e1aca-6b55-4df3-bcf1-4c8731b1fdf1",
        "value": "talnexal2.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc0634d5-a8a8-4600-b454-8ed9467f6786",
        "value": "targ3t9-panel.rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "ecc4636d-2b5b-4610-b936-38c79d67acd7",
        "value": "taskironland.dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "49b966db-1fa6-4872-a6bc-186c84c68c04",
        "value": "taskironland.zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410070",
        "to_ids": true,
        "type": "domain",
        "uuid": "81a9e75e-1b10-4e0c-8b4a-d635bda11463",
        "value": "tempohostlink.alphafluxnode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:10+00:00",
        "timestamp": "1777410071",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9dc461e-1207-4337-8356-8370fd920835",
        "value": "tj0x.eggman8eisha.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:11+00:00",
        "timestamp": "1777410071",
        "to_ids": true,
        "type": "domain",
        "uuid": "35bc319c-98cd-4226-9bb3-1528e748412b",
        "value": "tonelogicgate7.sonicwavehost.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:11+00:00",
        "timestamp": "1777410071",
        "to_ids": true,
        "type": "domain",
        "uuid": "c12ae6c6-9bc3-4645-90f7-42ba1fa4f33f",
        "value": "tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:11+00:00",
        "timestamp": "1777410071",
        "to_ids": true,
        "type": "domain",
        "uuid": "c852be38-3eed-4825-ab58-fdb3068d214b",
        "value": "tpxovsr.lightforge.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:11+00:00",
        "timestamp": "1777410071",
        "to_ids": true,
        "type": "domain",
        "uuid": "c092633f-944b-48cb-8c8e-44099b657ebe",
        "value": "traile-proc.oasis-reimburse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:11+00:00",
        "timestamp": "1777410071",
        "to_ids": true,
        "type": "domain",
        "uuid": "da9395a0-ac5b-4cec-9073-633f11d71247",
        "value": "trendscan8meta.cryptovoxelsync.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:11+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "dabcac58-3c88-474e-97ab-f9a3567c7195",
        "value": "triggeveri.voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "022579d3-9b4b-4ddc-82f4-31252fb1e315",
        "value": "trimeshum.exhumat8urgle.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "83ee5b03-c92f-4033-9650-1ffab34ebfb9",
        "value": "tundraflowunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "00b833c3-22df-492a-bb4b-eca7d8c11b44",
        "value": "unitkaltwind.qivorpaknode.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "818dcf2b-fd2c-4c28-8641-3e50a92739e8",
        "value": "unitkaltwind2.mivorpulsegate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcdec573-a184-4731-b468-63bf7bb0d7ac",
        "value": "urbanhostgate.orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410072",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a4f9ee6-7a1d-432a-b7cb-56871c02a1be",
        "value": "userfastzeit.dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:12+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee21e953-0137-4f15-9897-ea0842e14002",
        "value": "userfastzeit.zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "a556c291-3160-4f3b-be6a-25c8e8afa448",
        "value": "v0ya1-cast.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "eaa7be47-64d5-4b23-99d4-30e90bd15106",
        "value": "vastlogicweb.orbitmeshunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "28abe778-94b3-41ce-88fb-fdf2fc69b341",
        "value": "vbl60o.sydo9marel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "87ceeff8-a7d1-4027-9eb7-8fac9a2982e1",
        "value": "vector3sitehub.vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "2da372c2-1998-49ab-928f-f48105e0644c",
        "value": "vectorpointsite.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410073",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4239ed6-c6fa-4c9b-90d4-0244b7f8354b",
        "value": "velcrestos8.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:13+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "bbb2c103-d9b1-4025-94a1-0dd3c2e791b5",
        "value": "velvetlayout.rosevale.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:14+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce963c86-5acb-420a-9ce9-04f6d42d0dc4",
        "value": "vert-1.sylix-host.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:14+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "059c1cc8-824e-4bdb-b5be-6817971ae223",
        "value": "vert-2k.tal4miren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:14+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "07817efd-61c9-42cf-bd70-2a5f2c3dd595",
        "value": "vert-4.mivon-tech.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:14+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "85794ca9-382f-44a1-ab71-115e439815ef",
        "value": "vertbaumview.mivontechzone.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:14+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "b93fb6c6-e7e1-411b-9b1a-0b3592e2703f",
        "value": "vex7lurin.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:14+00:00",
        "timestamp": "1777410074",
        "to_ids": true,
        "type": "domain",
        "uuid": "988715d2-1b54-4824-9023-64c59c2eeb44",
        "value": "viewdarkberg.dexishostpath.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410075",
        "to_ids": true,
        "type": "domain",
        "uuid": "b91c2499-1ef6-488f-b802-6e8d1095400a",
        "value": "viewdarkberg9.zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410075",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9c31741-680d-44bc-990d-65811082e73d",
        "value": "vitalpalette.mer4talon.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410075",
        "to_ids": true,
        "type": "domain",
        "uuid": "2495e5ef-fee1-4587-a21d-e0325e7df056",
        "value": "vividmeshflow.zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410075",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ca98212-09cf-4d80-97f7-5a5fd8754823",
        "value": "vmbspptn.tov6larek.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410075",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc515bbc-36a4-43b1-ad34-c4e8eb39a647",
        "value": "voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410075",
        "to_ids": true,
        "type": "domain",
        "uuid": "49354cab-10cd-4b38-92ca-1209befb5d2e",
        "value": "vok7laren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:15+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "38f2a87b-f46d-468e-97ea-201c0f9609a1",
        "value": "vordraor5.nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad40275b-b095-4e19-bd78-113e107fe1e9",
        "value": "vorlith8on.sokla3ren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9a1cde2-77d4-4d88-94b7-ce721f95ed53",
