{
  "Event": {
    "analysis": "1",
    "date": "2026-08-01",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-08-02",
    "publish_timestamp": "1785679209",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1785679208",
    "uuid": "c2d3498b-60ea-4a1f-9a70-b3ff82056cb2",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:04+00:00",
        "timestamp": "1785668404",
        "to_ids": false,
        "type": "url",
        "uuid": "5e9e3564-88d1-4874-b279-80f5003f88eb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/415afcf9a3ded889d4003c7b81b5a06d7f9d255e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:04+00:00",
        "timestamp": "1785668405",
        "to_ids": true,
        "type": "domain",
        "uuid": "6af13dc6-7d5f-461c-83b9-25e2c089c5a1",
        "value": "xmr.novoline.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:05+00:00",
        "timestamp": "1785668405",
        "to_ids": false,
        "type": "url",
        "uuid": "94e6e179-2f84-4b38-93f3-283e768b68cb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d074c60f7f0812e09087101d5cc7bf448ab93ebf",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:05+00:00",
        "timestamp": "1785668405",
        "to_ids": false,
        "type": "url",
        "uuid": "623c3ad7-7275-4935-add6-696b3bc755fb",
        "value": "https://www.virustotal.com/gui/file/00c854e09c22bdc694d06705755c339fc91060024681a43dbbd89f997d363c80/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:05+00:00",
        "timestamp": "1785668405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "95ef85dd-e9f5-4daa-8ff3-340f9b869be9",
        "value": "88.156.30.96",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crypto_mining",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:05+00:00",
        "timestamp": "1785668405",
        "to_ids": true,
        "type": "domain",
        "uuid": "79710faf-ba9e-4f36-ac2c-a0af9268dc56",
        "value": "pool.novoline.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:05+00:00",
        "timestamp": "1785668406",
        "to_ids": false,
        "type": "url",
        "uuid": "cc274d0f-51c6-4e71-b28d-94679c6e52e5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/959f565dcf3b038b912919e6a67a7e42c51219d3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:06+00:00",
        "timestamp": "1785668406",
        "to_ids": true,
        "type": "domain",
        "uuid": "c11ead2d-9908-43c6-8b43-467031ceed94",
        "value": "cdn.boauis.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_fvncbot",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:06+00:00",
        "timestamp": "1785668406",
        "to_ids": true,
        "type": "domain",
        "uuid": "cda7b44d-1c99-4d6a-8680-1d324f1dd3ea",
        "value": "lqozaa.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:06+00:00",
        "timestamp": "1785668406",
        "to_ids": false,
        "type": "url",
        "uuid": "a6d7081e-8da6-4146-bd15-0e1bdc03bffc",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7aa8c0b73f31a8c454c564e062c25560469afb48",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:06+00:00",
        "timestamp": "1785668406",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c07d7ff-8b8c-4fdf-b5a4-a7b1e3ff3ae1",
        "value": "cmioser.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:06+00:00",
        "timestamp": "1785668406",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa219da7-613e-45d6-a0c3-e7c82da5feed",
        "value": "gama.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:06+00:00",
        "timestamp": "1785668407",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7984d16-836e-4833-9f8e-2efa22f90b96",
        "value": "gama.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:07+00:00",
        "timestamp": "1785668407",
        "to_ids": true,
        "type": "domain",
        "uuid": "24fc3db9-63c3-4a21-a747-07803bd24bd2",
        "value": "gama.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:07+00:00",
        "timestamp": "1785668407",
        "to_ids": true,
        "type": "domain",
        "uuid": "d6f5446e-c1a4-4f26-829c-975ac82d6f16",
        "value": "nhis.gama.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:07+00:00",
        "timestamp": "1785668407",
        "to_ids": true,
        "type": "domain",
        "uuid": "7def75ae-bacc-42fb-9ff4-2c47acf54bba",
        "value": "nhis.gama.dynuddns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:07+00:00",
        "timestamp": "1785668407",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc078829-5f14-4d37-addf-e179ebdc8831",
        "value": "nhis.gama.dynuddns.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:07+00:00",
        "timestamp": "1785668407",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cd6fdb4-2ec3-46d9-b317-b7ba8281765e",
        "value": "nt-usermem66s.dynv6.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:07+00:00",
        "timestamp": "1785668408",
        "to_ids": true,
        "type": "domain",
        "uuid": "05cdc874-3d80-4fdb-b77f-b49f96edf5ef",
        "value": "recnhis.dynu.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:08+00:00",
        "timestamp": "1785668408",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3aba892-66d5-4949-ba4d-fadac2d65b4b",
        "value": "recnhis.dynu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:08+00:00",
        "timestamp": "1785668408",
        "to_ids": false,
        "type": "url",
        "uuid": "cbb4f366-e07f-43f2-96f3-3fc9b577ebb8",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e49562b310de04c37851621f03c0931f878b4840",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:08+00:00",
        "timestamp": "1785668408",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5e02f5f-1c26-40e8-9732-d5fe8bfcad31",
        "value": "bizsmmit.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T11:00:08+00:00",
        "timestamp": "1785668408",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bc509ca-623c-4437-b179-a2e832161ef7",
        "value": "digiwise.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "questealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:03+00:00",
        "timestamp": "1785672004",
        "to_ids": false,
        "type": "url",
        "uuid": "79d9b846-85c9-4d4a-b2e9-606512a007a0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/105e0555295462dd0bf29e88ccfdbc97bf813bee",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "questealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:04+00:00",
        "timestamp": "1785672004",
        "to_ids": false,
        "type": "url",
        "uuid": "20f01f80-74d0-4a9b-a360-dee198f22397",
        "value": "https://x.com/Fact_Finder03/status/2083830701536039256",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "questealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:04+00:00",
        "timestamp": "1785672004",
        "to_ids": false,
        "type": "url",
        "uuid": "f92329e1-619a-4ce5-8cdf-2d971d14f28a",
        "value": "https://www.virustotal.com/gui/file/1b5f9416759d2d41171c0b36c702ae8b5ba2fefba14f58d9e0f21c25ed255e4a/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "questealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:04+00:00",
        "timestamp": "1785672004",
        "to_ids": true,
        "type": "domain",
        "uuid": "375a2ab3-dacb-4bf4-a168-b9a7b4e58e68",
        "value": "eqdasdszxwq.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "questealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:04+00:00",
        "timestamp": "1785672005",
        "to_ids": true,
        "type": "domain",
        "uuid": "24c07905-8d03-43c7-b0e2-e27b92a6fde4",
        "value": "foxycim.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "questealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:05+00:00",
        "timestamp": "1785672005",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c31c58f-85d6-41a1-b6f5-801b1dbf99f2",
        "value": "mail.foxycim.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "voog",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T12:00:05+00:00",
        "timestamp": "1785672005",
        "to_ids": false,
        "type": "url",
        "uuid": "ea5a8c19-66e2-4d1e-96e8-82a9a7a26e23",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0e2e509d345917b086c54712545e16fd64ce3fa5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:05+00:00",
        "timestamp": "1785675605",
        "to_ids": false,
        "type": "url",
        "uuid": "970cd1f3-ce12-4ba5-82ca-709b1d25e4f2",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fc91e829a36c957b22bb20133cd903147cfef45f",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:05+00:00",
        "timestamp": "1785675605",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "229a75cf-1f4a-4e7f-bcea-21878ee941c4",
        "value": "2.26.123.89",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:05+00:00",
        "timestamp": "1785675605",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3bf37470-740f-496a-9a5b-6fe1f3c4ae30",
        "value": "20.82.124.87",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:05+00:00",
        "timestamp": "1785675605",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "dfe87032-b65d-4b70-9c15-bd0d5f1fab14",
        "value": "37.148.134.208",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:05+00:00",
        "timestamp": "1785675605",
        "to_ids": true,
        "type": "domain",
        "uuid": "4377877a-60d0-4d27-b818-930225bc7d9b",
        "value": "0g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:05+00:00",
        "timestamp": "1785675606",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d9f3d0f-a852-4008-9027-35d3d8ccebdd",
        "value": "0googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:06+00:00",
        "timestamp": "1785675606",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c47a677-0155-4c70-b1af-6cdfbef3bb07",
        "value": "0nyofe08.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:06+00:00",
        "timestamp": "1785675606",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc6c2850-ed71-4d48-bba5-8de4eb13f9ff",
        "value": "10g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:06+00:00",
        "timestamp": "1785675606",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e5a595-1d19-49ea-9c69-50fd615abb1c",
        "value": "10googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:06+00:00",
        "timestamp": "1785675606",
        "to_ids": true,
        "type": "domain",
        "uuid": "47da3e88-6aa7-4199-80c2-d511bdfe804b",
        "value": "154-86-119-227.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:06+00:00",
        "timestamp": "1785675606",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2b2be1c-f86d-4c11-9caa-da438bf70afe",
        "value": "1ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:06+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b10bf2d-d4d9-4269-aba6-8ac0b256964a",
        "value": "1celebration.life",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "a912785a-57e6-45be-b882-a2803acc5b4a",
        "value": "1ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f6ae71a-8909-44cd-921d-4e60145fe54c",
        "value": "1web4all.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "c01733e9-94f9-441e-abc5-12eb24bb59ea",
        "value": "2.26.123.89.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffe86e9b-b04f-4fec-bbcc-2c24069a4404",
        "value": "20.82.124.87.nip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "10b8b990-d3cc-4f0b-9e12-0b0852a6507f",
        "value": "210g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675607",
        "to_ids": true,
        "type": "domain",
        "uuid": "db11d256-b2c0-4294-b294-5c10afd37d55",
        "value": "210googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:07+00:00",
        "timestamp": "1785675608",
        "to_ids": true,
        "type": "domain",
        "uuid": "56569cca-61f0-4249-b824-a2ed44967f3b",
        "value": "21ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:08+00:00",
        "timestamp": "1785675608",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1037ffa-0446-4a22-aab9-ac57a57af316",
        "value": "21ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:08+00:00",
        "timestamp": "1785675608",
        "to_ids": true,
        "type": "domain",
        "uuid": "34d3a110-4518-477e-a445-0d53bfb258c0",
        "value": "234panel.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:08+00:00",
        "timestamp": "1785675608",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a1515ea-72c1-4a85-9cc1-afd2ece61f65",
        "value": "2redirector.2bd.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:08+00:00",
        "timestamp": "1785675608",
        "to_ids": true,
        "type": "domain",
        "uuid": "15eb630e-ed17-4e8a-b32a-919536843c41",
        "value": "3210g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:08+00:00",
        "timestamp": "1785675608",
        "to_ids": true,
        "type": "domain",
        "uuid": "de9c4b28-605c-4f37-8457-22975ef46e35",
        "value": "3210googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:08+00:00",
        "timestamp": "1785675609",
        "to_ids": true,
        "type": "domain",
        "uuid": "25375de3-852f-4312-ab1f-2bcaeae95ccd",
        "value": "321ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:09+00:00",
        "timestamp": "1785675609",
        "to_ids": true,
        "type": "domain",
        "uuid": "42ed6e3a-620c-4377-97e3-ceeaa06d4ec7",
        "value": "321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:09+00:00",
        "timestamp": "1785675609",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb4d5921-aeff-4cf1-ab55-5644a3532125",
        "value": "37.148.134.208.nip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:09+00:00",
        "timestamp": "1785675609",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f979a75-95a3-47cf-ae6d-c8f180ffa908",
        "value": "3secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:09+00:00",
        "timestamp": "1785675609",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdff09c8-35c7-4b82-a2c8-196e95f15488",
        "value": "3xcv09.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:09+00:00",
        "timestamp": "1785675609",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1ff2445-f805-45c1-87aa-f5a275dbca4c",
        "value": "43210g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:09+00:00",
        "timestamp": "1785675610",
        "to_ids": true,
        "type": "domain",
        "uuid": "85cd87a5-609f-4e02-9f32-1f4cfffa0bba",
        "value": "43210googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:10+00:00",
        "timestamp": "1785675610",
        "to_ids": true,
        "type": "domain",
        "uuid": "30a8b1cd-c49b-4e85-b0d3-461c6414a179",
        "value": "4321ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:10+00:00",
        "timestamp": "1785675610",
        "to_ids": true,
        "type": "domain",
        "uuid": "487755b3-912a-4287-a2c9-498a8ad2a107",
        "value": "4321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:10+00:00",
        "timestamp": "1785675610",
        "to_ids": true,
        "type": "domain",
        "uuid": "4875a23e-10f8-4ed4-a54d-f21dfaccd68f",
        "value": "43secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:10+00:00",
        "timestamp": "1785675610",
        "to_ids": true,
        "type": "domain",
        "uuid": "5feb4a18-fd1e-40c1-9df3-edff5e4e3f12",
        "value": "4c799c47-82ba-4bdf-a3a2-bec8e271f167.fs.lucidlink.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:10+00:00",
        "timestamp": "1785675610",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5a738b5-cdc6-4e31-8cfa-d2d784406be3",
        "value": "543210g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:10+00:00",
        "timestamp": "1785675611",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e1b36b6-615f-4f29-b30c-2b9c41fe8903",
        "value": "543210googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:11+00:00",
        "timestamp": "1785675611",
        "to_ids": true,
        "type": "domain",
        "uuid": "f72dd10f-b622-4dbb-b74c-73a86fefdd48",
        "value": "54321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:11+00:00",
        "timestamp": "1785675611",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b1d3eeb-26ad-4082-9fc4-b1fe82e4c467",
        "value": "543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:11+00:00",
        "timestamp": "1785675611",
        "to_ids": true,
        "type": "domain",
        "uuid": "a6faedd9-49b8-4d82-98ae-6d0296bef77c",
        "value": "654321ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:11+00:00",
        "timestamp": "1785675611",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaa9be10-3359-4a36-a543-ca3e7df1ccf7",
        "value": "654321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:11+00:00",
        "timestamp": "1785675611",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa300b1d-09df-425b-8c8b-30d682078a36",
        "value": "6543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:11+00:00",
        "timestamp": "1785675612",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbfa6c5f-348a-4795-89c0-14c39f2e581c",
        "value": "6protect-jp.mimecast.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:12+00:00",
        "timestamp": "1785675612",
        "to_ids": true,
        "type": "domain",
        "uuid": "748cbd0a-639f-451f-9b04-2e83565b31a4",
        "value": "7654321ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:12+00:00",
        "timestamp": "1785675612",
        "to_ids": true,
        "type": "domain",
        "uuid": "81aa3585-fda3-4db5-9e66-400e4fd4d475",
        "value": "7654321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:12+00:00",
        "timestamp": "1785675612",
        "to_ids": true,
        "type": "domain",
        "uuid": "e07ef693-64bb-4f2f-925a-5a84451a9704",
        "value": "76543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:12+00:00",
        "timestamp": "1785675612",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a2f61c2-c056-4a16-8e09-412600e7021d",
        "value": "76protect-jp.mimecast.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:12+00:00",
        "timestamp": "1785675612",
        "to_ids": true,
        "type": "domain",
        "uuid": "b689a61b-dbfc-4708-8104-932ab4f8be2f",
        "value": "7notifications.google.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:12+00:00",
        "timestamp": "1785675613",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a52f6a4-2ad0-41df-bfde-88b85e743636",
        "value": "7qgs12ooc.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:13+00:00",
        "timestamp": "1785675613",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7ae3b9f-1dda-47f5-95e2-4b893551e216",
        "value": "7r0les.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:13+00:00",
        "timestamp": "1785675613",
        "to_ids": true,
        "type": "domain",
        "uuid": "9de54768-582d-4765-a78d-24483f7cfd28",
        "value": "87654321ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:13+00:00",
        "timestamp": "1785675613",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2b3fc3e-d405-4b89-8744-3ea63e7145df",
        "value": "87654321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:13+00:00",
        "timestamp": "1785675613",
        "to_ids": true,
        "type": "domain",
        "uuid": "452f68f2-294c-49b8-82bd-e8b0db12c87c",
        "value": "876543secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:13+00:00",
        "timestamp": "1785675613",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ee53fb2-4c80-413c-bc60-721e28455db0",
        "value": "876protect-jp.mimecast.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:13+00:00",
        "timestamp": "1785675614",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cb79a0e-bc6b-41d2-8b14-18e977ba719d",
        "value": "87notifications.google.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:14+00:00",
        "timestamp": "1785675614",
        "to_ids": true,
        "type": "domain",
        "uuid": "716978e9-29f5-4dca-a83f-0424dab8b216",
        "value": "8urldefense.proofpoint.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:14+00:00",
        "timestamp": "1785675614",
        "to_ids": true,
        "type": "domain",
        "uuid": "97aac98e-fc03-4bfc-be95-fa8c0cda63fc",
        "value": "987654321ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:14+00:00",
        "timestamp": "1785675614",
        "to_ids": true,
        "type": "domain",
        "uuid": "d33f4ee6-e10a-4972-960b-9ed835ea7626",
        "value": "9876protect-jp.mimecast.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:14+00:00",
        "timestamp": "1785675614",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7ae0850-0bd8-4a63-bc5e-25083ce04e67",
        "value": "987notifications.google.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:14+00:00",
        "timestamp": "1785675614",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ff6d9ff-6a27-4169-962c-8cf9df6c6909",
        "value": "98oiukjq.sporterfan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:14+00:00",
        "timestamp": "1785675615",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e134a23-6351-4731-9187-5e40ca0d3c3f",
        "value": "98urldefense.proofpoint.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:15+00:00",
        "timestamp": "1785675615",
        "to_ids": true,
        "type": "domain",
        "uuid": "91b4fda1-8eb8-42ad-80d2-f1c6fa295e8d",
        "value": "9k.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:15+00:00",
        "timestamp": "1785675615",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b760015-394b-4893-bb56-f978b283495b",
        "value": "a.p4irs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:15+00:00",
        "timestamp": "1785675615",
        "to_ids": true,
        "type": "domain",
        "uuid": "20d3d045-3efc-4c0a-9774-180ad7343bd6",
        "value": "aadcdn-msft.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:15+00:00",
        "timestamp": "1785675615",
        "to_ids": true,
        "type": "domain",
        "uuid": "46143207-59ec-4c3b-abdc-3879549a830c",
        "value": "aadcdn.365office.dpdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:15+00:00",
        "timestamp": "1785675615",
        "to_ids": true,
        "type": "domain",
        "uuid": "104a673f-bece-4efe-b4e1-69cbaebf17a7",
        "value": "aadcdn.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:15+00:00",
        "timestamp": "1785675616",
        "to_ids": true,
        "type": "domain",
        "uuid": "9396f7ad-85a0-4663-a4f2-9867c0d12d9a",
        "value": "aadcdn.drilltest.anugan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:16+00:00",
        "timestamp": "1785675616",
        "to_ids": true,
        "type": "domain",
        "uuid": "49eb10db-aef9-4036-b3fb-8230a435a2f7",
        "value": "aadcdn.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:16+00:00",
        "timestamp": "1785675616",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ecaf2a2-6315-4736-8b72-9a60c9455b54",
        "value": "aadcdn.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:16+00:00",
        "timestamp": "1785675616",
        "to_ids": true,
        "type": "domain",
        "uuid": "02ee77ce-8126-4da8-b2df-d8b10df95a4e",
        "value": "aadcdn.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:16+00:00",
        "timestamp": "1785675616",
        "to_ids": true,
        "type": "domain",
        "uuid": "db84e3fc-6ee1-4805-852a-b1016d84626f",
        "value": "aadcdn.signal-relay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:16+00:00",
        "timestamp": "1785675616",
        "to_ids": true,
        "type": "domain",
        "uuid": "4942ea2d-5974-4065-bf79-35a986f5f75a",
        "value": "aadcdn.testing01.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:16+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "83f7fb47-cdcb-4c15-bd0b-70c66ce05650",
        "value": "aadcdnalt.mikecrosoft.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:17+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "42e8d1f6-4e94-4bdf-a4ce-d4751375f8d5",
        "value": "aadcdnn.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:17+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "da0a45fb-0350-4652-99ca-29feeee774e8",
        "value": "aadlogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:17+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "d68cccf7-a563-41d9-86c7-2bc28f2f1c90",
        "value": "aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:17+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "dea95feb-57cc-4018-92f8-5c0049a07155",
        "value": "abs.protocolendless.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:17+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "595b82e5-14f1-4a45-abe9-572e203f3cb0",
        "value": "acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:17+00:00",
        "timestamp": "1785675617",
        "to_ids": true,
        "type": "domain",
        "uuid": "c35c6572-7559-4734-82be-8c256f13465f",
        "value": "academy.login.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:18+00:00",
        "timestamp": "1785675618",
        "to_ids": true,
        "type": "domain",
        "uuid": "61bdffe7-6052-4a04-8c13-6da73fc04f08",
        "value": "academy.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:18+00:00",
        "timestamp": "1785675618",
        "to_ids": true,
        "type": "domain",
        "uuid": "647e784a-4774-44ad-a1a3-6a13d5d8cfd9",
        "value": "academy.test.wetransfer.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:18+00:00",
        "timestamp": "1785675618",
        "to_ids": true,
        "type": "domain",
        "uuid": "92d5acf7-c9de-4f16-9893-e39897b7c609",
        "value": "account-ms.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:18+00:00",
        "timestamp": "1785675618",
        "to_ids": true,
        "type": "domain",
        "uuid": "176a42cd-6ab7-4b8f-852a-617a8fe71d31",
        "value": "account.154-86-119-227.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:18+00:00",
        "timestamp": "1785675618",
        "to_ids": true,
        "type": "domain",
        "uuid": "4509beb6-eb30-439a-8811-f12daf35c061",
        "value": "account.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:18+00:00",
        "timestamp": "1785675619",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfd17583-e39d-4a40-a2ad-1a026345b752",
        "value": "account.check-photo.dderby.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:19+00:00",
        "timestamp": "1785675619",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2f9a152-f50f-4065-a89e-90f2b6b6d0fc",
        "value": "account.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:19+00:00",
        "timestamp": "1785675619",
        "to_ids": true,
        "type": "domain",
        "uuid": "416dba62-55db-49d2-b3af-cdc492e427a2",
        "value": "account.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:19+00:00",
        "timestamp": "1785675619",
        "to_ids": true,
        "type": "domain",
        "uuid": "e407c9f5-941b-429d-9d59-b2cce32f3511",
        "value": "account.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:19+00:00",
        "timestamp": "1785675619",
        "to_ids": true,
        "type": "domain",
        "uuid": "236b5974-142d-4e20-8c21-f0bbc03f0d3f",
        "value": "account.mselite.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:19+00:00",
        "timestamp": "1785675619",
        "to_ids": true,
        "type": "domain",
        "uuid": "6180127c-9f74-47cb-aaef-a21a1d7bfaf2",
        "value": "account.outiook-offlceauthyfyveriflive.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:19+00:00",
        "timestamp": "1785675620",
        "to_ids": true,
        "type": "domain",
        "uuid": "e93ca770-321f-4f81-b650-0575abdee685",
        "value": "account.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:20+00:00",
        "timestamp": "1785675620",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ce63c32-29b1-4a3e-9004-fc029692df21",
        "value": "account.s.pcidi-ca.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:20+00:00",
        "timestamp": "1785675620",
        "to_ids": true,
        "type": "domain",
        "uuid": "1599fc76-ec81-434c-a378-5ab486307f3a",
        "value": "account.salenndoor.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:20+00:00",
        "timestamp": "1785675620",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0f6f12c-6b0b-4693-b5bb-a0a237c50b2e",
        "value": "account.takersuz-lab.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:20+00:00",
        "timestamp": "1785675620",
        "to_ids": true,
        "type": "domain",
        "uuid": "13611562-fa0d-4cf2-bcfb-937af9c52d1a",
        "value": "account.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:20+00:00",
        "timestamp": "1785675620",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2dee2a9-dc66-4afc-ac44-025fac4ae898",
        "value": "accountgd.mikecrosoft.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:20+00:00",
        "timestamp": "1785675621",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5aa9c8d-7038-46b8-bcea-41c758d7b8fe",
        "value": "accounts-google.109-199-97-174.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:21+00:00",
        "timestamp": "1785675621",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a50218a-a54d-4592-b8ef-6aea82fd39bd",
        "value": "accounts.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:21+00:00",
        "timestamp": "1785675621",
        "to_ids": true,
        "type": "domain",
        "uuid": "211b0356-a606-4c41-9b03-47451456a48f",
        "value": "accounts.admin-gsync.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:21+00:00",
        "timestamp": "1785675621",
        "to_ids": true,
        "type": "domain",
        "uuid": "45bbccef-cd02-440c-a125-200f19ed2835",
        "value": "accounts.appnafk.dpdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:21+00:00",
        "timestamp": "1785675621",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3f6de8b-4bf9-4e0e-a6bf-38ba6356516a",
        "value": "accounts.booking.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:21+00:00",
        "timestamp": "1785675621",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d20e5d1-8e32-4397-97d5-9f5e736587a5",
        "value": "accounts.docuhost.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:21+00:00",
        "timestamp": "1785675622",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b3605c1-8778-4bc7-9d7c-693bdb69fbe3",
        "value": "accounts.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:22+00:00",
        "timestamp": "1785675622",
        "to_ids": true,
        "type": "domain",
        "uuid": "b499ace6-5dc6-42a9-8a47-19f1c0eef0c7",
        "value": "accounts.google.bain-corp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:22+00:00",
        "timestamp": "1785675622",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bd3269a-e534-4a88-a8df-24c7c5532427",
        "value": "accounts.login.hope-relief-center.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:22+00:00",
        "timestamp": "1785675622",
        "to_ids": true,
        "type": "domain",
        "uuid": "445e47b4-3aaa-486c-a038-bf73556ec7f0",
        "value": "accounts.opensupport.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:22+00:00",
        "timestamp": "1785675622",
        "to_ids": true,
        "type": "domain",
        "uuid": "8426407e-96cd-4abd-9a49-561db96100ba",
        "value": "accounts.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:22+00:00",
        "timestamp": "1785675622",
        "to_ids": true,
        "type": "domain",
        "uuid": "4996e4b9-42a7-4451-b0fc-67cb1eacd11a",
        "value": "accounts.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:22+00:00",
        "timestamp": "1785675623",
        "to_ids": true,
        "type": "domain",
        "uuid": "1734b8f9-88bc-4cf5-acdf-c47540b29dce",
        "value": "accounts.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:23+00:00",
        "timestamp": "1785675623",
        "to_ids": true,
        "type": "domain",
        "uuid": "109a041c-6056-4c23-8886-0fa25526503b",
        "value": "accounts.vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:23+00:00",
        "timestamp": "1785675623",
        "to_ids": true,
        "type": "domain",
        "uuid": "321c6303-18b6-41b8-833b-57f258a64e9d",
        "value": "accountsettingsupdate.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:23+00:00",
        "timestamp": "1785675623",
        "to_ids": true,
        "type": "domain",
        "uuid": "e498b277-6672-4d3c-bf21-0dfaa63d25df",
        "value": "acm.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:23+00:00",
        "timestamp": "1785675624",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d809404-8c15-406c-a4c3-1f09d80c6545",
        "value": "actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:24+00:00",
        "timestamp": "1785675624",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ce358a6-461c-44a3-9fef-0838422859f9",
        "value": "ad.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:24+00:00",
        "timestamp": "1785675624",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3a6a564-7582-4e1a-9b42-c722a52a124a",
        "value": "ad.doubleclick.net.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:24+00:00",
        "timestamp": "1785675624",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2acec59-5446-41da-bd08-3516fba04f15",
        "value": "ad.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:24+00:00",
        "timestamp": "1785675624",
        "to_ids": true,
        "type": "domain",
        "uuid": "9452523a-d3f7-48d8-8126-7b4c3c7856c2",
        "value": "adfs.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:24+00:00",
        "timestamp": "1785675624",
        "to_ids": true,
        "type": "domain",
        "uuid": "96d9e9b4-2830-4e94-a3e7-f6638d8a8525",
        "value": "adfsts.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:24+00:00",
        "timestamp": "1785675625",
        "to_ids": true,
        "type": "domain",
        "uuid": "4945e67e-d92f-4371-8bcd-f7ff17d922e5",
        "value": "admin.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:25+00:00",
        "timestamp": "1785675625",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef76bc6f-5ef2-4856-b5db-cdd73d31bddd",
        "value": "admin.france-privatequidedtours.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:25+00:00",
        "timestamp": "1785675625",
        "to_ids": true,
        "type": "domain",
        "uuid": "d019ab06-08ba-457c-8b42-5c9b5b505914",
        "value": "admin.gamerplaying.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:25+00:00",
        "timestamp": "1785675625",
        "to_ids": true,
        "type": "domain",
        "uuid": "1347396a-4a62-4835-871d-6ee5abaf155c",
        "value": "admin.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:25+00:00",
        "timestamp": "1785675625",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba6f760c-31c4-44de-9b24-2113de75dd1b",
        "value": "admin.wddj.co.in",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:26+00:00",
        "timestamp": "1785675626",
        "to_ids": true,
        "type": "domain",
        "uuid": "9eb7e8eb-30ed-47ae-b1d2-dc0bb54a9a59",
        "value": "ads.onetime-authentication.cruiserscrib.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:26+00:00",
        "timestamp": "1785675626",
        "to_ids": true,
        "type": "domain",
        "uuid": "c717c1aa-e077-48be-988a-9f807807807d",
        "value": "ads.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:26+00:00",
        "timestamp": "1785675626",
        "to_ids": true,
        "type": "domain",
        "uuid": "404ec478-d91a-463c-a814-4856c8a86fa7",
        "value": "advath.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:26+00:00",
        "timestamp": "1785675626",
        "to_ids": true,
        "type": "domain",
        "uuid": "93c67ed7-4598-4cf1-8832-966b0b7849fe",
        "value": "africapower.grosbit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:26+00:00",
        "timestamp": "1785675626",
        "to_ids": true,
        "type": "domain",
        "uuid": "8d500c47-fd23-45f1-8da1-b9fe7d13c43e",
        "value": "airs.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:26+00:00",
        "timestamp": "1785675626",
        "to_ids": true,
        "type": "domain",
        "uuid": "d282c8fe-8f5b-4824-a2ce-20e079b168e1",
        "value": "ajax.rs-dns.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:27+00:00",
        "timestamp": "1785675627",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bc4b705-86f8-49f0-9cd3-f04c16ccbeaa",
        "value": "ajax.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:27+00:00",
        "timestamp": "1785675627",
        "to_ids": true,
        "type": "domain",
        "uuid": "671b8f7e-d7a6-4082-a4e5-74ead760ddfc",
        "value": "akira.lab.evilginx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:27+00:00",
        "timestamp": "1785675627",
        "to_ids": true,
        "type": "domain",
        "uuid": "a020a803-0d8e-443b-bddf-67c2f45a2b78",
        "value": "alertadeseguranca.com.br",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:27+00:00",
        "timestamp": "1785675627",
        "to_ids": true,
        "type": "domain",
        "uuid": "614fa18e-5e78-4401-ada8-5cff4fccec20",
        "value": "allenkeith.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:27+00:00",
        "timestamp": "1785675627",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9b4ee31-cc98-44ea-9439-592aeb82f589",
        "value": "amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:27+00:00",
        "timestamp": "1785675627",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb89875c-9559-45cc-af3c-a106477f8f72",
        "value": "amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675628",
        "to_ids": true,
        "type": "domain",
        "uuid": "6888234d-0302-4f08-8be0-9f05fb864824",
        "value": "amcdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675628",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f9e753d-ebc8-4cf6-8d89-72c13f74f0fd",
        "value": "an.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675628",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a0aa3bd-3f95-447e-b08f-78d563fd73cb",
        "value": "analytics.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675628",
        "to_ids": true,
        "type": "domain",
        "uuid": "f53144e6-f846-4505-8513-5d71d200d00b",
        "value": "analytics.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675628",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4776443-4a19-4f2e-ae2d-94694d793158",
        "value": "anotherdomain.in",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675628",
        "to_ids": true,
        "type": "domain",
        "uuid": "3347db23-4b7b-455a-91ed-4b6f8317286a",
        "value": "ap-northeast-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:28+00:00",
        "timestamp": "1785675629",
        "to_ids": true,
        "type": "domain",
        "uuid": "08c09bd7-6e06-4139-b171-e854c18eca4a",
        "value": "ap-southeast-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:29+00:00",
        "timestamp": "1785675629",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbbf4e48-ffbb-4500-ab13-599ab585baef",
        "value": "apc01.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:29+00:00",
        "timestamp": "1785675629",
        "to_ids": true,
        "type": "domain",
        "uuid": "a353e57a-1ebe-4ad2-bdc7-26de406d0903",
        "value": "api-2-0.aol.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:29+00:00",
        "timestamp": "1785675629",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c90b6b9-ce31-4445-aad4-50c84aedcd96",
        "value": "api.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:29+00:00",
        "timestamp": "1785675629",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdeeec12-9d09-4a7c-84b0-7529ea41a2c4",
        "value": "api.go007-go007-go007-go007.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:29+00:00",
        "timestamp": "1785675629",
        "to_ids": true,
        "type": "domain",
        "uuid": "d164350f-381d-40ff-b86d-ac439f06a06d",
        "value": "api.lqmbq.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:29+00:00",
        "timestamp": "1785675630",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b4edcdf-769d-480c-8ab5-c4dbf99d579b",
        "value": "api.passport.yandex.hdgv.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:30+00:00",
        "timestamp": "1785675630",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4a04c17-c197-419e-9dde-61f404ae361a",
        "value": "api.rootvk.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:30+00:00",
        "timestamp": "1785675630",
        "to_ids": true,
        "type": "domain",
        "uuid": "585a202a-dd4e-4c9e-9108-b60a1bd7e1e8",
        "value": "apipersforating.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:30+00:00",
        "timestamp": "1785675630",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0214b0a-7172-427f-bfc8-d2d1fae7f0b7",
        "value": "apis.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:30+00:00",
        "timestamp": "1785675630",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd372e08-12ee-4ce2-8f7f-7d4cbc31de27",
        "value": "apis.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:30+00:00",
        "timestamp": "1785675630",
        "to_ids": true,
        "type": "domain",
        "uuid": "60bdb83d-7dd6-4c8e-bae5-d6bf2940fe8e",
        "value": "apis.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:30+00:00",
        "timestamp": "1785675631",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f781e8b-f5f5-410c-a8df-171b6b70bea6",
        "value": "apis.loginemai.com.br",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:31+00:00",
        "timestamp": "1785675631",
        "to_ids": true,
        "type": "domain",
        "uuid": "60fb914e-a509-4051-84b7-fe0fea8fc260",
        "value": "apis.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:31+00:00",
        "timestamp": "1785675631",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9c1d694-9322-454d-93f1-11806c85dc33",
        "value": "apis.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:31+00:00",
        "timestamp": "1785675631",
        "to_ids": true,
        "type": "domain",
        "uuid": "c402bb7c-a0a0-4459-8545-2798ec121d81",
        "value": "apis.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:31+00:00",
        "timestamp": "1785675631",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbfa7e1d-0d4e-4932-a485-38cc52ea35ab",
        "value": "apm.vpce.gdw55e.vdjhrr.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:31+00:00",
        "timestamp": "1785675631",
        "to_ids": true,
        "type": "domain",
        "uuid": "11a8d0a7-9491-4d24-a092-8536d3fa844f",
        "value": "app-qbo.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:31+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ae84235-7081-44cd-81d9-b206f23bd69e",
        "value": "app.154-86-119-227.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:32+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "356b9bd7-242b-4efa-8f9c-a10bd05d37d2",
        "value": "app.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:32+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc8d10a2-829b-46a9-9f2a-c11576415b62",
        "value": "app.portal-verify.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:32+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "21a4d42a-263f-40a3-99b9-cdf338d9521c",
        "value": "app.private-info.support",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:32+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ddf2259-c5ec-4bd8-aa76-855a50adef32",
        "value": "appleid-cdn.icloud.accounts-secured.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:32+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a22ce51-fc3a-4b21-a50a-84808abb1f7e",
        "value": "appleid-cdn.storage-icloude.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:32+00:00",
        "timestamp": "1785675632",
        "to_ids": true,
        "type": "domain",
        "uuid": "7fcd54b3-b517-4199-bb3f-1a62119f340f",
        "value": "appletotal.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675633",
        "to_ids": true,
        "type": "domain",
        "uuid": "490cd81a-26ec-43a7-9d3d-dad8f2437dff",
        "value": "apps.154-86-119-227.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675633",
        "to_ids": true,
        "type": "domain",
        "uuid": "74bf671d-94a6-4b07-b6c3-a5c67540eff4",
        "value": "apps.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675633",
        "to_ids": true,
        "type": "domain",
        "uuid": "955976ee-bb15-4dcb-8c54-f4b68758eafa",
        "value": "asdfdf.sporterfan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675633",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac267035-6641-4bb7-9b70-5b5046fa522d",
        "value": "asdgiukl.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675633",
        "to_ids": true,
        "type": "domain",
        "uuid": "917d6b5b-7088-4b6a-bc7a-9233e7952473",
        "value": "assets.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675633",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bcc96f6-cc16-4e3e-a734-62e6147b65b1",
        "value": "atlas.hdgv.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:33+00:00",
        "timestamp": "1785675634",
        "to_ids": true,
        "type": "domain",
        "uuid": "be9a17b6-ad4e-4ff0-92f3-f1e31052e09e",
        "value": "auth.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:34+00:00",
        "timestamp": "1785675634",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9119e0c-959e-4282-823a-e3132e0761bf",
        "value": "auth.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:34+00:00",
        "timestamp": "1785675634",
        "to_ids": true,
        "type": "domain",
        "uuid": "1037d8c0-57c1-4189-ad7b-cf80adfc1ed5",
        "value": "auth.ticketmaster.komba.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:34+00:00",
        "timestamp": "1785675634",
        "to_ids": true,
        "type": "domain",
        "uuid": "66f5b58a-5e8a-4aae-9ccb-54418f90b7f5",
        "value": "auth.usaubereats.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:34+00:00",
        "timestamp": "1785675634",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9b1e5b4-0511-4669-9c8f-4371a6751e24",
        "value": "auth.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:34+00:00",
        "timestamp": "1785675634",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3dd9629-bbdc-4836-872b-2276b26b9a7e",
        "value": "auth0api.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:34+00:00",
        "timestamp": "1785675635",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea629993-051e-43a9-9a77-7ed5cf6c113f",
        "value": "auth0au.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:35+00:00",
        "timestamp": "1785675635",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab9bfa51-c77e-427a-b571-678e0389b9fb",
        "value": "auth0cdn.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:35+00:00",
        "timestamp": "1785675635",
        "to_ids": true,
        "type": "domain",
        "uuid": "a783c590-0c6a-4416-bdfa-5e1dd4369198",
        "value": "auth0eu.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:35+00:00",
        "timestamp": "1785675635",
        "to_ids": true,
        "type": "domain",
        "uuid": "65708219-6e9d-47c9-957c-bfa7d1e14774",
        "value": "auth0login.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:35+00:00",
        "timestamp": "1785675635",
        "to_ids": true,
        "type": "domain",
        "uuid": "10bad48f-4c0a-4612-ae81-9e7ab640fe35",
        "value": "authgfx.office.mywallet.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:35+00:00",
        "timestamp": "1785675635",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f793062-4d61-45c3-81f4-428e0864f957",
        "value": "authlg.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:35+00:00",
        "timestamp": "1785675636",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0982f34-ce52-4c4d-b66c-5d949af664bd",
        "value": "authpoint.usa.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:36+00:00",
        "timestamp": "1785675636",
        "to_ids": true,
        "type": "domain",
        "uuid": "26b93dd6-4d6e-435b-a1cb-5cc56bc1742f",