        "value": "vormarkor.frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0b3e96e-a13f-41c7-8645-7a187532203f",
        "value": "vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2d9e72c-a67b-4f6d-8e34-18ce22b86264",
        "value": "vortideum.rax2liven.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "a727de8a-68d6-473b-ab89-c3ae5435c943",
        "value": "wald-baum-9.syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410076",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f292880-471b-4d8e-9a44-317e2fa2d518",
        "value": "webopenmond.sylosyncbase.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:16+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "e915e118-c7fa-49d6-9fbe-34e5abb4f74f",
        "value": "whnmkwvj.frosthaven.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d260b16-4554-414f-82af-77fd795cab24",
        "value": "wildpathbase.cyberpeaklink.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bb004a7-dc76-41eb-a6b8-5817c930eed0",
        "value": "windpathgate.canyonsyncgate.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "12a4f677-8bcc-4ca7-8a6d-88a357b7ec28",
        "value": "winopenhaus.raxonviewunit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "594e64f4-739d-434a-923d-c28403b0f6ec",
        "value": "winopenhaus.vortextaskbit.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3fb3c2b-7539-400c-aae6-e6da57f8b41b",
        "value": "wwj2alum.pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410077",
        "to_ids": true,
        "type": "domain",
        "uuid": "33f6e109-7740-4d7c-91ac-9b94c46c4cb0",
        "value": "x9xus7.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:17+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "d426d515-6007-441f-91f6-4b05c8904f08",
        "value": "xrcbdu11.asso7tunexpl.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:18+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "0697c9c7-7cdc-4c1f-8171-fde10fb8b111",
        "value": "yaisxm.pares-system.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:18+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "37dc9cc9-4120-4d3f-a701-c8f0ee20fa68",
        "value": "yj97hpfx.incub-teahouse.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:18+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "5a730c47-f7b5-481f-be25-00837101050e",
        "value": "yxhe.voidstream.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:18+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "20bd11c1-3225-46e9-a78e-9959e1abd618",
        "value": "zbh50.nol7sirex.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:18+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "cba737f2-e38b-4a6f-a45d-e63363572e11",
        "value": "zeit-5.raxos-node.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:18+00:00",
        "timestamp": "1777410078",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c0659f2-79c2-4a36-a2c3-cd87d4f1247e",
        "value": "zeit-berg-8.novis-data.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410079",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f0c9206-e46e-4eec-8ff4-5afc138d8db2",
        "value": "zeit-land-7.syr2moxel.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410079",
        "to_ids": true,
        "type": "domain",
        "uuid": "14fe7b43-bfaa-4055-a994-cc37fdddeaf5",
        "value": "zenithflowgrid.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410079",
        "to_ids": true,
        "type": "domain",
        "uuid": "62ecf3bd-b2d9-4dd6-82f9-b6ac2f226a44",
        "value": "zentideen.pax4moren.in.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410079",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bf00fd1-6bca-4cd1-b8d0-47d25df1e55a",
        "value": "zexislinkhub.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410079",
        "to_ids": true,
        "type": "domain",
        "uuid": "613606d8-1d64-4f14-97f8-08ecda743cd2",
        "value": "zincflowbase.silicongateway.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410079",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0ba5db4-b77d-4388-b6fa-e4d1f4d06c62",
        "value": "zonebleuzeit1.novismetaweb.garden",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:19+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "4be0bb30-c86d-44e6-9745-c5b99d69c6ff",
        "value": "postbank-zahlungen.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4501d8d-bd6e-406a-bc3e-6ddae87831db",
        "value": "primary-device-correcting.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ec30083-d5ab-4674-a8bc-4435c79f48f2",
        "value": "0ktjhhv0.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cc211d7-6572-4326-948d-2d97a0164aea",
        "value": "11abetapps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc295eb8-5dec-42c6-b33d-3837aef4af91",
        "value": "12845496.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "35f3cbb1-6f0b-44d9-b8bd-0fc08a5dddf1",
        "value": "17.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410080",
        "to_ids": true,
        "type": "domain",
        "uuid": "5364f5c6-aa0e-4e83-80e5-3a54981b90a2",
        "value": "1x2763b12xtn12x3.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:20+00:00",
        "timestamp": "1777410081",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c1d620c-ad2e-447c-8bfe-70f6f0d3b4b7",
        "value": "232.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:21+00:00",
        "timestamp": "1777410081",
        "to_ids": true,
        "type": "domain",
        "uuid": "77c001f6-4a42-4d54-9292-31fbb52be628",
        "value": "3749.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:21+00:00",
        "timestamp": "1777410081",
        "to_ids": true,
        "type": "domain",
        "uuid": "079395ea-0aeb-49f6-b8dc-5d48e032400b",
        "value": "62128486.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:21+00:00",
        "timestamp": "1777410081",
        "to_ids": true,
        "type": "domain",
        "uuid": "62705504-e28f-4984-be4a-a47932451ca3",
        "value": "66531189.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:21+00:00",
        "timestamp": "1777410081",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7ed2fbf-2ab2-4867-a679-58221cc75d8f",
        "value": "68571745.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:21+00:00",
        "timestamp": "1777410081",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6d6f9d5-c1cb-4531-a2d6-c1c20797f940",
        "value": "71556583.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:21+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "47f4c895-ddc8-4754-98c1-4d286eac8870",
        "value": "958.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc570394-af04-4bf0-9c22-c63c24bd9f3a",
        "value": "accaccess403-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8e9fb37-711e-4a98-a7dd-8efb08d66382",
        "value": "accountparibas.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "65336a04-2692-419f-bda9-624c093fd006",
        "value": "ae-topup.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1f8a49c-7949-4c14-b4ab-0b52ca3203ca",