        "value": "authpoint.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:36+00:00",
        "timestamp": "1785675636",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cb843ce-32e4-4d60-8159-af3da32ea6d6",
        "value": "autn.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:36+00:00",
        "timestamp": "1785675636",
        "to_ids": true,
        "type": "domain",
        "uuid": "227e94ae-cfb5-4fd2-8e1b-dbf37e9128c4",
        "value": "autologon.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:36+00:00",
        "timestamp": "1785675636",
        "to_ids": true,
        "type": "domain",
        "uuid": "21bdbafb-697e-4d82-bcef-7a14234189cc",
        "value": "autologon.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:36+00:00",
        "timestamp": "1785675636",
        "to_ids": true,
        "type": "domain",
        "uuid": "e21d6fab-709d-4b89-9a61-5c2017f7554d",
        "value": "avatars.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:36+00:00",
        "timestamp": "1785675637",
        "to_ids": true,
        "type": "domain",
        "uuid": "d699a5e8-261c-4493-98d0-1193063c3918",
        "value": "aventuresaviation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:37+00:00",
        "timestamp": "1785675637",
        "to_ids": true,
        "type": "domain",
        "uuid": "301f2821-ec4c-45a9-82d4-1f27e893426f",
        "value": "b.stats.paypal.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:37+00:00",
        "timestamp": "1785675637",
        "to_ids": true,
        "type": "domain",
        "uuid": "067f5e15-15d0-4bed-bc33-7c89aebfb77e",
        "value": "b2.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:37+00:00",
        "timestamp": "1785675637",
        "to_ids": true,
        "type": "domain",
        "uuid": "021d967a-64ce-41ad-a67c-abf8800a32a7",
        "value": "b2cauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:37+00:00",
        "timestamp": "1785675637",
        "to_ids": true,
        "type": "domain",
        "uuid": "19c657ed-a9a4-49bf-adb0-e0fe940e11a2",
        "value": "b2clogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:37+00:00",
        "timestamp": "1785675637",
        "to_ids": true,
        "type": "domain",
        "uuid": "f27af126-c98b-46a7-a244-808178475aea",
        "value": "bcfremote.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:37+00:00",
        "timestamp": "1785675638",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdd63240-5265-4f40-9b86-b9882f059b53",
        "value": "bcm.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:38+00:00",
        "timestamp": "1785675638",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa82d0de-7e60-4a99-937b-aa1d17753a5b",
        "value": "bdo.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:38+00:00",
        "timestamp": "1785675638",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ba872f4-a7b3-4089-ac46-b5456807e34b",
        "value": "beamer.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:38+00:00",
        "timestamp": "1785675638",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a158803-36ad-4ff7-a637-3ed0393508cc",
        "value": "bewdleybridge.co.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:38+00:00",
        "timestamp": "1785675638",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d2e04d2-59bf-43a5-859f-b5c98ff532f7",
        "value": "bing.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:38+00:00",
        "timestamp": "1785675638",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae60787d-b9c1-478e-9f5e-bf2470813939",
        "value": "birdiethirty.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:38+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "9874426d-ed35-4873-ab86-5deed85c829f",
        "value": "biz-gooogle.ltd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:39+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7893bd1-2997-48b1-9fe3-c836cb7fd622",
        "value": "bladerunner.lab.evilginx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:39+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "eda1d042-f8c5-42e7-a36d-dd28e315ac57",
        "value": "blockchain92i.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:39+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2c63469-e6d6-469f-9ff8-df8241786065",
        "value": "blog.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:39+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d3a54ca-68d8-4525-8835-dd3d34148ed3",
        "value": "blogger.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:39+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "58079229-b5f7-4615-b275-c06e9110cdf9",
        "value": "bphkxnap.texteq.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:39+00:00",
        "timestamp": "1785675639",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aab3f68-4e05-4816-86a3-0c82818833d2",
        "value": "browser.events.data.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675640",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1da1dc3-0eea-4dec-b40c-f89b65864c98",
        "value": "browser.events.data.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675640",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc52dece-5e82-406f-9c10-1d46bbc7df7f",
        "value": "bs.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675640",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e23b96a-4aa3-43bb-8265-bed87f3990a2",
        "value": "business.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675640",
        "to_ids": true,
        "type": "domain",
        "uuid": "69d16536-dc53-4f09-ab04-107270ebfb5e",
        "value": "bx.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675640",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ea020fb-89ef-48a2-8d1c-149958cd23f6",
        "value": "c6.paypal.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675640",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2bddfdf-c2bb-458d-90c1-851ac0d65146",
        "value": "cache.marriott-rewards.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:40+00:00",
        "timestamp": "1785675641",
        "to_ids": true,
        "type": "domain",
        "uuid": "302cbc86-b12c-4357-a878-08ac69fa2678",
        "value": "calendar.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:41+00:00",
        "timestamp": "1785675641",
        "to_ids": true,
        "type": "domain",
        "uuid": "49ae5334-a23d-46f2-8584-9fb35a918de6",
        "value": "captcha.2.26.123.89.sslip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:41+00:00",
        "timestamp": "1785675641",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8e93d6d-79e0-4c3e-b083-719191c15673",
        "value": "capture.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:41+00:00",
        "timestamp": "1785675641",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d4a7169-492f-4ebc-925e-8f94d5b2817d",
        "value": "ccm.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:41+00:00",
        "timestamp": "1785675641",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cd418ca-274f-4c5c-893b-ea8f1f0a98f8",
        "value": "cdn-1.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:41+00:00",
        "timestamp": "1785675641",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2ee98f2-ac61-4047-9b02-eb16ee73f046",
        "value": "cdn-2.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:41+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "be577bf8-13b9-4c1b-b2c6-ac3676027f63",
        "value": "cdn-3.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:42+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f49e953-3db3-425b-884b-b447dfa612a5",
        "value": "cdn.37.148.134.208.nip.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:42+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8de59d3-d11c-44ba-bc1a-da40cd6edf99",
        "value": "cdn.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:42+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9be0555-c153-47a9-849d-919a36dcbdb8",
        "value": "cdn.check-photo.dderby.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:42+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "9913c753-4402-4102-a2ab-9de2e9db94eb",
        "value": "cdn.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:42+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9ba9d76-a93f-4fae-bd4f-3a8c8deb91a2",
        "value": "cdn.rs-dns.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:42+00:00",
        "timestamp": "1785675642",
        "to_ids": true,
        "type": "domain",
        "uuid": "3b113561-d145-415a-9654-21b7ecb2a030",
        "value": "cdn.secure-workportal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675643",
        "to_ids": true,
        "type": "domain",
        "uuid": "7219e02a-5dae-4d3a-bc79-fae695252dbc",
        "value": "cdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675643",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed15b8aa-9514-4b87-94d7-eee5d226ffac",
        "value": "cdn2.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675643",
        "to_ids": true,
        "type": "domain",
        "uuid": "60b73245-cf41-4997-8b0c-d98cb3de7853",
        "value": "cdndz.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675643",
        "to_ids": true,
        "type": "domain",
        "uuid": "328cc519-f54d-4e7f-949c-0aae8e4e3d42",
        "value": "centrify.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675643",
        "to_ids": true,
        "type": "domain",
        "uuid": "76302295-d985-4022-9d8f-ba647527b7a9",
        "value": "centrifypod.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675643",
        "to_ids": true,
        "type": "domain",
        "uuid": "3db6a313-b196-45c4-b478-f3ea6212ffe8",
        "value": "ceres-das.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:43+00:00",
        "timestamp": "1785675644",
        "to_ids": true,
        "type": "domain",
        "uuid": "98f456df-6bc3-4d36-8262-6e5af821b527",
        "value": "cfl.demo.ifcs-demo-bb.win",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:44+00:00",
        "timestamp": "1785675644",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c09425a-84aa-44bc-b01e-ef4abce38309",
        "value": "cfp.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:44+00:00",
        "timestamp": "1785675644",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ff2d834-320e-4f39-82ca-4f733572c118",
        "value": "cheesengtong.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:44+00:00",
        "timestamp": "1785675644",
        "to_ids": true,
        "type": "domain",
        "uuid": "b98a2e6a-c8f4-45a0-a010-60302d56fe0b",
        "value": "ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:44+00:00",
        "timestamp": "1785675644",
        "to_ids": true,
        "type": "domain",
        "uuid": "8335b9ae-aa5a-453c-abac-98a3e26264f6",
        "value": "cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:44+00:00",
        "timestamp": "1785675644",
        "to_ids": true,
        "type": "domain",
        "uuid": "80808ba1-5645-4e0a-8e8d-c3afaf3f9a40",
        "value": "cisco.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:44+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "8de27469-cfbe-44a8-9ad3-104c27a628b6",
        "value": "citrix.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bc94854-116c-4018-99e7-f72353be5f3f",
        "value": "clck.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "30a09944-b337-4e0c-a4fa-3b323569ad25",
        "value": "clients1.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "be147aef-d462-4caf-94d8-6d0bc5229a59",
        "value": "clients2.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffed98bf-06a1-4f11-862c-f02f33b0a9a1",
        "value": "clients3.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "22b80790-52d4-4585-8695-70109b70124c",
        "value": "clients4.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675645",
        "to_ids": true,
        "type": "domain",
        "uuid": "c68f4686-091f-4617-8413-b368322872ed",
        "value": "clients5.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:45+00:00",
        "timestamp": "1785675646",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a971d9f-0eb5-4681-ba9d-1860ef152e40",
        "value": "clients6.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:46+00:00",
        "timestamp": "1785675646",
        "to_ids": true,
        "type": "domain",
        "uuid": "4411b7c6-ad21-4cb5-87ec-76f3069a43fe",
        "value": "cloud.duosign.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:46+00:00",
        "timestamp": "1785675646",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7e0811a-091d-4866-a5cd-8f6aebff82d0",
        "value": "cloudfront.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:46+00:00",
        "timestamp": "1785675646",
        "to_ids": true,
        "type": "domain",
        "uuid": "f935a1a2-b8fe-4552-bd22-a7790cca0f6f",
        "value": "cloudfront.net.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:46+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba3ac2e7-e0f1-480c-ac6f-173586bf9c90",
        "value": "cloudfront.net.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:47+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5eb51a5-3164-414f-9192-d276693e41ac",
        "value": "codbilkedsas.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:47+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e1b874b-7a85-4826-98cc-ecb67434d418",
        "value": "com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:47+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "983a74ba-9f26-4b4b-9634-7054b2677ec7",
        "value": "com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:47+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "a41c8f64-81d4-4e19-8e97-dafc300ae110",
        "value": "completion.xst.wddj.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:47+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "893dda39-c572-4751-af33-b0b522891df8",
        "value": "connect.celticcommunications.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:47+00:00",
        "timestamp": "1785675647",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c59308d-6895-4c71-bbc0-5047e5f806af",
        "value": "connect.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675648",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ff2edb0-3dd7-474c-9c91-4d3554dccdad",
        "value": "consent-cmp.stripe-accountverify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675648",
        "to_ids": true,
        "type": "domain",
        "uuid": "70197ae9-f172-4c25-a7b1-9946ce18b430",
        "value": "content.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675648",
        "to_ids": true,
        "type": "domain",
        "uuid": "020b98c6-33dc-4b96-8697-6cf184d45829",
        "value": "content.lifecycle.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675648",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ef01326-62a6-4212-9541-e4d29343f534",
        "value": "content.secuautcheck.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675648",
        "to_ids": true,
        "type": "domain",
        "uuid": "460ac098-840c-4649-8c08-b5ce26caf576",
        "value": "content.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675648",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9769d10-f406-4500-94a2-b6d481ea9d39",
        "value": "content.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:48+00:00",
        "timestamp": "1785675649",
        "to_ids": true,
        "type": "domain",
        "uuid": "c33d377f-2178-4337-9859-b2db7ecc630a",
        "value": "content.vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:49+00:00",
        "timestamp": "1785675649",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2e62b47-b34d-4f7b-848f-d1cc0ace56c3",
        "value": "contract.xxx",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:49+00:00",
        "timestamp": "1785675649",
        "to_ids": true,
        "type": "domain",
        "uuid": "39600f12-99cf-4fdb-8af9-a78209947d70",
        "value": "copilot.994e79c0-ffb1-4df9-b623.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:49+00:00",
        "timestamp": "1785675649",
        "to_ids": true,
        "type": "domain",
        "uuid": "98870bc7-f2da-4e2e-b9c8-2606eeae5333",
        "value": "corp-express.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:49+00:00",
        "timestamp": "1785675649",
        "to_ids": true,
        "type": "domain",
        "uuid": "c156d0e3-8834-40ad-82ce-e8bdb40abb53",
        "value": "corsapi.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:49+00:00",
        "timestamp": "1785675649",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ac804e3-e09a-4a8d-a411-1982052c9b70",
        "value": "cpanel.niii.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:49+00:00",
        "timestamp": "1785675650",
        "to_ids": true,
        "type": "domain",
        "uuid": "64cb1625-88fd-41ea-a10b-e074b0c002f2",
        "value": "csp.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:50+00:00",
        "timestamp": "1785675650",
        "to_ids": true,
        "type": "domain",
        "uuid": "27897f29-1161-4aa2-a469-3c8bc7a333ce",
        "value": "csp.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:50+00:00",
        "timestamp": "1785675650",
        "to_ids": true,
        "type": "domain",
        "uuid": "4637b7c3-178b-4f29-825c-c9f8516f5282",
        "value": "csp.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:50+00:00",
        "timestamp": "1785675650",
        "to_ids": true,
        "type": "domain",
        "uuid": "d10fc9b9-e9ec-420c-b393-840699c16896",
        "value": "csp.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:50+00:00",
        "timestamp": "1785675650",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8481993-1a7b-44b4-ab04-66ed5bffbffd",
        "value": "csp.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:50+00:00",
        "timestamp": "1785675650",
        "to_ids": true,
        "type": "domain",
        "uuid": "660fa8c5-9568-4585-a660-5ef701c59c30",
        "value": "cudasvc.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:50+00:00",
        "timestamp": "1785675651",
        "to_ids": true,
        "type": "domain",
        "uuid": "84f0b713-14fc-4388-ad14-4e22dc3060b7",
        "value": "cudasvc.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:51+00:00",
        "timestamp": "1785675651",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1c49c0c-1a5a-4ce7-a148-51faaeed6eb3",
        "value": "cyberark.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:51+00:00",
        "timestamp": "1785675651",
        "to_ids": true,
        "type": "domain",
        "uuid": "491dea57-c646-414c-8b14-765d94753ece",
        "value": "cyberarkid.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:51+00:00",
        "timestamp": "1785675651",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5a625cc-00fc-472b-8a1d-c3c66cdec344",
        "value": "cyberarkidp.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:51+00:00",
        "timestamp": "1785675651",
        "to_ids": true,
        "type": "domain",
        "uuid": "484358e0-49a6-4791-aba2-78ceb1b20388",
        "value": "cyberpunk.lab.evilginx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:51+00:00",
        "timestamp": "1785675651",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba1a4806-661d-47a7-a002-5df2dd1bc98b",
        "value": "dashboard.microsoftaitech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:51+00:00",
        "timestamp": "1785675652",
        "to_ids": true,
        "type": "domain",
        "uuid": "f42eaa86-3022-4551-94d5-bfeb68b5a8d9",
        "value": "dashboardframework.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:52+00:00",
        "timestamp": "1785675652",
        "to_ids": true,
        "type": "domain",
        "uuid": "d50e192c-805b-4cca-bd1d-3a8960398d75",
        "value": "data.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:52+00:00",
        "timestamp": "1785675652",
        "to_ids": true,
        "type": "domain",
        "uuid": "b210883d-bed9-4f21-9c24-3f778f538e5c",
        "value": "db9c149a4ab5c4.cloudfront.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:52+00:00",
        "timestamp": "1785675652",
        "to_ids": true,
        "type": "domain",
        "uuid": "c367159f-6de7-4baa-8be6-aa78920672ed",
        "value": "dcc.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:52+00:00",
        "timestamp": "1785675652",
        "to_ids": true,
        "type": "domain",
        "uuid": "52730372-a321-4928-955b-3acae1ddc373",
        "value": "dealerhub.focusv.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:52+00:00",
        "timestamp": "1785675652",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2638e93-f78a-41e9-bfce-786f988f3ee2",
        "value": "delaware.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:52+00:00",
        "timestamp": "1785675653",
        "to_ids": true,
        "type": "domain",
        "uuid": "5eac107c-fbe5-46db-b2b0-19a5887c47aa",
        "value": "demo.ifcs-demo-bb.win",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:53+00:00",
        "timestamp": "1785675653",
        "to_ids": true,
        "type": "domain",
        "uuid": "e2835b3e-c332-4a52-b822-ef9123af2d81",
        "value": "desktop.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:53+00:00",
        "timestamp": "1785675653",
        "to_ids": true,
        "type": "domain",
        "uuid": "0996c349-d416-4896-9a75-5484bdc7dc7a",
        "value": "deusex.lab.evilginx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:53+00:00",
        "timestamp": "1785675653",
        "to_ids": true,
        "type": "domain",
        "uuid": "79a3cbc9-e98e-4356-a4e8-c09faceba4cb",
        "value": "device.login.ofice365.ca",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:53+00:00",
        "timestamp": "1785675653",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1991e70-90d6-4b26-a3d9-ad658d4f6f1a",
        "value": "device.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:53+00:00",
        "timestamp": "1785675653",
        "to_ids": true,
        "type": "domain",
        "uuid": "44002a6d-6d50-434e-8b52-bf3b422365df",
        "value": "deviceintel-identityra.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:53+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "49b2ed2d-e6da-45bc-b830-1096f6c9cf75",
        "value": "df.cfp.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:54+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6861806-8cf5-4156-b085-cf5763667f85",
        "value": "dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:54+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eab8026-cd6c-4f55-9e57-3de697d92cfa",
        "value": "docs.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:54+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "1516054f-8d29-409a-bc10-19f62ce6a88e",
        "value": "docusign.verifylogin.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:54+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "040f74d5-7a3d-4bfe-a3d8-d20af2d6dd97",
        "value": "dotfoods.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:54+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "79ff3b25-402c-4fb6-985a-bac34ebc7c77",
        "value": "dotfoods.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:54+00:00",
        "timestamp": "1785675654",
        "to_ids": true,
        "type": "domain",
        "uuid": "45406ba1-ba10-4708-9220-a724bbbc8eee",
        "value": "doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:55+00:00",
        "timestamp": "1785675655",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a6c8721-44de-49b5-a0f5-f14851085161",
        "value": "doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:55+00:00",
        "timestamp": "1785675655",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa6d06c3-7c2a-4f59-8388-673c9cd1fa16",
        "value": "doubleclick.net.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:55+00:00",
        "timestamp": "1785675655",
        "to_ids": true,
        "type": "domain",
        "uuid": "28f53188-7c61-4d27-a858-c1bbd6bc8465",
        "value": "dreamrayale.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:55+00:00",
        "timestamp": "1785675655",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a70030c-d348-4866-8895-8d4e8dd66124",
        "value": "drilltest.anugan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:55+00:00",
        "timestamp": "1785675655",
        "to_ids": true,
        "type": "domain",
        "uuid": "1142c604-265a-4510-9d8d-3cf5dc4af33c",
        "value": "drive.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:55+00:00",
        "timestamp": "1785675656",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe3c86bd-925a-41c4-9704-381e99ce04a9",
        "value": "drive.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:56+00:00",
        "timestamp": "1785675656",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d605f0b-8901-4c0b-84e6-fae994684ce1",
        "value": "drive.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:56+00:00",
        "timestamp": "1785675656",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0ee5d97-bd24-465e-bbb7-59c68fdde3da",
        "value": "drive.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:56+00:00",
        "timestamp": "1785675656",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c1ab4dd-dbdc-4434-aeb2-57709bbff835",
        "value": "dropboxcaptcha.drepbox.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:56+00:00",
        "timestamp": "1785675656",
        "to_ids": true,
        "type": "domain",
        "uuid": "301b90c0-5c06-47ae-8a7f-17e1cb5eba3a",
        "value": "dsxcwa.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:56+00:00",
        "timestamp": "1785675656",
        "to_ids": true,
        "type": "domain",
        "uuid": "efed34c1-0e89-4fcd-b7a6-bb89364afddc",
        "value": "du90lny7be.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:56+00:00",
        "timestamp": "1785675657",
        "to_ids": true,
        "type": "domain",
        "uuid": "2463d504-568b-44e0-b387-84a6ab53339d",
        "value": "duoadmin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:57+00:00",
        "timestamp": "1785675657",
        "to_ids": true,
        "type": "domain",
        "uuid": "c790d3a6-5b1c-4c3c-9c69-c0a2101a318a",
        "value": "duoapi.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:57+00:00",
        "timestamp": "1785675657",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bbd83a7-a335-4481-bc77-0ce7bde80d4f",
        "value": "duoauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:57+00:00",
        "timestamp": "1785675657",
        "to_ids": true,
        "type": "domain",
        "uuid": "71df4ae1-914b-496e-99e9-56c43587ea1d",
        "value": "duofed.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:57+00:00",
        "timestamp": "1785675657",
        "to_ids": true,
        "type": "domain",
        "uuid": "2324789d-629c-4927-afdb-308b9da8a460",
        "value": "duoframe.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:57+00:00",
        "timestamp": "1785675657",
        "to_ids": true,
        "type": "domain",
        "uuid": "b30e9d20-50ea-4380-af21-95ec90b06467",
        "value": "duosso.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:57+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c083293-6425-483d-967b-a467248a7dc7",
        "value": "duostatic.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:58+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "5597f836-03ed-4e09-9469-d3f977d28a7f",
        "value": "dynamic.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:58+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b9bccb1-6b38-4f2d-9b5c-ef32de3decf5",
        "value": "e.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:58+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "c648bdab-1c43-4de2-93cd-bcdd9e23650f",
        "value": "ecs.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:58+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "97c04407-661d-4782-9ffa-bc78053bc317",
        "value": "enterprise.bit24.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:58+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "5777a4f8-9303-4289-9c1b-ccb47d74dc1b",
        "value": "entrustauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:58+00:00",
        "timestamp": "1785675658",
        "to_ids": true,
        "type": "domain",
        "uuid": "38241405-cb99-496c-8419-7f894230c053",
        "value": "entrustid.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675659",
        "to_ids": true,
        "type": "domain",
        "uuid": "04af4bf0-06ab-439e-80ae-376d7115fec9",
        "value": "eu-central-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675659",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa7042d6-5113-4ecd-99ee-ef7ffd606726",
        "value": "eu-west-1.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675659",
        "to_ids": true,
        "type": "domain",
        "uuid": "e749163c-616b-4010-a4b2-8aea4c82078c",
        "value": "eu-west-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675659",
        "to_ids": true,
        "type": "domain",
        "uuid": "9362da03-fdd7-4b7c-bef2-965f54da40f2",
        "value": "eu.auth.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675659",
        "to_ids": true,
        "type": "domain",
        "uuid": "28450c05-041a-436d-a278-471494a78fba",
        "value": "eu0c435.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675659",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9623db9-99c1-4753-a551-6acd8987db1e",
        "value": "eur01.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:00:59+00:00",
        "timestamp": "1785675660",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e22df3f-efca-4e70-9195-2a2fdc59f1fc",
        "value": "eur02.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:00+00:00",
        "timestamp": "1785675660",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3931e55-0c44-425d-9ce6-35e827df9d8f",
        "value": "eur03.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:00+00:00",
        "timestamp": "1785675660",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7b1a6d6-af77-4359-9cb1-c223a7dd4c9a",
        "value": "eur04.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:00+00:00",
        "timestamp": "1785675660",
        "to_ids": true,
        "type": "domain",
        "uuid": "c4a315e1-5f0e-4391-96a2-dacead326e66",
        "value": "events.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:00+00:00",
        "timestamp": "1785675660",
        "to_ids": true,
        "type": "domain",
        "uuid": "27f36f19-8b04-4a86-9599-44ae5b5ad0bd",
        "value": "events.data.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:00+00:00",
        "timestamp": "1785675660",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c2923c9-3580-4dd1-ae2e-b1ff147940fd",
        "value": "events.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:00+00:00",
        "timestamp": "1785675661",
        "to_ids": true,
        "type": "domain",
        "uuid": "8621eb01-9522-4658-9ad9-cbf7da9c405c",
        "value": "events.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:01+00:00",
        "timestamp": "1785675661",
        "to_ids": true,
        "type": "domain",
        "uuid": "94f826b0-e84a-4e59-aa17-176368ba0a26",
        "value": "events.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:01+00:00",
        "timestamp": "1785675661",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1605f62-7c67-4de3-8a26-55def22b7852",
        "value": "evil-admin.inbox4sure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:01+00:00",
        "timestamp": "1785675661",
        "to_ids": true,
        "type": "domain",
        "uuid": "361aac63-5294-4f01-b2ee-ec08858ee44c",
        "value": "evil-admin.m4b.in",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:01+00:00",
        "timestamp": "1785675661",
        "to_ids": true,
        "type": "domain",
        "uuid": "3197d820-3acf-4bf7-8ad2-75202b678a2e",
        "value": "evil.ybo-lab.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:01+00:00",
        "timestamp": "1785675661",
        "to_ids": true,
        "type": "domain",
        "uuid": "580f5feb-6782-434d-8f41-7f7d9757f16b",
        "value": "evilginx-mgmt.zeabur.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:01+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "47d2a9d6-33eb-4ed2-9d6f-3907d0bf5cc6",
        "value": "evilginx-store.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "db983bbc-4472-4da2-9280-7b64449feb15",
        "value": "evilginx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c92a849-ffb9-4744-9238-39b9fb07eb86",
        "value": "evilginx.pushdemos.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6f651da-33d9-47a2-894e-1031118479fe",
        "value": "facebook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c9caf46-52c9-4208-ab76-57603faf498a",
        "value": "favicon.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8c895c8-799d-4c9e-9d1c-fa67127c701d",
        "value": "fbcdn.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675662",
        "to_ids": true,
        "type": "domain",
        "uuid": "e84cc387-9fca-4ea6-b44f-9eccff7b5c57",
        "value": "fc.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:02+00:00",
        "timestamp": "1785675663",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce92faa3-b8be-4ba0-9348-76fa8c85b371",
        "value": "fc.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:03+00:00",
        "timestamp": "1785675663",
        "to_ids": true,
        "type": "domain",
        "uuid": "1dd8052a-c2f1-42c6-aac6-ffa1fe52aef6",
        "value": "feedbackws.storage-icloude.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:03+00:00",
        "timestamp": "1785675663",
        "to_ids": true,
        "type": "domain",
        "uuid": "25a18d7d-a0e7-4eae-b170-cff3b50be614",
        "value": "files.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:03+00:00",
        "timestamp": "1785675663",
        "to_ids": true,
        "type": "domain",
        "uuid": "09f4ed9b-c5f7-439f-b58c-ff8c2a2d3c36",
        "value": "filin.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:03+00:00",
        "timestamp": "1785675663",
        "to_ids": true,
        "type": "domain",
        "uuid": "7710e734-923a-4a90-a966-07c9536bacff",
        "value": "fonts.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:03+00:00",
        "timestamp": "1785675663",
        "to_ids": true,
        "type": "domain",
        "uuid": "72d807af-5285-4b57-8796-d9d61600ca49",
        "value": "fonts.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:03+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3404db9-6709-4e6e-8970-2d378c916e6f",
        "value": "fonts.testing-evil.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ec4e2ec-3cce-4926-a1d8-7afcc06de39a",
        "value": "fonts.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f1ae127-736d-4e6f-be98-3fb0f386be21",
        "value": "forum.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "32923e5a-da4b-4f90-b0af-7f33d8501310",
        "value": "fpp.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "f43b4abe-4dca-4d33-ae16-179114be134e",
        "value": "fpt.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "105381c9-f02e-45b3-909b-143f821d0cbe",
        "value": "friam.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675664",
        "to_ids": true,
        "type": "domain",
        "uuid": "c803751e-412c-465e-b715-e5175e12b19f",
        "value": "frlogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:04+00:00",
        "timestamp": "1785675665",
        "to_ids": true,
        "type": "domain",
        "uuid": "723010a9-1a4f-4ade-b04f-606ddbb629ef",
        "value": "fropenam.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:05+00:00",
        "timestamp": "1785675665",
        "to_ids": true,
        "type": "domain",
        "uuid": "a1a32050-2b67-4afd-be25-88a0156a8850",
        "value": "fslogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:05+00:00",
        "timestamp": "1785675665",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a117c6a-8c69-4e44-9df7-56c0f790b845",
        "value": "g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:05+00:00",
        "timestamp": "1785675665",
        "to_ids": true,
        "type": "domain",
        "uuid": "5177cb7b-f216-4152-b4eb-606ed4554789",
        "value": "g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:05+00:00",
        "timestamp": "1785675665",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2d20c42-0181-48db-ab5d-23f6c700acc1",
        "value": "g.doubleclick.net.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:05+00:00",
        "timestamp": "1785675665",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5d6c625-ab26-4018-9c01-361bcb8e1a85",
        "value": "gallery.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:05+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc38ff8d-a4f1-4e90-a34c-34750400b0f6",
        "value": "gateway.icloud.accounts-secured.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "04ee6033-6ec4-4b85-8b60-b0ef835f4cb8",
        "value": "gd0.com.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c6c8710-7d14-4bbd-ae3e-8b59757d62d9",
        "value": "gdevents.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "acbbe13c-8fb8-4195-8b2d-5d13316d5cf5",
        "value": "gdgui.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "980f049f-76dc-4f45-b7a6-0dd5b1d2d7d5",
        "value": "gdimg1.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9110261-39e2-4403-9586-55df55e01911",
        "value": "gdimg6.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675666",
        "to_ids": true,
        "type": "domain",
        "uuid": "13a97591-7698-4dd6-b6bf-da43e54462ba",
        "value": "gdsso.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:06+00:00",
        "timestamp": "1785675667",
        "to_ids": true,
        "type": "domain",
        "uuid": "984a0c87-f0cc-41ad-aad1-41022ff7638c",
        "value": "ghjftyghbj.zeabur.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:07+00:00",
        "timestamp": "1785675667",
        "to_ids": true,
        "type": "domain",
        "uuid": "9cc73e6d-927c-4d7b-adb6-c2358df4ace2",
        "value": "github.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:07+00:00",
        "timestamp": "1785675667",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5ec925e-0e75-4c5d-b5b6-983940ecbc35",
        "value": "gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:07+00:00",
        "timestamp": "1785675667",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4f77671-8264-4688-9dc8-d2d8cbd6033b",
        "value": "go.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:07+00:00",
        "timestamp": "1785675667",
        "to_ids": true,
        "type": "domain",
        "uuid": "55791491-3e12-4b06-b741-b3759a257154",
        "value": "google.bain-corp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:07+00:00",
        "timestamp": "1785675667",
        "to_ids": true,
        "type": "domain",
        "uuid": "c917202b-d94f-4e96-925d-1abbbf7bb5a1",
        "value": "google.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:07+00:00",
        "timestamp": "1785675668",
        "to_ids": true,
        "type": "domain",
        "uuid": "52dec32c-3c1f-4700-bd90-e5af12a1585f",
        "value": "google.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:08+00:00",
        "timestamp": "1785675668",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bf924b1-faca-4f91-95db-42e5d09ec0d7",
        "value": "google.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:08+00:00",
        "timestamp": "1785675668",
        "to_ids": true,
        "type": "domain",
        "uuid": "009bcd91-5fac-4787-abc9-00b01bdfffc7",
        "value": "google.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:08+00:00",
        "timestamp": "1785675668",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e6d8a46-0676-4a77-8419-afc48b24abf1",
        "value": "googleads.g.doubleclick.net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:08+00:00",
        "timestamp": "1785675668",
        "to_ids": true,
        "type": "domain",
        "uuid": "6acbf227-4060-4135-b49d-88d8b16b0f54",
        "value": "googleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:08+00:00",
        "timestamp": "1785675668",
        "to_ids": true,
        "type": "domain",
        "uuid": "f3d55eec-49d4-4316-a928-7e5c83680b1e",
        "value": "googleads.g.doubleclick.net.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:08+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "79b5a764-7bba-4f38-a08d-1c9f2be541ad",
        "value": "googleadservices.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:09+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "d1d08c21-1122-4b44-9473-5b785c4838af",
        "value": "googletag.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:09+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba1f8ebf-25f4-4ac5-8a14-e1893bed8c07",
        "value": "googletagmanager.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:09+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "290c17d0-8a81-4dd0-9513-a464185b8b19",
        "value": "gpt-mail.stripe-accountverify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:09+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "b76bf3f2-7bfe-4935-9aaf-dc99426ee249",
        "value": "gpt.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:09+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "aaef3a63-da2f-4081-bcb0-5ceba6505e17",
        "value": "graph.eltestdelninio.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:09+00:00",
        "timestamp": "1785675669",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d274c8d-6980-422b-afff-58b489e87b1f",
        "value": "graph.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675670",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dd532c8-7fbb-4a57-b17b-b71f6d97c2b2",
        "value": "graph.serviceteamoffice365.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675670",
        "to_ids": true,
        "type": "domain",
        "uuid": "80cc5372-9562-47c2-ba57-a37da49f2fac",
        "value": "graph.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675670",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4fbb7e1-cd7b-432c-b56c-29ca2df73c98",
        "value": "graphql.login.masarofficial.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675670",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6f2424d-79d3-43cd-a742-e5120983958a",
        "value": "gsss1msqaguv.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675670",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e915806-a06b-43a9-aeb7-5d84356c0c30",
        "value": "gstatic.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675670",
        "to_ids": true,
        "type": "domain",
        "uuid": "419ee724-2aa2-42cd-97ad-225f4d63eff9",
        "value": "guce.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:10+00:00",
        "timestamp": "1785675671",
        "to_ids": true,
        "type": "domain",
        "uuid": "04f695f7-f4fc-4227-8d61-3da73e6f9d29",
        "value": "guce.onetime-authentication.cruiserscrib.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:11+00:00",
        "timestamp": "1785675671",
        "to_ids": true,
        "type": "domain",
        "uuid": "b378da7c-6a98-4fca-97e8-48dd4868924a",
        "value": "guce.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:11+00:00",
        "timestamp": "1785675671",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1b5a53b-cba5-4498-bbaf-abf01890aa57",
        "value": "gui.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:11+00:00",
        "timestamp": "1785675671",
        "to_ids": true,
        "type": "domain",
        "uuid": "90bd19ac-391f-42b6-b8c3-490728e72cbe",
        "value": "gui.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:11+00:00",
        "timestamp": "1785675671",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd1e7f28-2cce-4469-81e3-bb228efbf6b6",
        "value": "gui.vdjhrr.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:11+00:00",
        "timestamp": "1785675671",
        "to_ids": true,
        "type": "domain",
        "uuid": "520382de-446d-49da-a581-6906bb1d1abc",
        "value": "h7amzbxs.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:11+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "82a78dd2-7b64-4a33-8cf0-cacae7677244",
        "value": "hcwdg.ecraltchit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "d97e5ef6-87ad-4bd6-b6a9-af2329c0bfa4",
        "value": "hcwdg.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3b19cf0-892a-4e8a-af61-968d8fdafb78",
        "value": "hemenode-deposit3.holliganbet1129.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "943a0358-ebc2-4d2a-a1b1-e7ec16f6d3da",
        "value": "hervw.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fb3b0ce-db26-4361-9132-a58d0f1b722f",
        "value": "hge9h7c.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7bed61b-df86-41a6-a465-0ed5b1c8c60b",
        "value": "hnrvrve.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675672",
        "to_ids": true,
        "type": "domain",
        "uuid": "51d44961-3e8e-40f8-ae1a-8bbf9a4d99ff",
        "value": "home.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:12+00:00",
        "timestamp": "1785675673",
        "to_ids": true,
        "type": "domain",
        "uuid": "5efa7fef-ed75-4b43-987d-544f58550a49",
        "value": "homeoffice.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:13+00:00",
        "timestamp": "1785675673",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1b7313e-00f1-48dd-976f-c2d0308f8b80",
        "value": "hrvetbr.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:13+00:00",
        "timestamp": "1785675673",
        "to_ids": true,
        "type": "domain",
        "uuid": "564c7fe6-32f1-4b18-a5cf-f43040cb029a",
        "value": "hterw.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:13+00:00",
        "timestamp": "1785675673",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e4ec974-3f1a-4827-a350-a4270a58b895",
        "value": "icloud2.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:13+00:00",
        "timestamp": "1785675673",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c4283b0-917c-454a-9ea7-88e2e873051b",
        "value": "id.alifabank.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:13+00:00",
        "timestamp": "1785675673",
        "to_ids": true,
        "type": "domain",
        "uuid": "7503bb8f-e388-45f3-bb9f-d5f12b803992",
        "value": "id.hdgv.ru",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:13+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b98faf0-a57d-498f-a8aa-c1006c859990",
        "value": "id.outiook-offlceauthyfyveriflive.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:14+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "687a972f-f5da-4b06-bdbc-fa81b62b93a4",
        "value": "id.rootvk.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:14+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "b35871da-8b64-4da7-9eb9-570fc4b9849f",
        "value": "id.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:14+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "0973c8dc-fe8f-4983-bbc3-19882248a911",
        "value": "id4.apipersforating.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:14+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f5b84b5-9391-43c0-ad2b-8276fb41c143",
        "value": "idmsa.storage-icloude.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:14+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a47e682-e0bf-49e4-b428-f1b1d81faa8d",
        "value": "iframe.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:14+00:00",
        "timestamp": "1785675674",
        "to_ids": true,
        "type": "domain",
        "uuid": "76761486-5458-45b0-bfcc-8bd81dd3bc82",
        "value": "ig-verify.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675675",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc88fd52-fbb9-4bc9-802c-4514742c3975",
        "value": "images.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675675",
        "to_ids": true,
        "type": "domain",
        "uuid": "394ba91e-5d8f-45e9-9f29-9856e3dad51f",
        "value": "imap.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675675",
        "to_ids": true,
        "type": "domain",
        "uuid": "6496bb9c-abfe-447d-8b5a-d82c11fad198",
        "value": "img.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675675",
        "to_ids": true,
        "type": "domain",
        "uuid": "5113ea07-4630-489b-8ce5-23d2291e8065",