        "value": "andromax.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "81e3a6d8-f820-4c82-9d16-6a4a8d9153a8",
        "value": "apartamentairbnb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410082",
        "to_ids": true,
        "type": "domain",
        "uuid": "068f2743-ff7b-4aa5-bbca-3bd0baa1b23d",
        "value": "apartamentsspainupd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:22+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1147135-5f11-4327-ad93-4a3a19abf7ec",
        "value": "apartamentupdmarch.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:23+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "248a203b-25f1-4e24-9b7f-ece2f38e694f",
        "value": "apiohlcmetrics.acy.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:23+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ee7a75b-00c9-4891-97bb-a4cf45744e85",
        "value": "appres-house6321.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:23+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "9996e4c3-528c-4a08-8a4c-70f7a543d7e6",
        "value": "ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:23+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "659baa21-b089-4592-8189-0d51b1f6d631",
        "value": "authstep518-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:23+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "d86d2ec5-16ba-4d6f-b905-f8c280d970f7",
        "value": "authstep862-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:23+00:00",
        "timestamp": "1777410083",
        "to_ids": true,
        "type": "domain",
        "uuid": "93c3abc6-792b-49ca-903e-23d536c31eb1",
        "value": "authstep902-agoda.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410084",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e24f667-84d9-41b5-ae83-54a6d1befa85",
        "value": "bahissitelerin.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410084",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef9b0d37-44bb-4835-8931-098d85abbf46",
        "value": "bayhill-inn.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410084",
        "to_ids": true,
        "type": "domain",
        "uuid": "95346830-e4aa-44d5-ab44-856c82c6651e",
        "value": "bestwestern-id-de49cor.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410084",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee9fb13d-0161-42cf-986b-5efae10d5ba5",
        "value": "bestwestern-id-hb42hss.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410084",
        "to_ids": true,
        "type": "domain",
        "uuid": "982844c7-c41e-412f-9f6a-73c50ce921d6",
        "value": "bestwestern-id-it83gop.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410084",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb23db83-47d9-4782-8d02-e389d5be430b",
        "value": "bestwestern-id-ls85ulb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:24+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "0055880b-264d-4b34-8785-8c8ac43f9496",
        "value": "bestwestern-id-ps63lks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a223cd1-6dd3-457d-aff8-3dab4e826ec6",
        "value": "bestwestern-id-rt92sfi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "db995926-cc1e-4b1f-ac94-b7d66e52dc2e",
        "value": "bestwestern-id-st14vsa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7a82bbb-f446-438e-aa34-530650fe1b7c",
        "value": "bestwestern-id-vx53sdu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "f16ca372-5f69-4869-92bb-3c34316f2ef6",
        "value": "bestwestern-id-ws13tls.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "26bdb71e-c74a-45d1-a761-4d145b72d2ac",
        "value": "bestwestern-id-yv76nca.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410085",
        "to_ids": true,
        "type": "domain",
        "uuid": "f13af65c-f11e-456c-adaa-aea84e4318bd",
        "value": "bonrkyotostation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:25+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5d2e034-c15a-4d78-a1c8-4417bc629bc2",
        "value": "booking-hotelreserv.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "9149ddf5-398f-4d0f-9316-d5fd92680d54",
        "value": "booking-id31264737.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "43b9f407-972d-44fd-916b-88063ebd6079",
        "value": "booking-id5434295.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "eccaf2b6-435d-4b4f-b259-145d50d3d06d",
        "value": "booking-update.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "de33ce52-1bd1-4f4d-8e4c-6417de9d2cb1",
        "value": "bronsparps.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a17370b-3cb1-4e00-92f6-66b9b7cb269a",
        "value": "casa1xbet.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410086",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f02029a-054a-4be2-b946-3b3b07c5109e",
        "value": "cdn.bearatlantic.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:26+00:00",
        "timestamp": "1777410087",
        "to_ids": true,
        "type": "domain",
        "uuid": "82839eba-6ceb-4020-a2fe-aa5933346786",
        "value": "cggqe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:27+00:00",
        "timestamp": "1777410087",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3ec18fd-8c67-4400-9625-f8bf3d68aa9f",
        "value": "check-gueststay3499.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:27+00:00",
        "timestamp": "1777410087",
        "to_ids": true,
        "type": "domain",
        "uuid": "b38c7ade-5bf4-452b-b61b-46bba1e0db16",
        "value": "checkguard306-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:27+00:00",
        "timestamp": "1777410087",
        "to_ids": true,
        "type": "domain",
        "uuid": "55fbcd18-1119-477b-81da-b297f7659de5",
        "value": "com-3h5frw.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:27+00:00",
        "timestamp": "1777410087",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cdf3a08-d164-43d1-8a2d-d5c3e50ed915",
        "value": "com-5h5kwh.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410088",
        "to_ids": true,
        "type": "domain",
        "uuid": "b290e4fa-5cbf-4375-b3ee-eca34484320e",
        "value": "combuechen-gmbh.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410088",
        "to_ids": true,
        "type": "domain",
        "uuid": "b978c2fd-f72b-421f-95af-df48f13fcd43",
        "value": "confirm-id4044864.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410088",
        "to_ids": true,
        "type": "domain",
        "uuid": "33e3edd3-ea22-4be1-87c8-b46c9fbefba3",
        "value": "confirm-id4044865.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410088",
        "to_ids": true,
        "type": "domain",
        "uuid": "e05ae2ca-2b42-4bb0-916f-e3bb6c87b4ef",
        "value": "confirm-id43254.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410088",
        "to_ids": true,
        "type": "domain",
        "uuid": "36ca8046-d932-4f14-b493-b03534e1b8cb",
        "value": "confirmation-id138.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410088",
        "to_ids": true,
        "type": "domain",
        "uuid": "a889b870-ec5b-46f1-a3d2-ce6987200f22",
        "value": "confirmation-id973.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:28+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "281076e0-c85f-49df-b130-e736e3020a1a",
        "value": "confirmhotelress.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "92c030d3-fe62-473c-a81d-a667bf08641d",
        "value": "confirmid112-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "1376abb4-4665-44aa-a6ea-9b847a83b313",
        "value": "cristinatirollo.com.br",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "2505c494-c8a8-4d15-994e-7879f329c304",
        "value": "ddos.st",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2923cb4-0b3a-4fb6-bbb1-aa50c4180ad2",
        "value": "details-reservation-id496401.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a1606bd-0ed4-4e92-90e4-85e9c8741a5e",
        "value": "details-reservation-id55883.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410089",
        "to_ids": true,
        "type": "domain",
        "uuid": "51c6c994-1efc-42be-ad66-155c3b56110b",
        "value": "details-reservation-id857396.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:29+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc552c69-02be-427d-ae35-00ef7a33eb9c",
        "value": "directhotelreservations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b2f0c3a-d81f-4146-8282-167183a52843",
        "value": "dm-oybek.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "de6c7245-5d3f-429f-a5a6-49ecd2ffe318",
        "value": "eduris.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "24101849-55e8-47b8-9c7e-79e39bf7b225",
        "value": "eff.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bf12a92-a848-49c9-b06a-fc4f20699dab",
        "value": "egitos.com.br",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "deaa12b1-75e5-4ed9-924c-f3ed46ad5a2e",
        "value": "elmridgecos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410090",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc40a6c4-969a-437f-b0b1-2a80baaf58cc",
        "value": "eu362784.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:30+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "4630495b-6dcc-44e9-a7db-60d506c048f3",
        "value": "fast-hotel-acces.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:31+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8c8df62-44ae-47f3-891a-2cce54c546d0",
        "value": "fastbook334-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:31+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfac7285-33dd-40ad-9626-d9d150d0cc8d",
        "value": "financieelwonder.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:31+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc873cff-4588-4acb-b6e4-2693427044b1",
        "value": "fundforum.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:31+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "c202b7c0-c90d-4551-badf-3faad3e5b76a",
        "value": "gegevens-tele-net.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:31+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "588535fc-5cbd-4919-ad81-626468ebd01e",
        "value": "germany-stay-update.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:31+00:00",
        "timestamp": "1777410091",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f078094-9efd-4d4c-9a1d-a5e76a892dd0",
        "value": "gueshostwelcome.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410092",
        "to_ids": true,
        "type": "domain",
        "uuid": "0fbb4f94-0b49-4ca6-a4ef-bbe2de3cd492",
        "value": "guest-br-verif1-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410092",
        "to_ids": true,
        "type": "domain",
        "uuid": "f08d4b19-513d-477a-9204-ec4029b5754b",
        "value": "guest-conflrm-page.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410092",
        "to_ids": true,
        "type": "domain",
        "uuid": "8edacc22-2c38-474e-ab14-7be5d2d408c4",
        "value": "guest-resarvashionhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410092",
        "to_ids": true,
        "type": "domain",
        "uuid": "b21b5d84-ed47-44ec-ac5e-a3e13369162a",
        "value": "guest-resarvashionhubk.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410092",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aa32ae9-ed83-4fe5-be6e-483cbc00275c",
        "value": "guest-reservashionhubz.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410092",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c77656f-fd65-4409-be03-1cd9aeaab10c",
        "value": "guest-rezervation-hubb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:32+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "6566c62b-7951-4510-b89a-ed080b4ba669",
        "value": "guest-stay-app.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "41cc77d2-8569-4b1f-b9b6-ec1024313500",
        "value": "guestarrivalaccesshub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "84aa80cd-c85d-4a1b-9d78-58d48f4fdcb5",
        "value": "guestarrivalcenter.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ba1fc29-0626-47f6-89e3-80ad6d985dd5",
        "value": "guestarrivalcentral.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "e77ee0e3-02c7-4ac1-bd45-b336864949ff",
        "value": "guestcheckin-39249.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7e453c9-8944-4b39-b2fb-a6c082d86ad3",
        "value": "guets-reservashionhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410093",
        "to_ids": true,
        "type": "domain",
        "uuid": "72224179-25e7-46f2-8f6e-a9ee84f77d4a",
        "value": "hemsopfv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:33+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b9c43aa-0e98-4510-b555-2e24c1ab2e1b",
        "value": "holder087-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7ff2841-6f0e-4847-ae54-13e2206544cf",
        "value": "holder207-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "143f44f7-ee19-4297-bf59-269575fd5f88",
        "value": "holder352-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b804660-5424-49d9-a568-425dd9f25923",
        "value": "holder582-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a0b76ff-73fe-41aa-aaed-7d5838365869",
        "value": "holder729-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "8097b637-664f-4e10-a563-e7f8c50d4283",
        "value": "holdgate902-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410094",
        "to_ids": true,
        "type": "domain",
        "uuid": "c52ed3d8-1f1c-4264-a7b3-08810f936409",
        "value": "hotel-guestverif-br-status.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:34+00:00",
        "timestamp": "1777410095",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a5f0c12-ef4a-445b-9564-debd9fd563dc",
        "value": "hotel-stay531213.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:35+00:00",