        "value": "img1.aventuresaviation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675675",
        "to_ids": true,
        "type": "domain",
        "uuid": "18a09f74-b2bd-4721-91c1-af850c0895a0",
        "value": "img6.mikecrosoft.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675675",
        "to_ids": true,
        "type": "domain",
        "uuid": "04f0d8d4-13ad-473c-9273-51712c24277f",
        "value": "imgs.protonn.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:15+00:00",
        "timestamp": "1785675676",
        "to_ids": true,
        "type": "domain",
        "uuid": "03c30058-3387-49cb-b734-f9641bd57857",
        "value": "imgs2.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:16+00:00",
        "timestamp": "1785675676",
        "to_ids": true,
        "type": "domain",
        "uuid": "11aa0b94-a052-4861-8e44-50f956fe9daf",
        "value": "instagram.oudblast.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:16+00:00",
        "timestamp": "1785675676",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca29aa35-cbee-4c6a-a47c-641227dcd470",
        "value": "intercourierservice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:16+00:00",
        "timestamp": "1785675676",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ad437a0-472a-4cc1-86a5-167cdc0f381d",
        "value": "internet.1web4all.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:16+00:00",
        "timestamp": "1785675676",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b0371b0-89e1-4c56-9054-3e79fab80ca2",
        "value": "intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:16+00:00",
        "timestamp": "1785675676",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e68a9a7-30ee-4476-b6be-be2473ecf3a1",
        "value": "iu3b21s0q.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:16+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "2675bfb9-8cfa-49d0-baa2-2b06306f1203",
        "value": "jjzabigzhgx.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a0219b8-f333-4108-ab5b-75f9baa68b0c",
        "value": "join.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "16b95d93-5a28-4f0c-8081-92ce6041dbc2",
        "value": "jumpcloud.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "98da9419-7750-4aa4-a2ce-7761b36c1aad",
        "value": "jumpsso.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "59eeb7ac-d039-438c-aeab-f8574cb7b6c1",
        "value": "jycxa4jmfow1.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "51c6bc96-28f0-4100-a97f-3e06304e1b4d",
        "value": "kmxarm.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675677",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc276381-dd53-4351-9666-edb3582de70d",
        "value": "kws1-1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:17+00:00",
        "timestamp": "1785675678",
        "to_ids": true,
        "type": "domain",
        "uuid": "c64b7715-9e6d-476c-a99d-f188e2d27ac3",
        "value": "kws1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:18+00:00",
        "timestamp": "1785675678",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee684e5d-9e75-409b-b67d-5b9b1cb7f1e3",
        "value": "kws2-1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:18+00:00",
        "timestamp": "1785675678",
        "to_ids": true,
        "type": "domain",
        "uuid": "59222c10-0b7c-4764-b1a7-182d9675eb11",
        "value": "kws2.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:18+00:00",
        "timestamp": "1785675678",
        "to_ids": true,
        "type": "domain",
        "uuid": "87ddf533-b4ef-415e-9796-b81107e16064",
        "value": "kws21.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:18+00:00",
        "timestamp": "1785675678",
        "to_ids": true,
        "type": "domain",
        "uuid": "26aa5c44-79b2-464e-aad5-af3e04f5a61c",
        "value": "kws4-1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:18+00:00",
        "timestamp": "1785675678",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4df8cad-664b-47ea-b349-06ecabfa55d5",
        "value": "kws4.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:18+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad659e52-8a24-473a-a48a-4e89ab082b80",
        "value": "kws41.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:19+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1980eb-0ae0-42e7-abe2-0831f7b5c10a",
        "value": "kws5-1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:19+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcefc380-c695-434f-9399-09bbfa56719e",
        "value": "kws5.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:19+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5ce0b59-ae79-4e06-a564-e87d26060da0",
        "value": "l.facebook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:19+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "d53b3aef-4875-479b-ab5c-fe77f98bd5b7",
        "value": "lab.evilginx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:19+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dae92ac-3b50-452e-853b-0f32ddadac45",
        "value": "lgcdn.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:19+00:00",
        "timestamp": "1785675679",
        "to_ids": true,
        "type": "domain",
        "uuid": "30efcbf2-b9c6-4205-9433-e8c7767ef321",
        "value": "lgcdn.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675680",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f864b96-d1a2-46dc-bb17-1b113db0d534",
        "value": "lgmss.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675680",
        "to_ids": true,
        "type": "domain",
        "uuid": "398758ea-ae3a-4633-9ded-024ae8ff176e",
        "value": "lh3.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675680",
        "to_ids": true,
        "type": "domain",
        "uuid": "7472fb96-5581-443d-b7d8-c4596a279c81",
        "value": "lh3.vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675680",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b100d4d-e79e-42db-9ee9-eba4c35592cf",
        "value": "lifecycle.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675680",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b87299d-740a-4263-b863-4fdc92085519",
        "value": "likemore-go.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675680",
        "to_ids": true,
        "type": "domain",
        "uuid": "eddc097c-e118-44e1-a77a-0a14381ee190",
        "value": "limg.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:20+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "53c4a1c8-a828-4064-94b1-559b2a4095aa",
        "value": "linkedin-api.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:21+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "06cc20b8-7471-4d7f-857a-448e6def191e",
        "value": "linkedin.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:21+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "d53619ac-7f83-4b9e-99d4-74b20757e615",
        "value": "linkprotect.cudasvc.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:21+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "cafed063-10a8-4f5a-9132-0718d9d73100",
        "value": "live.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:21+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "044f1ba8-17f3-46e8-9cbb-950403725fdf",
        "value": "live.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:21+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f58c027-9579-492c-9e20-dc4132d02018",
        "value": "live.vdjhrr.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:21+00:00",
        "timestamp": "1785675681",
        "to_ids": true,
        "type": "domain",
        "uuid": "257b16af-9312-4b74-a18f-4b62b30f39bc",
        "value": "lm.takersuz-lab.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675682",
        "to_ids": true,
        "type": "domain",
        "uuid": "862cbd66-bbaa-46ec-b552-00138c293a3c",
        "value": "log.vdjhrr.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675682",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5822f9c-d032-4bb8-a615-c08144434292",
        "value": "logdz.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675682",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3c27dab-4906-4633-8f20-d613e5801fc7",
        "value": "login-live.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675682",
        "to_ids": true,
        "type": "domain",
        "uuid": "8262cf27-a25a-4149-a160-e8a07b254ac1",
        "value": "login-ms.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675682",
        "to_ids": true,
        "type": "domain",
        "uuid": "b30c59a6-d4fc-4176-8dd8-72e435b18624",
        "value": "login.a1teryx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675682",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdac37df-7d18-4427-bbc9-d905497fc543",
        "value": "login.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:22+00:00",
        "timestamp": "1785675683",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5113a6c-e2a1-48ed-a892-24cb9ff08a63",
        "value": "login.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:23+00:00",
        "timestamp": "1785675683",
        "to_ids": true,
        "type": "domain",
        "uuid": "d20f37e3-22a4-4d08-903e-fe9b9ba6ddc2",
        "value": "login.aol.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:23+00:00",
        "timestamp": "1785675683",
        "to_ids": true,
        "type": "domain",
        "uuid": "b22545d2-5c6e-45e4-a155-c066fe845d2b",
        "value": "login.aventuresaviation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:23+00:00",
        "timestamp": "1785675683",
        "to_ids": true,
        "type": "domain",
        "uuid": "232d46fa-f326-4d88-9225-8671daf7e3e5",
        "value": "login.bewdleybridge.co.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:23+00:00",
        "timestamp": "1785675683",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6b30397-4c4e-4eff-ae9d-6d81a9adc967",
        "value": "login.cailovelife.art",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:23+00:00",
        "timestamp": "1785675683",
        "to_ids": true,
        "type": "domain",
        "uuid": "3561d3ed-351d-43a4-b127-2075528a580a",
        "value": "login.cdn.tripleclickads.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:23+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "62bd6d6c-2490-47d4-81a7-dcf8d3d5b325",
        "value": "login.check-photo.dderby.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "d62a42ac-1ce1-46ce-b64e-825fc9480067",
        "value": "login.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "da3158a5-c578-453a-a489-786af4a3382f",
        "value": "login.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f63498a-0d71-4c29-b6d6-d95b64ad5970",
        "value": "login.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e11cfab-476b-47ab-86db-da4a80c30df8",
        "value": "login.formall.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f96806f-c271-48eb-ba0c-b5e229997daa",
        "value": "login.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675684",
        "to_ids": true,
        "type": "domain",
        "uuid": "b47e59bc-0161-41fc-b756-c0052f4c2f30",
        "value": "login.intercourierservice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:24+00:00",
        "timestamp": "1785675685",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f8b8d0e-d7bc-4817-9733-27fc04634575",
        "value": "login.login.o365.teams-microsoftonline-com-common-oauth2-v2-0-authorize-login.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:25+00:00",
        "timestamp": "1785675685",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f97a773-e222-4d7f-af1b-946f5e4ad183",
        "value": "login.login.takersuz-lab.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:25+00:00",
        "timestamp": "1785675685",
        "to_ids": true,
        "type": "domain",
        "uuid": "44b806c3-6607-4d4a-b154-0c165f941b5d",
        "value": "login.loginverify365.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:25+00:00",
        "timestamp": "1785675685",
        "to_ids": true,
        "type": "domain",
        "uuid": "24ccaff4-8909-46ab-a254-8a56789f76c6",
        "value": "login.magllatech.co.tz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:25+00:00",
        "timestamp": "1785675685",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b4afddf-5fd3-4ed0-b4fa-dbe0a4cc46c9",
        "value": "login.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:25+00:00",
        "timestamp": "1785675685",
        "to_ids": true,
        "type": "domain",
        "uuid": "4cb15b34-b229-482a-80a3-9b927c00a77e",
        "value": "login.microsoftonline.com.maya-auth.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:25+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "05ba59d0-6b43-4981-a7d5-20cbca4bc6fe",
        "value": "login.microsoftonline.otp-secure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:26+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba5ebf1b-cd99-4e85-a52f-5ab215215915",
        "value": "login.midarnericapaper.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:26+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "82e2d3cc-3749-447e-a680-ef99727db5d4",
        "value": "login.mselite.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:26+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "fbf5ce7c-c93e-4c66-bc0e-1d42329ed8db",
        "value": "login.myliveoffice.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:26+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "adad80ef-c195-483c-aa57-f1d618f7b796",
        "value": "login.o365.expreahsha.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:26+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "64a4bf9e-432f-4bf7-ac4c-31b066d0fb0b",
        "value": "login.onetime-authentication.cruiserscrib.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:26+00:00",
        "timestamp": "1785675686",
        "to_ids": true,
        "type": "domain",
        "uuid": "55812952-3b1d-4cc7-ba9b-ea373ce932bd",
        "value": "login.outlook.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675687",
        "to_ids": true,
        "type": "domain",
        "uuid": "e89751d1-1e0e-4748-931d-417161b2056e",
        "value": "login.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675687",
        "to_ids": true,
        "type": "domain",
        "uuid": "f38f7cd6-a6b8-4d37-99ff-596ba2e8210d",
        "value": "login.re-acc.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675687",
        "to_ids": true,
        "type": "domain",
        "uuid": "909763ff-7079-4617-a3ad-472da6809e95",
        "value": "login.realxcore.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675687",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a0a80bc-0c8e-4fbd-92a2-f5b35d6d2a1a",
        "value": "login.rmrocha-eng.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675687",
        "to_ids": true,
        "type": "domain",
        "uuid": "026949aa-e349-40ba-9d7e-dd0c59d61eca",
        "value": "login.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675687",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec398a14-bc62-47b3-9eb7-5d2554082b44",
        "value": "login.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:27+00:00",
        "timestamp": "1785675688",
        "to_ids": true,
        "type": "domain",
        "uuid": "a998244f-05b4-45b9-a051-d7223fda6afa",
        "value": "login.rootvk.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:28+00:00",
        "timestamp": "1785675688",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b0eb206-a4f9-4e9a-ba9c-4223c4b445bf",
        "value": "login.salenndoor.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:28+00:00",
        "timestamp": "1785675688",
        "to_ids": true,
        "type": "domain",
        "uuid": "30bc720e-fa53-4c1b-aa9f-456720f2c641",
        "value": "login.secured-signin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:28+00:00",
        "timestamp": "1785675688",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f2bcaaa-005a-4a6a-8b8c-fcdaa7c97cde",
        "value": "login.signal-relay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:28+00:00",
        "timestamp": "1785675688",
        "to_ids": true,
        "type": "domain",
        "uuid": "723fa3aa-dd5c-48ce-b3a3-7b33f41aaccd",
        "value": "login.takersuz-lab.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:28+00:00",
        "timestamp": "1785675688",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5023f13-2d3d-430d-9008-f271720bc93b",
        "value": "login.teamhroffice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:28+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba0aa971-63e2-431e-99f0-74734b60b785",
        "value": "login.testing01.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "49b1eef7-0b0b-4ad4-9539-b79cba916dce",
        "value": "login.ultimate-cloudbrowser.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c449c84-1b77-4f28-b75c-ba9ba6c768c5",
        "value": "login.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "b83b92a3-a0b9-4451-aa65-04bc8a7cf139",
        "value": "login.xfr0.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad357c31-a2e4-4a6c-af08-eb71d2244087",
        "value": "login.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d38baec-368c-4000-a64b-34ebe0f73939",
        "value": "login1.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675689",
        "to_ids": true,
        "type": "domain",
        "uuid": "13c1a593-f8e1-4c1c-b717-8b800207b626",
        "value": "logincdn.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:29+00:00",
        "timestamp": "1785675690",
        "to_ids": true,
        "type": "domain",
        "uuid": "1829b8bc-eef5-4372-acee-df87c769a501",
        "value": "logincdn.signal-relay.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:30+00:00",
        "timestamp": "1785675690",
        "to_ids": true,
        "type": "domain",
        "uuid": "3298d13b-e187-4f8b-aba5-adfc2f8d6efc",
        "value": "logincdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:30+00:00",
        "timestamp": "1785675690",
        "to_ids": true,
        "type": "domain",
        "uuid": "ced3564c-d8d7-429d-95cf-64a2d4b9fcb7",
        "value": "loginii.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:30+00:00",
        "timestamp": "1785675690",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff26ff29-ff02-4b8c-9cac-e573602f1472",
        "value": "loginverify365.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:30+00:00",
        "timestamp": "1785675690",
        "to_ids": true,
        "type": "domain",
        "uuid": "39158202-d32a-4be4-8f1b-070cab2707c2",
        "value": "logya.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:30+00:00",
        "timestamp": "1785675690",
        "to_ids": true,
        "type": "domain",
        "uuid": "cceeaf74-e54b-4e1d-841c-c34ab26bd7b8",
        "value": "m.binance.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:30+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5dc026a-1f15-4801-ae28-a38664a6368e",
        "value": "m.googlle.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ef9c39b-d8d5-489d-9125-bf140e9ecdea",
        "value": "m.instagram.oudblast.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "a21a20de-af9c-4c44-8d40-cfd42e2b137c",
        "value": "m.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "81cabf88-096c-400d-b506-1947ecab775a",
        "value": "m.mselite.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "4075f2c0-026e-42d1-be7b-ebb60b15a000",
        "value": "m16.spkauszahlung.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd554437-4d0e-4d89-9039-8480fb00239c",
        "value": "m34.spkauszahlung.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675691",
        "to_ids": true,
        "type": "domain",
        "uuid": "7967d698-d556-45f5-9bdc-84f3d170502f",
        "value": "m365.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:31+00:00",
        "timestamp": "1785675692",
        "to_ids": true,
        "type": "domain",
        "uuid": "8503c194-d662-496c-8426-39c94a1288eb",
        "value": "m365.texteq.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:32+00:00",
        "timestamp": "1785675692",
        "to_ids": true,
        "type": "domain",
        "uuid": "032e9ead-d7ca-4411-97aa-eac2f958ad57",
        "value": "m365.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:32+00:00",
        "timestamp": "1785675692",
        "to_ids": true,
        "type": "domain",
        "uuid": "6239d596-1ed2-44e8-9dec-d06a5662a403",
        "value": "mail.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:32+00:00",
        "timestamp": "1785675692",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e96c5c-5713-4c1f-9a6f-52b85648a8ad",
        "value": "mail.accounts.secuautcheck.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:32+00:00",
        "timestamp": "1785675692",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdffb39e-accd-4f85-89c5-c5484b852842",
        "value": "mail.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:32+00:00",
        "timestamp": "1785675692",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eba26b2-58c5-4227-b456-d776e51e2206",
        "value": "mail.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:32+00:00",
        "timestamp": "1785675693",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd16031b-8794-4108-a43a-400a182e37bb",
        "value": "mail.evilginx-store.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:33+00:00",
        "timestamp": "1785675693",
        "to_ids": true,
        "type": "domain",
        "uuid": "92c99c32-7328-4ea5-ba8a-5ac328eb2ff9",
        "value": "mail.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:33+00:00",
        "timestamp": "1785675693",
        "to_ids": true,
        "type": "domain",
        "uuid": "d057e149-3027-4004-a592-7b230ab381db",
        "value": "mail.mailportal-x.mywire.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:33+00:00",
        "timestamp": "1785675693",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba15482b-6de8-42aa-8425-34a614ae0e40",
        "value": "mail.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:33+00:00",
        "timestamp": "1785675693",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4e5a1f2-c055-4ca7-9de2-35641de7ae77",
        "value": "mail.onetime-authentication.cruiserscrib.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:33+00:00",
        "timestamp": "1785675693",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffb9ad19-adc8-45a9-af8c-6be74a43e79c",
        "value": "mail.opensupport.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:33+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8c5b4cf-1e06-44f4-a96a-89b4a7606271",
        "value": "mail.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "a76c889d-8dd1-44f9-82f1-11df8446125d",
        "value": "mail.stripe-accountverify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "3903a37f-c9dd-4c4e-a316-876b25087ea0",
        "value": "mail.teams-microsoftonline-com-common-oauth2-v2-0-authorize-login.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "5acf311c-730b-43fa-b572-6564c48fe57b",
        "value": "mail.testing-evil.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a832cad-dc9b-4b9c-a5c6-47f19206b865",
        "value": "mail.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "67dd3803-ef7f-49dd-b439-73013bec997d",
        "value": "mail.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675694",
        "to_ids": true,
        "type": "domain",
        "uuid": "44dd10d5-6bab-4791-9e2c-4b1fe1079909",
        "value": "marriott-rewards.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:34+00:00",
        "timestamp": "1785675695",
        "to_ids": true,
        "type": "domain",
        "uuid": "d41a4930-4bac-4983-8ec3-e4772762ed7e",
        "value": "maxihavale.holliganbet1129.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:35+00:00",
        "timestamp": "1785675695",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ca6fd1e-d4ef-4f38-84e3-c987d26c056a",
        "value": "me.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:35+00:00",
        "timestamp": "1785675695",
        "to_ids": true,
        "type": "domain",
        "uuid": "94070fd8-e442-4c5d-81f1-cfba6a65974d",
        "value": "media-exp1.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:35+00:00",
        "timestamp": "1785675695",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fc171ea-929d-479d-858f-37159cba159e",