        "timestamp": "1777410095",
        "to_ids": true,
        "type": "domain",
        "uuid": "61a9eee2-2c08-4f10-b9a3-8cbc965544ec",
        "value": "hotel-stay91223.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:35+00:00",
        "timestamp": "1777410095",
        "to_ids": true,
        "type": "domain",
        "uuid": "127a7690-84b8-46f7-8620-38faab6e59bf",
        "value": "hotelabitarenamba-west.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:35+00:00",
        "timestamp": "1777410095",
        "to_ids": true,
        "type": "domain",
        "uuid": "65ad8107-54c5-4527-abd9-ab85718714d2",
        "value": "hotelbookingcheck.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:35+00:00",
        "timestamp": "1777410095",
        "to_ids": true,
        "type": "domain",
        "uuid": "79c45de3-e0df-4fa6-8695-273d8034fb2e",
        "value": "hotelidealit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:35+00:00",
        "timestamp": "1777410095",
        "to_ids": true,
        "type": "domain",
        "uuid": "3638adb7-7ac7-477b-bf2c-2dbc12bff91c",
        "value": "hotell-verificacao-br.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:35+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "1975e912-5cb9-4b51-bd59-9307108de7da",
        "value": "hotelmondoncekyotogojo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "e62a312e-e9e3-421c-8636-e359f41ac879",
        "value": "hotelromelive2026.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "d37ccf7a-24e6-4dfd-8be0-a5b001d577dd",
        "value": "ibqagagu.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "25134a56-e653-4595-aa55-4852ec001569",
        "value": "id.casa1xbet.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "e80aec3c-c756-4ad4-a106-dd5744819367",
        "value": "images.hauzisha.co.ke",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eec02ae-77d3-4c80-aab9-ef05521b42df",
        "value": "inattv1330.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410096",
        "to_ids": true,
        "type": "domain",
        "uuid": "09dcbb98-44be-4953-8530-2754ac22702d",
        "value": "itprint.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:36+00:00",
        "timestamp": "1777410097",
        "to_ids": true,
        "type": "domain",
        "uuid": "27e9b9f5-6b90-475e-af70-00659842edae",
        "value": "jensovet.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:37+00:00",
        "timestamp": "1777410097",
        "to_ids": true,
        "type": "domain",
        "uuid": "91497244-abb2-412a-917c-c7a7a6972bf0",
        "value": "jtoezhl.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:37+00:00",
        "timestamp": "1777410097",
        "to_ids": true,
        "type": "domain",
        "uuid": "62c4f1dd-3da7-4d96-993e-97d697c24626",
        "value": "k8s.flmb.ivilla.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:37+00:00",
        "timestamp": "1777410097",
        "to_ids": true,
        "type": "domain",
        "uuid": "1071bce5-8f45-4ca1-9d76-ebe6fa077649",
        "value": "karakalpak-palace.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:37+00:00",
        "timestamp": "1777410097",
        "to_ids": true,
        "type": "domain",
        "uuid": "56a14b36-e6d9-4b1c-a973-3260701e05ca",
        "value": "kungrad.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:37+00:00",
        "timestamp": "1777410097",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc81448c-8dd6-467a-8f80-1abefb6b336c",
        "value": "legis-librolaw.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:37+00:00",
        "timestamp": "1777410098",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ad4f118-0995-4e2b-b827-d44ce5fca048",
        "value": "luckymergebingo.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:38+00:00",
        "timestamp": "1777410098",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea817fc1-140e-4151-9898-37a076a12aca",
        "value": "mail.atnow.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:38+00:00",
        "timestamp": "1777410098",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f6e1771-5ae0-4b30-b6a0-6da024de6a6a",
        "value": "mail1.details-reservation-id857396.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:38+00:00",
        "timestamp": "1777410098",
        "to_ids": true,
        "type": "domain",
        "uuid": "72a47253-9ded-49b8-a106-4cf45a2ea32f",
        "value": "mail2.details-reservation-id857396.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:38+00:00",
        "timestamp": "1777410098",
        "to_ids": true,
        "type": "domain",
        "uuid": "056f3a19-1685-423d-a2c2-978968bd790a",
        "value": "maktab22.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:38+00:00",
        "timestamp": "1777410098",
        "to_ids": true,
        "type": "domain",
        "uuid": "1fdfcbe8-8d30-41db-a51c-86507dc48ded",
        "value": "marcaapuestascasino.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:38+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "575d9971-6784-4096-9674-f31ff0fe0685",
        "value": "mbffwxez.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "c860e461-fe4f-4fe2-9714-de13ab10eb9d",
        "value": "member.ibc89.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b50b6a8-32bb-4fc4-ac1c-e85566101b86",
        "value": "mnogorabot.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c48f6cf-bf65-4ac8-a117-ee30c93d8363",
        "value": "morethanwhite.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "30d3c232-9724-4c6c-ba4a-f71974e15947",
        "value": "musiquevideoprime.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6045bfc-210e-46cf-82bd-d413593754f7",
        "value": "mx2.details-reservation-id857396.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410099",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9c8f6c1-393d-488b-b8f6-a40385be9642",
        "value": "myhotel-acess.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:39+00:00",
        "timestamp": "1777410100",
        "to_ids": true,
        "type": "domain",
        "uuid": "2952b1f1-4aee-44e7-bf46-d50cfdb32773",
        "value": "nedocoosakawest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:40+00:00",
        "timestamp": "1777410100",
        "to_ids": true,
        "type": "domain",
        "uuid": "28db27a7-a72b-4714-80db-0746bac25059",
        "value": "netech.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:40+00:00",
        "timestamp": "1777410100",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ef4f297-8405-4f21-b6f3-73f022576a10",
        "value": "ngarrivalstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:40+00:00",
        "timestamp": "1777410100",
        "to_ids": true,
        "type": "domain",
        "uuid": "8336f2e0-d5ce-4d7f-9889-d5603840c683",
        "value": "ny.potvrdaplacanja.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:40+00:00",
        "timestamp": "1777410100",
        "to_ids": true,
        "type": "domain",
        "uuid": "cded2a0e-f165-429c-aeff-032f3b9bb58d",