        "value": "media-exp1.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:35+00:00",
        "timestamp": "1785675695",
        "to_ids": true,
        "type": "domain",
        "uuid": "01ba1f00-58f3-45c4-a6fa-73f1e5a23bff",
        "value": "media.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:35+00:00",
        "timestamp": "1785675695",
        "to_ids": true,
        "type": "domain",
        "uuid": "3622807c-cad4-4a35-978c-8771fa570054",
        "value": "mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:35+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "228b8978-423f-4bb8-ba28-a9ba19b8d387",
        "value": "meet.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "037378d9-cd29-4eb3-ab8d-04a515b753bd",
        "value": "messagepathconfirmation.download",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba2423ea-c15b-4813-8bbe-04d5a73a3288",
        "value": "messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "01da5302-08f4-4115-86d7-3648d7dcc3d7",
        "value": "meta-assistance.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a187d93-eeb4-429a-a4f0-4862f436af17",
        "value": "meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "95df8927-e32b-4eb6-8c4b-9bfb91803cc1",
        "value": "mikecrosoft.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675696",
        "to_ids": true,
        "type": "domain",
        "uuid": "bec128fe-e0a5-4518-9d2a-1264ea0da34b",
        "value": "mimecast.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:36+00:00",
        "timestamp": "1785675697",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1245251-aed3-4a04-850e-5091b085ef30",
        "value": "mimecast.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:37+00:00",
        "timestamp": "1785675697",
        "to_ids": true,
        "type": "domain",
        "uuid": "79f398bc-e07e-4d9f-84eb-0cd266f8aa03",
        "value": "mnemo-col.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:37+00:00",
        "timestamp": "1785675697",
        "to_ids": true,
        "type": "domain",
        "uuid": "aef45106-4d3d-4100-aada-5d9c2f8f9cde",
        "value": "msauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:37+00:00",
        "timestamp": "1785675697",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec8bfd4b-4793-4743-a12a-0fb21d983b9e",
        "value": "msauthimg.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:37+00:00",
        "timestamp": "1785675697",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f2cf140-0565-45cc-9ad1-b6b73511f755",
        "value": "mselite.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:37+00:00",
        "timestamp": "1785675697",
        "to_ids": true,
        "type": "domain",
        "uuid": "2973dd4c-779d-4d12-a1ff-60d8d1bbc05c",
        "value": "msfed.994e79c0-ffb1-4df9-b623.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:37+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "e173ef94-d657-4abc-bf1d-eabfc33d59ff",
        "value": "msfed.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7f5b8bf-74aa-43d0-9d86-b41cc7f306a7",
        "value": "msfed.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "701bffc6-0c5b-486f-bead-812543bc639e",
        "value": "msstatic.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "64bc15d2-9101-4bb1-a590-0c4c5daf9ebf",
        "value": "myaccount.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "eee7f131-fca2-41ce-bc16-ad2789cfac74",
        "value": "myaccount.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "6aa378b3-7249-4f9f-b1f1-145e5d0df6f5",
        "value": "myaccount.admin-gsync.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675698",
        "to_ids": true,
        "type": "domain",
        "uuid": "cefd70b0-4a8b-45f5-ae9d-a9f995ed169a",
        "value": "myaccount.google.bain-corp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:38+00:00",
        "timestamp": "1785675699",
        "to_ids": true,
        "type": "domain",
        "uuid": "44df11d7-b257-477d-96fa-9391dc9a7308",
        "value": "myaccount.googlle.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:39+00:00",
        "timestamp": "1785675699",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ebe0d5c-4bf2-4b4f-9468-fa2b82104ade",
        "value": "myaccount.login.alienvfxstudio.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:39+00:00",
        "timestamp": "1785675699",
        "to_ids": true,
        "type": "domain",
        "uuid": "8559b8c4-2f75-4f96-b173-00842b2a6e1d",
        "value": "myaccount.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:39+00:00",
        "timestamp": "1785675699",
        "to_ids": true,
        "type": "domain",
        "uuid": "044a83d3-83f2-4a36-9515-520904218ae8",
        "value": "myaccount.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:39+00:00",
        "timestamp": "1785675699",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c1b8e11-c913-450f-b936-edfc13a89773",
        "value": "myapps.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:39+00:00",
        "timestamp": "1785675699",
        "to_ids": true,
        "type": "domain",
        "uuid": "8687e88a-1de6-4d80-baf4-c75401e0bbc7",
        "value": "mysignins.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:39+00:00",
        "timestamp": "1785675700",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd372950-dd7e-459d-a42a-af2750ac703d",
        "value": "n1.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:40+00:00",
        "timestamp": "1785675700",
        "to_ids": true,
        "type": "domain",
        "uuid": "f2791830-33e8-4753-b041-a0449a79ef05",
        "value": "nam01.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:40+00:00",
        "timestamp": "1785675700",
        "to_ids": true,
        "type": "domain",
        "uuid": "a264a990-918f-433e-80cf-8914019bc63c",
        "value": "nam02.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:40+00:00",
        "timestamp": "1785675700",
        "to_ids": true,
        "type": "domain",
        "uuid": "9904c7f8-3af6-4b03-b4e8-5f46d3a1dca6",
        "value": "nam03.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:40+00:00",
        "timestamp": "1785675700",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5a36d3a-259e-4b21-88a9-26e007caa8a1",
        "value": "nam04.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:40+00:00",
        "timestamp": "1785675700",
        "to_ids": true,
        "type": "domain",
        "uuid": "20642184-d2e5-4650-8133-3baf95b9ca98",
        "value": "nam11.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:40+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e04ae0f-bec4-4a3d-811f-26cc569b5ee7",
        "value": "nam12.safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "34b58cd5-623d-4670-a219-e5ff5f9af4c5",
        "value": "nazqh9a7v8f.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "e14d832f-0d56-44b4-813c-bbdee2c80117",
        "value": "net.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "0496f40a-0aa6-4120-9831-cd75893bfa7c",
        "value": "net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab5ac37a-10c3-4223-b786-8fc6861f0651",
        "value": "net.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "b498c8b2-7e55-4d25-ab36-61e7eafa1b96",
        "value": "newassets.protonn.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675701",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6521017-469b-46df-9eec-4609971d68d6",
        "value": "news.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:41+00:00",
        "timestamp": "1785675702",
        "to_ids": true,
        "type": "domain",
        "uuid": "e782ee31-3724-456c-806b-10d04abc1861",
        "value": "nihau8ma3ot.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:42+00:00",
        "timestamp": "1785675702",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c2f165c-aafb-438e-9e46-4bc769076ff4",
        "value": "nl9u2vlikzd.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:42+00:00",
        "timestamp": "1785675702",
        "to_ids": true,
        "type": "domain",
        "uuid": "4186b9b0-9442-4e33-8997-dcd1d0392038",
        "value": "noon.ignorelist.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:42+00:00",
        "timestamp": "1785675702",
        "to_ids": true,
        "type": "domain",
        "uuid": "a788d89f-3155-4771-9324-44f6518ee97f",
        "value": "notifications.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:42+00:00",
        "timestamp": "1785675702",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b0655a3-939e-449e-a84c-d8271bff1afc",
        "value": "notifications.google.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:42+00:00",
        "timestamp": "1785675702",
        "to_ids": true,
        "type": "domain",
        "uuid": "d203281a-c406-4711-986d-5c94af0d3588",
        "value": "notifications.google.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:42+00:00",
        "timestamp": "1785675703",
        "to_ids": true,
        "type": "domain",
        "uuid": "0401b627-7834-4732-b64c-dc2e221cf86b",
        "value": "notifications.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:43+00:00",
        "timestamp": "1785675703",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6e7fc0a-5a8d-46d1-87b7-70cd3f12c612",
        "value": "npmjs-security.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:43+00:00",
        "timestamp": "1785675703",
        "to_ids": true,
        "type": "domain",
        "uuid": "c1c09a48-6d73-49b4-a213-cf9837cfd6a1",
        "value": "ns1.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:43+00:00",
        "timestamp": "1785675703",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb407a8a-a498-4a6e-b7d6-b0351fd38cff",
        "value": "nudata.ticketmaster.komba.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:43+00:00",
        "timestamp": "1785675703",
        "to_ids": true,
        "type": "domain",
        "uuid": "0da54085-7a64-4283-8d53-72dcc69424fb",
        "value": "o.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:43+00:00",
        "timestamp": "1785675703",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6a9e7ae-38e6-40d4-8f84-7a1051c38d5c",
        "value": "o.outiook-offlceauthyfyveriflive.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:43+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "06697d2a-3978-4dc8-b6d3-548946dc1e88",
        "value": "o.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "456de36b-2acb-48b0-8212-26112daea521",
        "value": "o2.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5031f50-0cae-4bc8-a12b-2c9f53ca6a1f",
        "value": "o365.adsmisoft.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "43bc9c50-f751-441c-bd2b-8ad1a004dada",
        "value": "o365.teams-microsoftonline-com-common-oauth2-v2-0-authorize-login.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0753b5a-bcb9-41ec-bfc4-ee42ae236937",
        "value": "oauth2.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "eef971a6-dd2b-40f9-beb4-921de4b3b169",
        "value": "off-account.office.plumbingnowllc.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675704",
        "to_ids": true,
        "type": "domain",
        "uuid": "754dccc1-b487-4713-b24d-2cfb9a9dd714",
        "value": "off-outlook.plumbingnowllc.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:44+00:00",
        "timestamp": "1785675705",
        "to_ids": true,
        "type": "domain",
        "uuid": "784d4144-ae80-4ec8-bc13-0f1043986363",
        "value": "office.familiasgps.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:45+00:00",
        "timestamp": "1785675705",
        "to_ids": true,
        "type": "domain",
        "uuid": "94b772b9-a011-4005-973e-4fe66ca7c483",
        "value": "office.plumbingnowllc.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:45+00:00",
        "timestamp": "1785675705",
        "to_ids": true,
        "type": "domain",
        "uuid": "07aeb5a8-0a5f-4670-b4fd-5706c786e984",
        "value": "office.serviceteamoffice365.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:45+00:00",
        "timestamp": "1785675705",
        "to_ids": true,
        "type": "domain",
        "uuid": "3eeb6149-0cb5-4e3a-8edd-2548b8ca7faa",
        "value": "office.sgohsyu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:45+00:00",
        "timestamp": "1785675705",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d31b40c-e43c-4ea5-9210-da9130aad437",
        "value": "office.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:45+00:00",
        "timestamp": "1785675705",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3e20072-c623-4c29-8daf-5017ec9c7421",
        "value": "ogoogleads.g.doubleclick.net.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:45+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "e734c71f-9de0-42d1-a397-1733097a5a78",
        "value": "ogs.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "e10024c4-cb99-4f6e-8433-5f65d94d65d8",
        "value": "ogs.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "51fd4113-e904-4c67-ad38-183395c891bf",
        "value": "ogs.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "62351ffa-21bd-4f82-9f81-5acd934cb796",
        "value": "okta-adobe.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b467def-71e0-4fb7-8a21-77e694399fac",
        "value": "okta-alberici.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ad68f5a-a423-416d-a6a9-2e19435a731d",
        "value": "okta-bizzabo-sso.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675706",
        "to_ids": true,
        "type": "domain",
        "uuid": "44a9f271-0a16-422d-bd94-04dacc70efc0",
        "value": "okta-brinkmann.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:46+00:00",
        "timestamp": "1785675707",
        "to_ids": true,
        "type": "domain",
        "uuid": "21e5f708-57c4-43e4-a6c1-837918881453",
        "value": "okta-brookdale.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:47+00:00",
        "timestamp": "1785675707",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f6910c3-08fb-4a00-90b9-315bbab075e0",
        "value": "okta-cna.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:47+00:00",
        "timestamp": "1785675707",
        "to_ids": true,
        "type": "domain",
        "uuid": "1872a6da-26a1-4e57-bbed-9efb5d9c90f7",
        "value": "okta-crossland.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:47+00:00",
        "timestamp": "1785675707",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e8b171f-9618-4331-bf20-123712bcbb7a",
        "value": "okta-dmns.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:47+00:00",
        "timestamp": "1785675707",
        "to_ids": true,
        "type": "domain",
        "uuid": "f93954f6-31c4-405e-8a0c-016c5cfc25b8",
        "value": "okta-docusign.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:47+00:00",
        "timestamp": "1785675707",
        "to_ids": true,
        "type": "domain",
        "uuid": "c09a4789-e6cb-4d28-b557-dce62016c72e",
        "value": "okta-dollar.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:47+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2a440c0-c908-49ea-a683-2eaca8c01c4c",
        "value": "okta-dot.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf4d8e31-bb32-437c-b370-de29c65c164f",
        "value": "okta-jll.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "5780c961-8ce1-4cb8-bb61-aa65753d19b2",
        "value": "okta-login.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd8a70ff-ebd6-4f79-8900-baf200167050",
        "value": "okta-longbow.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec48e723-2cdb-4321-8cc2-752473fc6548",
        "value": "okta-medallia.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "48a38c33-b831-413f-8866-0119a3412174",
        "value": "okta-o.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675708",
        "to_ids": true,
        "type": "domain",
        "uuid": "6f1abdfd-e059-4762-886a-14309085da69",
        "value": "okta-olsson.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:48+00:00",
        "timestamp": "1785675709",
        "to_ids": true,
        "type": "domain",
        "uuid": "1934c04b-9ce7-4ebb-84ea-3ab2848fa3d2",
        "value": "okta-otis.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:49+00:00",
        "timestamp": "1785675709",
        "to_ids": true,
        "type": "domain",
        "uuid": "663efa0b-c6b8-4bb8-ac4a-b6492dd49c80",
        "value": "okta-rcmd.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:49+00:00",
        "timestamp": "1785675709",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fa7f79c-65b8-4b1c-a0d2-b67e571a5040",
        "value": "okta-ryan.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:49+00:00",
        "timestamp": "1785675709",
        "to_ids": true,
        "type": "domain",
        "uuid": "89641093-c6a4-40b5-8dcf-c759c1b2f719",
        "value": "okta-sci.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:49+00:00",
        "timestamp": "1785675709",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba651a4a-4f1c-4163-9e9c-dd411ddd7a5c",
        "value": "okta-swapcard.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:49+00:00",
        "timestamp": "1785675709",
        "to_ids": true,
        "type": "domain",
        "uuid": "02ad304d-7676-4fb8-b540-6e4b4b3d429b",
        "value": "okta-ul.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:49+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "54b017c7-0420-448e-8d76-13e40839d426",
        "value": "okta-weitz.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c906bf9-b6e7-438d-826f-bdefb3b76208",
        "value": "okta-wellpower.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "16183c17-943f-422a-913f-03ca687744ac",
        "value": "okta.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "d19aca03-b8e6-4884-b2c7-47628c76a141",
        "value": "oktaadmin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b78925a-c2ec-414f-8626-5d953c1f2eac",
        "value": "oktaapac.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "a28e0d0b-4352-4c60-b8f7-4f083f1e65a8",
        "value": "oktaauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675710",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa039c56-361a-44ff-ad52-0aa536428b58",
        "value": "oktacdn.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:50+00:00",
        "timestamp": "1785675711",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e8f3bd0-14f7-4260-960f-bdcc1e8b9b90",
        "value": "oktacdn2.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:51+00:00",
        "timestamp": "1785675711",
        "to_ids": true,
        "type": "domain",
        "uuid": "502386b0-da4b-479c-a432-9cf0a1a608f5",
        "value": "oktaemea.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:51+00:00",
        "timestamp": "1785675711",
        "to_ids": true,
        "type": "domain",
        "uuid": "462dacde-95d6-4d36-a33b-4eb08c42868d",
        "value": "oktaoie.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:51+00:00",
        "timestamp": "1785675711",
        "to_ids": true,
        "type": "domain",
        "uuid": "b96be2f9-97dd-4a20-8c83-4bd3d2d2fa6c",
        "value": "oktaprev.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:51+00:00",
        "timestamp": "1785675711",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a79136e-49c9-447a-8275-9e5d6dbc51ca",
        "value": "oktares.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:51+00:00",
        "timestamp": "1785675711",
        "to_ids": true,
        "type": "domain",
        "uuid": "31191782-cf7c-48fa-bb62-831a6e9073bf",
        "value": "oma.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:51+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "274ee287-2f51-4827-a3ae-a0c3f4da1b58",
        "value": "oneapi.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "91a1d0fc-bf16-4a7b-843b-91c15ce18744",
        "value": "oneapp.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "12eb307d-19b0-4a33-93d9-605b3c1d52c0",
        "value": "onecdn.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0b72759-67b0-42c2-bfc8-8d078664b5d2",
        "value": "onecdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "f51a9221-44ad-462a-955f-f2881adf39b9",
        "value": "onelogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "d595f438-3faf-49e4-85a0-9ff0cc0df277",
        "value": "oness.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675712",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed1ed9fe-bc0a-474a-8d5c-a6c0a8ddbadd",
        "value": "onestatic.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:52+00:00",
        "timestamp": "1785675713",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d0d81a8-3c2f-4842-a8ac-359ce7eabb66",
        "value": "onetime-authentication.cruiserscrib.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:53+00:00",
        "timestamp": "1785675713",
        "to_ids": true,
        "type": "domain",
        "uuid": "402a0e85-ddcc-437b-a833-a2d3b4b4bd66",
        "value": "op2.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:53+00:00",
        "timestamp": "1785675713",
        "to_ids": true,
        "type": "domain",
        "uuid": "24bbd0d2-1226-4e79-94c9-3c7b791d92d3",
        "value": "openapi.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:53+00:00",
        "timestamp": "1785675713",
        "to_ids": true,
        "type": "domain",
        "uuid": "2776d674-477a-46f1-a457-69d609ab4d94",
        "value": "opus-analytics.stripe-accountverify.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:53+00:00",
        "timestamp": "1785675713",
        "to_ids": true,
        "type": "domain",
        "uuid": "e18759e3-876e-49d0-8c98-20bbdd343be6",
        "value": "outlook.accountrestore.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:53+00:00",
        "timestamp": "1785675713",
        "to_ids": true,
        "type": "domain",
        "uuid": "63bab498-e17a-490c-8a61-f8ff4b3174a1",
        "value": "outlook.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:53+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "2c062e91-9162-47a9-88d0-35e8c96118df",
        "value": "outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:54+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4e1b4d5-b89c-4159-ae3c-c3236b7b38d4",
        "value": "outlook.e-onlinesl.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:54+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ddb6c80-77d3-4921-be8f-d6ecad83e5aa",
        "value": "outlook.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:54+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "9be27f82-be37-4ed1-82a7-3caf9cc0de8b",
        "value": "outlook.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:54+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "de8d6460-d1a4-4904-9de6-d4a06c00cfc4",
        "value": "outlook.office.mywallet.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:54+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "19e945c1-162a-437d-be64-b4f648047431",
        "value": "outlook.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:54+00:00",
        "timestamp": "1785675714",
        "to_ids": true,
        "type": "domain",
        "uuid": "58873b43-464b-4b83-b37b-5c35e2e66dff",
        "value": "outlook.testing01.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675715",
        "to_ids": true,
        "type": "domain",
        "uuid": "7087e83c-a810-4a14-ac5c-d6331f3d335b",
        "value": "outlook.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675715",
        "to_ids": true,
        "type": "domain",
        "uuid": "77511c06-4450-4eb5-be49-aec3098fe40c",
        "value": "owa.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675715",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e33271b-af1b-40da-b8e0-ef3e18d55ac8",
        "value": "p4irs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675715",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b961087-389d-4314-b480-c2d664b5709b",
        "value": "packwizbot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675715",
        "to_ids": true,
        "type": "domain",
        "uuid": "6588fc77-c43e-4c20-9127-e8c73eda208a",
        "value": "panel.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675715",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c959108-525d-4392-9835-50625f175471",