        "value": "odoo-cad.scg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:40+00:00",
        "timestamp": "1777410100",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ec5867b-35fe-4338-ab69-25f05ae36e08",
        "value": "oj.eu362784.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:40+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8e1fbb4-1291-455c-829a-f59c81740ea2",
        "value": "okx2026-events.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "04951c3a-ba84-4d2e-8802-878772d610eb",
        "value": "openhab.hans.ivilla.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "543f5440-c70c-490b-a71e-6977b9d0477d",
        "value": "orivelle-pay.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "058eb0b6-b79f-4922-bb8c-db09826821e9",
        "value": "palmierstvfa.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b538f84-0b58-4f5f-adac-5a3ee2026a5b",
        "value": "passcheck339-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd0d3751-3aef-4669-8e4a-8bd523a9990f",
        "value": "patron20.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410101",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f7167cf-092d-4991-8199-d136f8d1b04d",
        "value": "patron32.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:41+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd5c4819-9d1c-4ad3-90bc-83f400cb863d",
        "value": "patron37.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "60732746-5841-4fb7-99c0-0d5a147b8ab8",
        "value": "patronfutbol22.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "64d25eda-f055-4128-9ff2-bebc77b27bbb",
        "value": "patronfutbol31.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f7c87c5-7e7d-405e-a237-91331ee22e17",
        "value": "patronfutbol36.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "28782dcc-9d62-40c8-b78f-20baf24b01bc",
        "value": "patrongol17.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "69003cb0-eac7-4f1c-949c-9fead7561ac1",
        "value": "patrongol37.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410102",
        "to_ids": true,
        "type": "domain",
        "uuid": "12526c33-c3ff-4fba-8240-a34a581bb0e0",
        "value": "patrongol50.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:42+00:00",
        "timestamp": "1777410103",
        "to_ids": true,
        "type": "domain",
        "uuid": "12b2239a-da82-4608-b856-058cf1f75078",
        "value": "patronhd14.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:43+00:00",
        "timestamp": "1777410103",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc9632fd-a58b-4c24-99cc-d8ddedebefc6",
        "value": "patronlig11.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:46+00:00",
        "timestamp": "1777410106",
        "to_ids": true,
        "type": "domain",
        "uuid": "a61dabea-4d03-4a9e-a7b2-ba473015a0a2",
        "value": "patronlig15.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:46+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2d04a07-1c88-4116-9356-f5397c8f3f81",
        "value": "patronlig19.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c261b91-0142-4944-8987-d3b78d4c6965",
        "value": "patronlive18.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7c88df1-2515-44c2-9b7d-d53b5c827fd9",
        "value": "patronlive31.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "045a213e-a532-4271-98b9-329d49d4f643",
        "value": "patronlive39.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "039eff36-2995-4aec-9dcb-827a8e393532",
        "value": "patronmac92.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f97cd76-7ccc-4802-a7ab-15bc0e1e59cf",
        "value": "patronmac98.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410107",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbc7f9da-eccf-44d5-970a-649e90df1357",
        "value": "patrontv56.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:47+00:00",
        "timestamp": "1777410108",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d1fc039-9bdb-4814-914d-ae12a4b383b1",
        "value": "patrontv58.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:48+00:00",
        "timestamp": "1777410108",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bc513ca-b86d-4ce9-b1e4-cb3ccf11a5f7",
        "value": "patronvip28.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:48+00:00",
        "timestamp": "1777410108",
        "to_ids": true,
        "type": "domain",
        "uuid": "6967aa9a-a587-49ae-a24a-c1f219d6520b",
        "value": "payment-reservation6829.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:48+00:00",
        "timestamp": "1777410108",
        "to_ids": true,
        "type": "domain",
        "uuid": "3449c7e1-8060-4cad-b672-233ad16ddf0f",
        "value": "postgrest.kara2020.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:48+00:00",
        "timestamp": "1777410108",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b8206f6-5424-409e-a1fa-781c7ed2d7b3",
        "value": "potvrdaplacanja.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:48+00:00",
        "timestamp": "1777410108",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfeb2cc1-6088-4aa7-be75-3b54e656b234",
        "value": "powerballleague.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:48+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3d36a0c-5915-44e6-9ba2-3e35982f155b",
        "value": "pre-registation-hotel6593182.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8ab633d-2d07-4967-95ee-9756200db2fc",
        "value": "pre-registation-hotel72331342.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1bf84f4-65c2-464e-a201-238a625c3dbd",
        "value": "pre-registerguest719024.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "0843b121-413e-4f10-9fa3-24d605a49d46",
        "value": "pre-registration21952.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e22afb2-ec4f-49d5-afde-fc46c2ab8366",
        "value": "pre-registration31922.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2e1ecb8-afaf-4463-a087-ccc257cebe1f",
        "value": "pre-registration78942.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410109",
        "to_ids": true,
        "type": "domain",
        "uuid": "981fc4ed-4953-4681-9610-9753476f4049",
        "value": "pre-registration93429.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:49+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "448342c1-ba86-4cf9-a88b-d0923331c64b",
        "value": "presalstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "eae5d3ba-0127-4f37-9c34-7b333abb1bd1",
        "value": "prime-mailcommunications.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "64c57422-725f-41a6-a4ea-a40d6f9068cc",
        "value": "regalenamba.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "a091c724-e491-4b9f-8f66-64078bc09c58",
        "value": "requests-bookable.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "045ab474-623f-437f-b8c8-8e326cdd5f10",
        "value": "reservashionsstatusnowstatus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "86579856-23f5-4be3-a3ba-0c742ac93e7c",