        "value": "passwordreset.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:55+00:00",
        "timestamp": "1785675716",
        "to_ids": true,
        "type": "domain",
        "uuid": "a0cfd5e0-e6fa-49fb-8027-3953523aa1dc",
        "value": "paypalobjects.papalservice.services",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:56+00:00",
        "timestamp": "1785675716",
        "to_ids": true,
        "type": "domain",
        "uuid": "9aa02c3b-f903-4e30-9f1e-e49234f6acc5",
        "value": "pcsl.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:56+00:00",
        "timestamp": "1785675716",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7e33152-cad5-4f41-9207-597a8540e243",
        "value": "pcsstart.port-base.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:56+00:00",
        "timestamp": "1785675716",
        "to_ids": true,
        "type": "domain",
        "uuid": "b2ce7c4d-5691-4b4b-95f2-71a83605ea56",
        "value": "peoplesworld.in",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:56+00:00",
        "timestamp": "1785675716",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec5cb885-5c7f-468f-b958-8ce93d3b277f",
        "value": "pepsico.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:56+00:00",
        "timestamp": "1785675716",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb62133f-287e-411f-885c-d9700d48b0c4",
        "value": "personalization.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:56+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "27ddff8e-e2ad-43da-a919-74a1a0099ad1",
        "value": "piconstudio.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "de70f279-0dd1-4f19-8e75-925063804def",
        "value": "pingapi.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "f441c8bd-6971-4cfd-8f32-ee53a0931d81",
        "value": "pingasia.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "055412cb-4a19-4800-80dc-b095986591e8",
        "value": "pingassets.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "6161ce96-79c0-4fcd-bd5e-736a5717cdd2",
        "value": "pingauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9578147-56b2-4628-a33c-292b28d161d4",
        "value": "pingca.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675717",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5f45555-d01c-4748-8362-a01f32a5423c",
        "value": "pingeu.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:57+00:00",
        "timestamp": "1785675718",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe2d406d-4613-4e6a-bcbf-3897a1e96a7f",
        "value": "pingfed.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:58+00:00",
        "timestamp": "1785675718",
        "to_ids": true,
        "type": "domain",
        "uuid": "c59584c9-619d-47ef-aa51-1f453a8bd9e6",
        "value": "pingidp.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:58+00:00",
        "timestamp": "1785675718",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd4ade7c-17c0-470c-b5ec-e8975a462b02",
        "value": "pinglogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:58+00:00",
        "timestamp": "1785675718",
        "to_ids": true,
        "type": "domain",
        "uuid": "25427923-67a9-40a6-81ea-2922fdab0340",
        "value": "pixel.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:58+00:00",
        "timestamp": "1785675718",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdb5c07e-aea6-4e3e-a7bf-b1fc2117bb14",
        "value": "pk.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675719",
        "to_ids": true,
        "type": "domain",
        "uuid": "084cb02a-0867-46f4-b4f2-d97fc4a260a0",
        "value": "platform.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675719",
        "to_ids": true,
        "type": "domain",
        "uuid": "28fbee55-a724-45da-89df-8e586007ad94",
        "value": "platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675719",
        "to_ids": true,
        "type": "domain",
        "uuid": "b82029d7-41d5-485c-b899-85b114358ea2",
        "value": "play.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675719",
        "to_ids": true,
        "type": "domain",
        "uuid": "5bb57104-0b8d-44a1-bb43-800ffac207d0",
        "value": "play.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675719",
        "to_ids": true,
        "type": "domain",
        "uuid": "8c2e08dd-8ce3-4515-aad2-85298a9a5fcf",
        "value": "play.gm-verification.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675719",
        "to_ids": true,
        "type": "domain",
        "uuid": "eedf9bb3-dd50-410d-ae57-0acc74f1b43d",
        "value": "play.google.bain-corp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:01:59+00:00",
        "timestamp": "1785675720",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b1a0537-e695-4069-b014-370f0193a0d1",
        "value": "play.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:00+00:00",
        "timestamp": "1785675720",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5a7b4c3-fd7b-413d-b5d2-f26658b0917e",
        "value": "play.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:00+00:00",
        "timestamp": "1785675720",
        "to_ids": true,
        "type": "domain",
        "uuid": "d89f6027-cdab-494f-b769-378b4632cd22",
        "value": "play.vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:00+00:00",
        "timestamp": "1785675720",
        "to_ids": true,
        "type": "domain",
        "uuid": "00bb0406-d2da-4376-86c8-496f7b6ed880",
        "value": "playesservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:00+00:00",
        "timestamp": "1785675720",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ab7db4b-8f4f-4468-9d42-f4da5a2420f2",
        "value": "plumbingnowllc.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:00+00:00",
        "timestamp": "1785675720",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a8539e8-c82e-4462-977f-2be6f50765cb",
        "value": "pogoda.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:00+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "905b3a8b-9832-4941-82d2-680f9caf8d37",
        "value": "pop.sgohsyu.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:01+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "d62ad78c-03e4-4733-8e6a-0968eaaefb11",
        "value": "portal-cdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:01+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdd8bafb-07a3-4e2e-8d71-ca5c448f8a08",
        "value": "portal.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:01+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "189ee64b-1d1e-4c1c-b272-5dfc9beea4d7",
        "value": "portal.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:01+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "52151819-d8e5-486d-a85a-e24d1d545ee8",
        "value": "portal.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:01+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "d01f834f-5cc3-40a1-964d-2d5bca1a935c",
        "value": "portal.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:01+00:00",
        "timestamp": "1785675721",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc15525f-c35c-4210-9fe7-3a5ed81c84fe",
        "value": "portal000.porterhartcouty.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675722",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad6a7a0a-9097-4326-bd85-3d15e5bd6517",
        "value": "privacy-cs.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675722",
        "to_ids": true,
        "type": "domain",
        "uuid": "a88534bc-f571-4dce-bd28-89b7f59413a6",
        "value": "privacy.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675722",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3399f6c-4cfd-45d4-b4a2-c0b205b6276a",
        "value": "promo.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675722",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dfb8ef3-cc20-416e-91fe-2e340e031b43",
        "value": "proofpoint.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675722",
        "to_ids": true,
        "type": "domain",
        "uuid": "10d9ba26-09a4-482c-b41b-7e40b7a4f1e1",
        "value": "proofpoint.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675722",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c6d0005-e72b-4648-b237-5fc61230a7d7",
        "value": "prospecting.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:02+00:00",
        "timestamp": "1785675723",
        "to_ids": true,
        "type": "domain",
        "uuid": "5fc6ae06-806a-49fb-a8d2-4ab1402f5e7a",
        "value": "protect-au.mimecast.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:03+00:00",
        "timestamp": "1785675723",
        "to_ids": true,
        "type": "domain",
        "uuid": "721068b8-9488-45f8-aab3-dfee3e35ddef",
        "value": "protect-eu.mimecast.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:03+00:00",
        "timestamp": "1785675723",
        "to_ids": true,
        "type": "domain",
        "uuid": "4ad809fb-5e41-4349-850c-dba74005b6f2",
        "value": "protect-jp.mimecast.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:03+00:00",
        "timestamp": "1785675723",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed6de08b-7acb-490d-b677-4f88bc77da1d",
        "value": "protect-jp.mimecast.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:03+00:00",
        "timestamp": "1785675723",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf45b195-9581-4860-abe0-babcabc6fb39",
        "value": "protect-us.mimecast.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:03+00:00",
        "timestamp": "1785675723",
        "to_ids": true,
        "type": "domain",
        "uuid": "260b9b3f-a8d6-4cc7-9124-0644f36a56d8",
        "value": "protect.mimecast.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:03+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb334d64-8163-46db-b4d6-929d1c8e87d6",
        "value": "protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "99357888-56ea-4035-9f5a-db0542faa762",
        "value": "protocolendless.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "0afb1a21-e88c-4c62-9a22-b545369d75df",
        "value": "proxy.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "7194a7b3-943f-4959-b5e1-911dd059dcde",
        "value": "pstmrk.it.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "149980c4-3a3e-401a-95c4-069acd5febbe",
        "value": "public.onecdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "76cbf32f-6415-4ce1-998b-2d124dd77d48",
        "value": "px-captcha-b.ticketmaster.komba.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675724",
        "to_ids": true,
        "type": "domain",
        "uuid": "bde439c0-4f07-4213-b563-12245c1da93e",
        "value": "px-captcha-c.ticketmaster.komba.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:04+00:00",
        "timestamp": "1785675725",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cc23a42-834b-4b80-819d-e0524a693356",
        "value": "px-captcha-d.ticketmaster.komba.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:05+00:00",
        "timestamp": "1785675725",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fb06253-153d-4c6c-9a86-7118f4fa7165",
        "value": "px-captcha.ticketmaster.komba.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:05+00:00",
        "timestamp": "1785675725",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd9d398f-6eb9-4810-94e6-7457edcc30f0",
        "value": "q.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:05+00:00",
        "timestamp": "1785675725",
        "to_ids": true,
        "type": "domain",
        "uuid": "9646a349-a4aa-4764-9382-7721d495bd41",
        "value": "qfp.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:05+00:00",
        "timestamp": "1785675725",
        "to_ids": true,
        "type": "domain",
        "uuid": "f55fcd4d-176b-40d9-8156-159f9f1a2221",
        "value": "qgcusvk.portal-verify.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:05+00:00",
        "timestamp": "1785675725",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f879c3a-1c02-41ed-a3dd-8166c712af3f",
        "value": "qqq.qweqq.p-e.kr",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:05+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "82483351-f8fc-4a34-bb96-7df6c1dd5fd5",
        "value": "quickbooks.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "47344dfb-451e-4169-8977-3c203f9c0c94",
        "value": "qydgp6pfgck.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "683d937a-b695-495c-a7ac-6ba364e84ed6",
        "value": "r.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5d125f5-0b29-4fb9-b1ef-0184f4edcff1",
        "value": "r.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "b83ffb63-6866-49c6-bd3d-53eef20b432b",
        "value": "r3.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b8a1846-f0f1-4a99-be2a-13c99a8db2e6",
        "value": "rambtur.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675726",
        "to_ids": true,
        "type": "domain",
        "uuid": "98ab476c-a763-4e7b-a013-47e34342b425",
        "value": "raymondreddington.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:06+00:00",
        "timestamp": "1785675727",
        "to_ids": true,
        "type": "domain",
        "uuid": "29e0fa1c-89c0-4fb4-82c1-2fd3c33c870e",
        "value": "rdg.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:07+00:00",
        "timestamp": "1785675727",
        "to_ids": true,
        "type": "domain",
        "uuid": "05d51fff-764a-4b94-a319-625ef4100150",
        "value": "rdp.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:07+00:00",
        "timestamp": "1785675727",
        "to_ids": true,
        "type": "domain",
        "uuid": "23723f08-88a0-4076-948a-d3293fb40281",
        "value": "rds.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:07+00:00",
        "timestamp": "1785675727",
        "to_ids": true,
        "type": "domain",
        "uuid": "08008f76-50b2-4672-9ecf-182687e247b7",
        "value": "rds1.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:07+00:00",
        "timestamp": "1785675727",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4dd6f73-5abc-4c00-8379-bba1832a62f6",
        "value": "rdweb.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:07+00:00",
        "timestamp": "1785675727",
        "to_ids": true,
        "type": "domain",
        "uuid": "3ccf5402-5d6f-40cd-b0b0-eb35f9530270",
        "value": "react.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:07+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "9590a1f6-8495-4992-b0b5-c49183f894a2",
        "value": "react.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:08+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa9db67c-3871-4aed-82ec-977359669fe0",
        "value": "react.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:08+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "55e45742-7aa7-4053-9f53-1222171c4ffa",
        "value": "realtime.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:08+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "27d7ea13-9820-461c-b85e-2096da24602a",
        "value": "red-team.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:08+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "be762a49-b503-42fa-8e56-403f9d75cff9",
        "value": "reklama.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:08+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b059d4f-a349-4707-9c27-b2b14b7f9599",
        "value": "remote.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:08+00:00",
        "timestamp": "1785675728",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ca1d3a2-ce18-445f-bb4a-92e687d59562",
        "value": "remote2.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675729",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6be5091-a00c-455f-8f23-d7d568c3a003",
        "value": "remotebb.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675729",
        "to_ids": true,
        "type": "domain",
        "uuid": "75496d43-a7ea-4884-856a-3ea082231c8e",
        "value": "res-1.cdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675729",
        "to_ids": true,
        "type": "domain",
        "uuid": "2cff1140-4f0e-4e5a-b152-be6c7b57f387",
        "value": "res.cdn.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675729",
        "to_ids": true,
        "type": "domain",
        "uuid": "c49ea269-9cbb-4d18-9219-e57a242d4c6a",
        "value": "res.cdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675729",
        "to_ids": true,
        "type": "domain",
        "uuid": "598ae572-8e4c-431a-be43-18a17e0583db",
        "value": "res.public.onecdn.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675729",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf6a319f-3520-4b2a-86f4-3279a81362eb",
        "value": "res.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:09+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9666dc0-244f-40d0-ad26-0d9a2a2f06df",
        "value": "res1.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "4213fd26-9950-4ba8-b493-efaf8359ea63",
        "value": "rimborson.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "42cfc0d1-4383-47ca-bb6d-4aa4a16abbdd",
        "value": "rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "7027c05a-08c7-4145-a914-446dc41c1b98",
        "value": "rootdz.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "e091440b-478c-4167-ae1b-372eec51fa8f",
        "value": "rootvk.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1774cd6-442b-4ed0-a69a-d53ba54867a7",
        "value": "rootyan.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675730",
        "to_ids": true,
        "type": "domain",
        "uuid": "01a0b0ea-659f-4a4e-a5ef-abaa8d6b6141",
        "value": "rootyar.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:10+00:00",
        "timestamp": "1785675731",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcd7773b-873c-4a79-a351-f86b8afc1141",
        "value": "rootyas.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:11+00:00",
        "timestamp": "1785675731",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a2b7314-64c9-4b58-8f9a-f4acaacc6218",
        "value": "rorl.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:11+00:00",
        "timestamp": "1785675731",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea277b31-4649-4fbe-adb7-3be0a307a11a",
        "value": "roweri.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:11+00:00",
        "timestamp": "1785675731",
        "to_ids": true,
        "type": "domain",
        "uuid": "e8f36ede-0676-4085-9cfc-6502dd8347f8",
        "value": "rs-dns.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:11+00:00",
        "timestamp": "1785675731",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbadefb5-cd02-4aac-a998-c775acc6c4a0",
        "value": "rs.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:11+00:00",
        "timestamp": "1785675731",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f51599f-66b1-4c51-b707-11606262647f",
        "value": "rsaaccess.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:11+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "04eb7031-b532-4151-81e9-5b9ead689832",
        "value": "rsacloud.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "8758cbb3-e230-4c6f-8807-aaaf00a18d1a",
        "value": "rsaid.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "97ea1446-ba99-4243-8303-289ba64f811c",
        "value": "s.skttonero.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "94c9d22f-3cbd-4485-b1cf-6f4251688a73",
        "value": "s3.ap-northeast-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "64e277ae-17df-46e3-b374-dd1e3afbb948",
        "value": "s3.ap-southeast-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3edad32-a79b-4d63-93c2-6cd053b3fde0",
        "value": "s3.eu-central-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675732",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf79ef87-f788-469d-9c17-a2104129e9c8",
        "value": "s3.eu-west-1.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:12+00:00",
        "timestamp": "1785675733",
        "to_ids": true,
        "type": "domain",
        "uuid": "494436cd-2a3c-48eb-b938-90b418d53cdf",
        "value": "s3.eu-west-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:13+00:00",
        "timestamp": "1785675733",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdd2167d-4a0f-494c-9c66-bab20a00e04f",
        "value": "s3.us-east-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:13+00:00",
        "timestamp": "1785675733",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d6176ce-7af8-477d-bd95-b45b692fab24",
        "value": "s3.us-east-2.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:13+00:00",
        "timestamp": "1785675733",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2c276cf-b249-48ad-9f49-43211ed743b4",
        "value": "s3.us-west-2.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:13+00:00",
        "timestamp": "1785675733",
        "to_ids": true,
        "type": "domain",
        "uuid": "1269832f-010f-44a3-bc29-a682de5ed3c4",
        "value": "safelinks.protection.outlook.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:13+00:00",
        "timestamp": "1785675733",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1820248-47bd-4d97-97b7-1db7dfbef123",
        "value": "sbx.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:13+00:00",
        "timestamp": "1785675734",
        "to_ids": true,
        "type": "domain",
        "uuid": "dfcb2816-06ae-4fb6-81a7-bc5291c373b3",
        "value": "sci.outiook-offlceauthyfyveriflive.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:14+00:00",
        "timestamp": "1785675734",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cb380b0-9707-4e4e-9919-b2d48c0c4524",
        "value": "sci.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:14+00:00",
        "timestamp": "1785675734",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bc9f5af-d225-4d4f-909a-bb8bae599f2a",
        "value": "scontent.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:14+00:00",
        "timestamp": "1785675734",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f10a0b1-dda2-4fed-8255-1a8f0e1bb8f9",
        "value": "scontent.xx.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:14+00:00",
        "timestamp": "1785675734",
        "to_ids": true,
        "type": "domain",
        "uuid": "5da1bc2a-40dc-454f-a7b3-71f2cb782665",
        "value": "sdk-api.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:14+00:00",
        "timestamp": "1785675734",
        "to_ids": true,
        "type": "domain",
        "uuid": "912dd4a4-230c-49d2-9d25-e2887dfc25d4",
        "value": "sdkapi.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:14+00:00",
        "timestamp": "1785675735",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9ef1776-7ab1-4c4e-b767-c4bb4ac6adf4",
        "value": "secure-web.cisco.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:15+00:00",
        "timestamp": "1785675735",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a2867ec-c328-4ef0-83c3-2bd4c6664303",
        "value": "secure.ciberseguridad-eia.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:15+00:00",
        "timestamp": "1785675735",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1c8b445-6e5c-4858-a096-5c71f541b99e",
        "value": "secure.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:15+00:00",
        "timestamp": "1785675735",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a83f5d3-ddff-4f5b-bfb4-caab3b272333",
        "value": "secure.duosign.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:15+00:00",
        "timestamp": "1785675735",
        "to_ids": true,
        "type": "domain",
        "uuid": "95537126-50fd-415b-ac80-74e95bbc60b1",
        "value": "secure.euecho.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675736",
        "to_ids": true,
        "type": "domain",
        "uuid": "355fc4de-361a-47d3-a88e-5758ff369df9",
        "value": "secure.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675736",
        "to_ids": true,
        "type": "domain",
        "uuid": "9824fb5d-5489-4833-b20c-1197fd042e63",
        "value": "secure.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675736",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d371765-0b1b-45a6-ab8d-27f9bfdd5baf",
        "value": "secureauth.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675736",
        "to_ids": true,
        "type": "domain",
        "uuid": "cbe04034-ef8e-4ab6-9bf0-f43c55362524",