        "value": "reservathionstatusweekday.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410110",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ed6c7f3-703a-47d2-8dec-09a791378336",
        "value": "reservation-78398.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:50+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "24306d7d-d271-4a75-a93b-a8318fe469d5",
        "value": "reservation-id9927615.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "407a1087-2df6-4b4b-996f-db18bfc7e4c6",
        "value": "rodrigopereiravideomaker.com.br",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6829555-707c-4fbd-bd46-a7c602af48dc",
        "value": "room-process-easy.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "756e02d6-5711-4c32-9d4e-e6f271acc13e",
        "value": "rtfp.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "5da678f0-627b-48a2-ad6f-56ed2dd4158f",
        "value": "rubensvieira.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b97f39a-dafd-4110-b18f-1e0e3347b50a",
        "value": "s7.hpveer.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410111",
        "to_ids": true,
        "type": "domain",
        "uuid": "e81d9eb1-52b1-4d0f-a313-7376c44d6d2d",
        "value": "safeunit231-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:51+00:00",
        "timestamp": "1777410112",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee82ee60-47e4-4b02-b2c0-89d52c0f89ac",
        "value": "safeunit605-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:52+00:00",
        "timestamp": "1777410112",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a96b1fe-ead4-4900-a739-9db41e4df20a",
        "value": "safeunit634-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:52+00:00",
        "timestamp": "1777410112",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fbe0f9e-2b1d-47fd-92bf-cc3dcaa2692c",
        "value": "safeunit796-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:52+00:00",
        "timestamp": "1777410112",
        "to_ids": true,
        "type": "domain",
        "uuid": "41cef68d-124e-4338-8535-18a50c2564cb",
        "value": "salma.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:52+00:00",
        "timestamp": "1777410112",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad55f159-d98a-4c14-ba40-75b7ba68df30",
        "value": "sebjac.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:52+00:00",
        "timestamp": "1777410112",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd15560-58a5-4458-afd1-67d2c7375824",
        "value": "secure-room-access.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:52+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fb657c5-473c-41ca-8ee6-960fd6b0d063",
        "value": "shorturl.uz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "975741de-657f-4885-a633-b6e95668c35a",
        "value": "sitestay-apruvv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "b58e1608-c395-4c0c-9236-55652bfd5142",
        "value": "sm.obradasredstava63823.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "d81ba4ac-ee3a-466f-ad37-98a92b135fe7",
        "value": "stay-updates.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b5791ac-5e83-4a1f-843d-ff6f896c34b6",
        "value": "stay-updates.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0925260-4529-40a4-a324-2765b18d1a5a",
        "value": "stay-updations.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410113",
        "to_ids": true,
        "type": "domain",
        "uuid": "d67bacf9-d242-4a85-8610-6a5c0e910095",
        "value": "stpconfirmation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:53+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "11ed9983-628a-440e-93fe-dcabf4473e6b",
        "value": "systemischeunterstuetzung.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "9069be2c-226a-4870-8be6-c40490b8e46d",
        "value": "taraftarium1057.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "b04f4d14-9e1f-4300-9d3e-bbc01dd2da12",
        "value": "taraftarium1060.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6b5a077-8361-40d1-b7c2-b3a8e44021e1",
        "value": "test-apicontactcenter.scg.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "eafb8bf1-cb5e-4837-8b74-fd967b4a40c8",
        "value": "test.scholarshipdb.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "850ba6af-bc88-4cb4-8aef-bff5ec16cbd6",
        "value": "testing.sebjac.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410114",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0c9cfb9-c82c-4992-8234-ea8433abe52c",
        "value": "tf8.cggqe.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:54+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "a12a63ae-bd6c-4e7e-82f5-95ca16775b5b",
        "value": "the-stays-support.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "dee79ab5-7939-4261-be13-a82983c76183",
        "value": "theme15.dotname.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6e3e6ec-718b-4da6-8f4a-9c00666d21e5",
        "value": "token723.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "8bee2912-cf8e-42c1-a8fe-7fb5259d2fe0",
        "value": "tracegate225-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad231675-8ecd-499b-a410-affb4d41c830",
        "value": "trimrooms-mount.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "ceff2fd1-d398-42d1-90bb-56203cc11bcf",
        "value": "truemarkly.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410115",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdcd468e-8de6-42b0-b291-13c7463cbea0",
        "value": "trustcontrol297-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:55+00:00",
        "timestamp": "1777410116",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c3ef6c3-a486-4cc4-a08f-b9e5bd9a57e6",
        "value": "trustcontrol618-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:56+00:00",
        "timestamp": "1777410116",
        "to_ids": true,
        "type": "domain",
        "uuid": "83a7472d-effe-447c-aa34-4db27f633e6d",
        "value": "trustcontrol989-booking.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:56+00:00",
        "timestamp": "1777410116",
        "to_ids": true,
        "type": "domain",
        "uuid": "7405caee-a26f-43f4-9c5c-93709a819006",
        "value": "truststep627-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:56+00:00",
        "timestamp": "1777410116",
        "to_ids": true,
        "type": "domain",
        "uuid": "58ff1636-f4e7-41c6-ab4e-119330385a5c",
        "value": "ufo84mp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:56+00:00",
        "timestamp": "1777410116",
        "to_ids": true,
        "type": "domain",
        "uuid": "48d0184f-8444-472b-9f9f-9ede77a36a27",
        "value": "unevrsalcnf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:56+00:00",
        "timestamp": "1777410116",
        "to_ids": true,
        "type": "domain",
        "uuid": "a71c7a9a-40c5-484c-b420-b62dd6303a4d",
        "value": "uniapp-guest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:56+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c055e0-0f56-4d6b-b7f1-90e1ac16f9c5",
        "value": "unifiedguestwelcomeplatform.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "7453d577-dbf5-49b5-b980-a92b5dc66258",
        "value": "updatemarchupd.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "b18b7d41-9a2c-4d39-8abe-464ddd0b369c",
        "value": "updates-visit-dtls.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "d76fe924-3787-48fb-9379-edff85fed671",
        "value": "v.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fbb3c92-6984-4cc0-b949-86197addb11c",
        "value": "v15n4eek.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "877a7571-03e8-4c4d-bdcb-be57cc8da889",
        "value": "veriffiedhotelstay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410117",
        "to_ids": true,
        "type": "domain",
        "uuid": "60d4f9b6-a4ca-4b9e-b82b-68e18070c7ab",
        "value": "verifystep221-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:57+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "8127aa1b-b34e-4ef8-a664-d6f2a5c81d5f",
        "value": "verlfi-paylres.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:58+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "13b08dc5-64e8-4013-ab11-0ef26a0476ad",
        "value": "vita-flexis.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:58+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "11b13442-4a59-4e9d-a8cf-4f51af59235a",
        "value": "vm.m2k9v8qa7r.es",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:58+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dbb9f1c-c060-4152-ad85-041f44d911e8",
        "value": "vogacortechidoricho.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:58+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce95d005-5af4-4f66-a857-f1c4bf45e99b",
        "value": "vy.eu5382941.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:58+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb2cb6bf-fe22-47f7-8122-a4b003837108",
        "value": "whitelabelpayment.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:58+00:00",
        "timestamp": "1777410118",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a00b68e-f95c-47ac-99f1-b577b0a2228e",
        "value": "xefgxjns.ariasmedianetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:59+00:00",
        "timestamp": "1777410119",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe4f09d5-7fe2-4491-8afd-19e1db67eb5f",
        "value": "your-bwh08.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:59+00:00",
        "timestamp": "1777410119",
        "to_ids": true,
        "type": "domain",
        "uuid": "cad11e5b-e877-47c3-965c-ee0d451355d8",
        "value": "your-bwh18.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T21:01:59+00:00",
        "timestamp": "1777410119",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3573916-9f46-4c2a-99ab-86340ebd9388",
        "value": "your-bwh24.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "georgeginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:04+00:00",
        "timestamp": "1777413604",
        "to_ids": false,
        "type": "url",
        "uuid": "416bcae9-704f-41d6-9309-0ca5f677a087",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/172cca0596132d3830ebc1ccd41a5d6afa460feb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "georgeginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:04+00:00",
        "timestamp": "1777413605",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "76fa0621-fac8-479e-8fa7-1acef6002202",
        "value": "166.88.8.168",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "georgeginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:05+00:00",
        "timestamp": "1777413605",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d5a89392-4e33-47d1-b483-bc426e4b99ee",
        "value": "23.27.126.117",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "georgeginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:05+00:00",
        "timestamp": "1777413605",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e28a6610-6d64-4e80-a37b-257e0c44239c",
        "value": "23.27.142.10",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "georgeginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:06+00:00",
        "timestamp": "1777413606",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "eed6fcea-6f39-498f-bb90-ac94dfb737c0",
        "value": "23.27.142.98",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:06+00:00",
        "timestamp": "1777413606",
        "to_ids": false,
        "type": "url",
        "uuid": "cd69e46f-272c-4cdc-8067-384187b4c658",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/de36a2691d08e5f16362e34ec51eee0df61036b3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:06+00:00",
        "timestamp": "1777413606",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d018b72c-5237-45e7-9424-5520f09e87fb",
        "value": "91.92.242.84",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:06+00:00",
        "timestamp": "1777413606",
        "to_ids": false,
        "type": "url",
        "uuid": "7c3ddea7-3bc7-4a50-9371-2493148e5183",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c6325a48daae71fe66f7311e50809ea4c93de728",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "cyberstrikeai",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:06+00:00",
        "timestamp": "1777413606",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c9716872-22ed-4c11-af3a-82d2038285a1",
        "value": "134.175.78.97",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:06+00:00",
        "timestamp": "1777413607",
        "to_ids": false,
        "type": "url",
        "uuid": "f0ec3a21-4f4e-4f8c-a755-476f3d3d251d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fb1439e37135a29fd4e5692bf88ab3e38d78e766",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:07+00:00",
        "timestamp": "1777413607",
        "to_ids": true,
        "type": "domain",
        "uuid": "06cb4fb8-c57c-45af-8804-d782e1c7a266",
        "value": "duckssuit.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "offloader",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:07+00:00",
        "timestamp": "1777413607",
        "to_ids": true,
        "type": "domain",
        "uuid": "6be6075d-66a0-4bc0-a4b8-87e74b941e1b",
        "value": "squirrelmarket.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:07+00:00",
        "timestamp": "1777413607",
        "to_ids": false,
        "type": "url",
        "uuid": "db8f2617-46c1-4c7d-8419-bd011d0fe9c2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/be382f13f8dccbcfc1499d548a96db39abcb5ff9",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "tsundere",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-28T22:00:07+00:00",
        "timestamp": "1777413607",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ed4079e-7e17-423c-82c8-858b7c1f1a26",
        "value": "olsovay.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}