        "value": "secureauthidp.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675736",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a2aa5b7-8807-45dc-a05f-ca7498d58a8e",
        "value": "secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675736",
        "to_ids": true,
        "type": "domain",
        "uuid": "b130afd4-f2bb-42fd-ba5c-7b4581c106b1",
        "value": "security.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:16+00:00",
        "timestamp": "1785675737",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d4b25fb-d337-48a4-bfd3-4094cf28bac3",
        "value": "securty-alert.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:17+00:00",
        "timestamp": "1785675737",
        "to_ids": true,
        "type": "domain",
        "uuid": "f9a0ac5d-4400-4c4b-a73e-4a22a5728298",
        "value": "sender.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:17+00:00",
        "timestamp": "1785675737",
        "to_ids": true,
        "type": "domain",
        "uuid": "1cfc3187-4a90-40e1-8d37-215ab291b28a",
        "value": "sepho.cvmatch.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:17+00:00",
        "timestamp": "1785675737",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb412e36-a595-47b6-94b5-532c0111c07d",
        "value": "ser-pan-comido.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:17+00:00",
        "timestamp": "1785675737",
        "to_ids": true,
        "type": "domain",
        "uuid": "154945f6-4a8d-459b-9dc7-a35c1578cc13",
        "value": "serviceteamoffice365.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:17+00:00",
        "timestamp": "1785675737",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7cea03f-21eb-40c3-a68a-55da442e69dc",
        "value": "sessions.wjdiadjai.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:17+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd91ae30-61ce-4093-8edf-614fbfe7da21",
        "value": "setup.accountrestore.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "70ec5f1a-195c-47ff-9def-433fab47ecac",
        "value": "setup.storage-icloude.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "f0f58bf1-b951-41d2-8feb-2eacf8d7f269",
        "value": "sfdev.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "d8afabda-8d0e-4cc2-b119-6322699983f5",
        "value": "sflogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "e77a9d51-4293-4b96-af5f-4b05bfa4dbe8",
        "value": "sftest.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "cab29480-618a-4233-91c0-b40323363f53",
        "value": "sharepoint.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675738",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f2ab495-d844-436a-8fa7-95a659e9345e",
        "value": "signin-sso.id-sage.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:18+00:00",
        "timestamp": "1785675739",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab3539eb-8ea1-497f-b911-d27fa1c0482d",
        "value": "signup.actualizacion-seguridad.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:19+00:00",
        "timestamp": "1785675739",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6056bcc-cfc4-460d-88c6-ebce161113ae",
        "value": "site.paypalsonline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:19+00:00",
        "timestamp": "1785675739",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a85ac83-ad29-407a-80fb-078b16c21125",
        "value": "sites.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:19+00:00",
        "timestamp": "1785675739",
        "to_ids": true,
        "type": "domain",
        "uuid": "b06cc144-47aa-4cdb-80d5-6fc0301b603b",
        "value": "sjkeekke.yogz.biz.id",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:19+00:00",
        "timestamp": "1785675739",
        "to_ids": true,
        "type": "domain",
        "uuid": "4549d6f9-0124-4c00-996a-2c152b2ae4c2",
        "value": "skcjdghscjkd9.softether.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:19+00:00",
        "timestamp": "1785675739",
        "to_ids": true,
        "type": "domain",
        "uuid": "1320f03d-87bd-4a64-b0fb-59b52366a181",
        "value": "smppcanada.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:19+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec7b0385-7d6a-4a81-9f00-0b9196390709",
        "value": "smusxath.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "98fd891c-368d-4c85-8041-3018096c1785",
        "value": "so.simplyfashiontv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "c8f2f51d-c71f-4fd2-b177-0197d153dbad",
        "value": "souwebaccess.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a526bec-9b96-4839-9b55-7ae1a2be3ba1",
        "value": "sp.authpoint.usa.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "39701850-ceca-4e63-9860-4a833ff0133a",
        "value": "sp.authpoint.usa.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "05cedc43-fe18-4b31-9572-742a0ff0b72f",
        "value": "ssl.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675740",
        "to_ids": true,
        "type": "domain",
        "uuid": "8eb3ab3b-3770-4d21-afbe-a95ddc3de857",
        "value": "ssl.docuhost.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:20+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "96343ed1-496a-404e-b403-11189d198473",
        "value": "ssl.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:21+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6eee38f-12c6-44df-9ac1-5dac3adf8e99",
        "value": "ssl.papalservice.services",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:21+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "84750411-4e64-4fc3-9832-bce5e0959191",
        "value": "ssl.porterhartcouty.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:21+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "0e5508f8-5274-4555-afb4-f412203b93e3",
        "value": "ssl.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:21+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b3d78a1-65e1-4624-b775-c166e17665c0",
        "value": "ssl.testing-evil.duckdns.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:21+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "521f77e7-c64b-4624-a3b5-b39e18983dc3",
        "value": "ssl.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:21+00:00",
        "timestamp": "1785675741",
        "to_ids": true,
        "type": "domain",
        "uuid": "6968e774-ec4d-489a-8e4f-5bbb33926d2e",
        "value": "ssl.vdjhrr.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675742",
        "to_ids": true,
        "type": "domain",
        "uuid": "dc3d50fd-575c-4dc0-b3b0-0b9f1c5b9221",
        "value": "ssl.vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675742",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d6d455e-c1e6-4aa6-8028-c888ac0f49e8",
        "value": "ssl.voxshift.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675742",
        "to_ids": true,
        "type": "domain",
        "uuid": "d03b90bb-c117-4560-b1d0-b7f8de20f7c3",
        "value": "sso.acadain-asset.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675742",
        "to_ids": true,
        "type": "domain",
        "uuid": "4306c035-e755-4538-8c5d-c817ca1ce7f2",
        "value": "sso.aventuresaviation.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675742",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cdc23b0-3e35-4787-8f7c-ccdfd39d4c34",
        "value": "sso.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675742",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5993dbd-3d39-4aa6-8bb1-22f6649817a8",
        "value": "sso.login.imriwret.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:22+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cb96292-0495-44e2-b924-6f247640ecfa",
        "value": "sso.serviceteamoffice365.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:23+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "8905a251-2bad-406b-a323-f4161cb40c3e",
        "value": "sso.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:23+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "1a1f179f-30ae-40f3-910a-ed91a106b2a7",
        "value": "sso2.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:23+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "059103a9-c1d6-4427-9829-d0e2bb0a40b9",
        "value": "ssoss.mikecrosoft.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:23+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "3144175e-530d-4753-b6b8-3c1fc5711f2e",
        "value": "ssso.outiook-offlceauthyfyveriflive.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:23+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "6fa9e24b-6381-4a47-98a3-7d61f1423d72",
        "value": "stat.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:23+00:00",
        "timestamp": "1785675743",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d9820de-f5f2-429c-b03d-37a408125d04",
        "value": "static-cdn.login.masarofficial.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675744",
        "to_ids": true,
        "type": "domain",
        "uuid": "db6985d5-100c-412c-a3b8-43ef079eafea",
        "value": "static-exp1.platform.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675744",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5a87286-969b-4be9-b6b1-94a7fd17228c",
        "value": "static-exp1.secureportal-mx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675744",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c474640-7d3f-45f1-b235-df6a82f73760",
        "value": "static.binance.aktaninery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675744",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0d932a5-f0af-444c-826d-e46fec96a288",
        "value": "static.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675744",
        "to_ids": true,
        "type": "domain",
        "uuid": "288d77b9-fc81-4c87-a2de-046e35f27832",
        "value": "static.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675744",
        "to_ids": true,
        "type": "domain",
        "uuid": "aeba8863-4935-4ece-ba77-0155daa2fa5f",
        "value": "storage-icloude.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:24+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "839bfb82-d2d5-494a-98f8-04b9bbba874e",
        "value": "storage.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:25+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "b354cbb9-8849-40e5-936c-a2f563f924d8",
        "value": "storage.rnicrosoftrecovery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:25+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "f106a238-8d63-4964-9163-1d442208aab5",
        "value": "storage.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:25+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "0deb82c1-dce2-4c51-a3da-614d76f704ae",
        "value": "strm.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:25+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "57701f51-27c4-429a-84c4-164b5d1d27fa",
        "value": "sts.meta-email.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:25+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "c249c9d7-9749-447e-b98f-9d5db05abd1d",
        "value": "stslogin.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:25+00:00",
        "timestamp": "1785675745",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e4d9215-1f9b-4565-abd0-44c90f54084e",
        "value": "substrate.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675746",
        "to_ids": true,
        "type": "domain",
        "uuid": "f19f588e-6186-4573-9bb8-81d341262772",
        "value": "support-u.abrdns.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675746",
        "to_ids": true,
        "type": "domain",
        "uuid": "8710e7a9-fc2a-4e94-b62d-a7f3a4b6d91a",
        "value": "supportive.fit",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675746",
        "to_ids": true,
        "type": "domain",
        "uuid": "645ebf2f-a3cf-47cb-892b-7f763bccd294",
        "value": "taboola.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675746",
        "to_ids": true,
        "type": "domain",
        "uuid": "2167ef22-e4fa-433a-9f04-a50c1bb5a725",
        "value": "taboola.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675746",
        "to_ids": true,
        "type": "domain",
        "uuid": "c39180a7-c973-4263-a909-b5f9abd8c3e9",
        "value": "taxorganizer.publicvm.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675746",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e3a40aa-69df-4d97-bade-19e26dbdfed5",
        "value": "test.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:26+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "56a8abf0-8370-4b0c-ab4a-eeed129e309e",
        "value": "the519.eastus.cloudapp.azure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:27+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "b482753c-e20d-4f07-ad69-aa535473355d",
        "value": "thrivetracker.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:27+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "bb090a7c-6c3b-457e-a941-bad7a059d0a6",
        "value": "tilt.serviceteamoffice365.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:27+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "156cc2f2-e3cd-40aa-9825-994d2d8d1bf6",
        "value": "todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:27+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf3ce9fb-59ab-4e86-8b37-bf125d14e3f3",
        "value": "top-fwz1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:27+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdeed10b-b422-447c-8004-ca43d479ea59",
        "value": "topfwz1.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:27+00:00",
        "timestamp": "1785675747",
        "to_ids": true,
        "type": "domain",
        "uuid": "46859ffa-6736-426e-8c42-e7aea11d1746",
        "value": "track.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675748",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b6ca26f-6b04-490b-9d74-7ca5dcf37ddf",
        "value": "track.thrivetracker.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675748",
        "to_ids": true,
        "type": "domain",
        "uuid": "961d57c5-b92f-4691-90b4-b239ca283641",
        "value": "trc.taboola.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675748",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c1227f8-1842-4acd-9104-4b16c6990627",
        "value": "trc.taboola.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675748",
        "to_ids": true,
        "type": "domain",
        "uuid": "58f3825c-a880-4032-9bd0-11e3325eef7b",
        "value": "trk.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675748",
        "to_ids": true,
        "type": "domain",
        "uuid": "c14785ef-88a6-4e78-bac5-c72332f893d8",
        "value": "ts.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675748",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f49b6f1-d3c5-4412-a045-868f62f7b2ea",
        "value": "ttgg.9123123.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:28+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc000dd7-9a75-47bc-88a0-298411e43f92",
        "value": "tzd66u2rre.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "8223d431-9fed-43fd-a30d-850ed7462891",
        "value": "udc.onetime-authentication.cruiserscrib.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "8322059a-06c5-40cf-a320-e8ffe89797a8",
        "value": "udc.yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef30bddb-f21b-4e69-9696-988f1ebb961a",
        "value": "ulgroup.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "baea9e5c-1635-453f-9769-42d85de817bf",
        "value": "ulgroup.office.plumbingnowllc.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8f790ff-1056-4c9f-b04e-61b479962b4a",
        "value": "ulgroup.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675749",
        "to_ids": true,
        "type": "domain",
        "uuid": "5aba3ea4-60ee-4b8c-91d6-8e508990f886",
        "value": "unified-terms-svc.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:29+00:00",
        "timestamp": "1785675750",
        "to_ids": true,
        "type": "domain",
        "uuid": "ed755329-8505-4f8d-9c39-9f6378e93906",
        "value": "urldefense.proofpoint.com.amazonaws.com.mediaplanung.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:30+00:00",
        "timestamp": "1785675750",
        "to_ids": true,
        "type": "domain",
        "uuid": "cfa636cd-ab39-4790-984c-39a7960d719e",
        "value": "us-east-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:30+00:00",
        "timestamp": "1785675750",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fd7c34c-f708-45d6-bdcf-4a6e18653f47",
        "value": "us-east-2.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:30+00:00",
        "timestamp": "1785675750",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0814907-d585-426c-9c9f-60380cbd6c45",
        "value": "us-west-1.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:30+00:00",
        "timestamp": "1785675750",
        "to_ids": true,
        "type": "domain",
        "uuid": "44668cae-d0c6-4781-a751-2e78b78ef5d4",
        "value": "us-west-2.amazonaws.com.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:30+00:00",
        "timestamp": "1785675750",
        "to_ids": true,
        "type": "domain",
        "uuid": "a31d7c78-2383-4d3c-a5c0-0b15d3058c43",
        "value": "usa.icseingenieria.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:30+00:00",
        "timestamp": "1785675751",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a461d17-fe7b-46a8-a48e-d6b36cfa2865",
        "value": "usa.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:31+00:00",
        "timestamp": "1785675751",
        "to_ids": true,
        "type": "domain",
        "uuid": "11a85d83-ccb1-4780-8049-9a04dc0d8cc0",
        "value": "v70pusy7p13.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:31+00:00",
        "timestamp": "1785675751",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac0371a4-10c5-472f-957a-4e1b513e1602",
        "value": "variabilityengine.intuitqbo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:31+00:00",
        "timestamp": "1785675751",
        "to_ids": true,
        "type": "domain",
        "uuid": "69807eee-3648-4c44-98c5-e15cf99cedc9",
        "value": "varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:31+00:00",
        "timestamp": "1785675751",
        "to_ids": true,
        "type": "domain",
        "uuid": "e455fc5b-af78-4639-baf1-8c92ea80cb2b",
        "value": "vdjhrr.de",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:31+00:00",
        "timestamp": "1785675751",
        "to_ids": true,
        "type": "domain",
        "uuid": "99151107-2ebc-429f-91e3-14728bcad4b7",
        "value": "venus.web.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:31+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "31fcff9f-5bb2-4cae-8015-52e81a1ec630",
        "value": "vhg.fern-estates.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "62f9695b-dda0-4184-815f-e3f6d5aa1286",
        "value": "video.celticcommunications.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee3c64c0-e212-4138-9fc2-7177846b54c5",
        "value": "vipaccess.lomesroll.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "65992879-7726-44cd-a048-c1c0d0520e79",
        "value": "vn3hg.office.plumbingnowllc.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb96ae0f-9128-43ef-ba91-3509b2716c31",
        "value": "vn3hg.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "e9690f6f-e7cb-4f33-b669-401666160f4d",
        "value": "vn3hg.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675752",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e9d2538-4eed-4710-a5a2-f71fa1c133cb",
        "value": "vn3ms.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:32+00:00",
        "timestamp": "1785675753",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5e560d1-5ebf-483a-9fa3-a828e821b028",
        "value": "vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:33+00:00",
        "timestamp": "1785675753",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d46ff93-8c94-4091-bb10-24544a95ccb1",
        "value": "vpn.dmg-tech.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:33+00:00",
        "timestamp": "1785675753",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dd463e0-efde-4b4e-9918-d4fbdf638769",
        "value": "watchguard.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:33+00:00",
        "timestamp": "1785675753",
        "to_ids": true,
        "type": "domain",
        "uuid": "f79aeef0-8358-4a73-8be8-65d346f6f0d8",
        "value": "web.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:33+00:00",
        "timestamp": "1785675753",
        "to_ids": true,
        "type": "domain",
        "uuid": "f31ebe0d-3ced-4796-aa53-934b1672f9f5",
        "value": "widgets.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:33+00:00",
        "timestamp": "1785675753",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eef42c6-8284-4c52-aa65-687d146a9d77",
        "value": "wn.bambicci.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:33+00:00",
        "timestamp": "1785675754",
        "to_ids": true,
        "type": "domain",
        "uuid": "bf99d91a-f138-4c10-b4a2-60797c8e12c5",
        "value": "wo3ih.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:34+00:00",
        "timestamp": "1785675754",
        "to_ids": true,
        "type": "domain",
        "uuid": "f098a3b9-ed39-4c29-8be3-80f5d2480e75",
        "value": "wordpress.letter.wtf",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:34+00:00",
        "timestamp": "1785675754",
        "to_ids": true,
        "type": "domain",
        "uuid": "1ccdc770-9c4b-4a30-ad84-1647ec6648fb",
        "value": "wwwgstatic.vortunsa.qinch.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:34+00:00",
        "timestamp": "1785675754",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4c3f76e-2548-45e6-80f6-94ef141a725e",
        "value": "x.protocolendless.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:34+00:00",
        "timestamp": "1785675754",
        "to_ids": true,
        "type": "domain",
        "uuid": "326f7a70-7028-48b3-8c43-3a5ae0fd141d",
        "value": "xray.messager.my",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:34+00:00",
        "timestamp": "1785675754",
        "to_ids": true,
        "type": "domain",
        "uuid": "193ae83b-4db0-4d16-aeef-b6b78612ee20",
        "value": "xs1.tronscan.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:34+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1af8f1f-09b5-40b1-b3ad-e7d5347e8243",
        "value": "xx.fbcdn.coppsindoor.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a164a07-b2d6-425c-9f83-c858322fe8d5",
        "value": "y9a13f8chjf9.todaygood.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "1835c660-9bab-4e40-98bb-2994f8fbf575",
        "value": "yahoos.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "372801fd-235b-48a5-ab20-2dee17cfd5cc",
        "value": "youtube.aawe.finance",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "37ed99a4-ae44-464f-911c-6aa2f4ccc97b",
        "value": "youtube.absolu1st.xubi.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "8353c490-f3f2-44c1-afa4-9ff5ba9edebc",
        "value": "youtube.docuhost.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675755",
        "to_ids": true,
        "type": "domain",
        "uuid": "739ade98-845f-4d84-8276-d703bb3248c6",
        "value": "youtube.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:35+00:00",
        "timestamp": "1785675756",
        "to_ids": true,
        "type": "domain",
        "uuid": "ced6bbb2-35bd-4f3d-b9e7-b17325bdcaf7",
        "value": "yp7s.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:36+00:00",
        "timestamp": "1785675756",
        "to_ids": true,
        "type": "domain",
        "uuid": "2399ae3b-dc37-4ce5-ba49-e936d5befa55",
        "value": "ywnjb.rnicrosoftloginsoft.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:36+00:00",
        "timestamp": "1785675756",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c961d3b-96b8-4704-89be-f3170d9026a7",
        "value": "ywnjb.varrysections.digital",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:36+00:00",
        "timestamp": "1785675756",
        "to_ids": true,
        "type": "domain",
        "uuid": "4caeee18-4a0d-405c-8b2b-c78668503c89",
        "value": "yxc1.lusy.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:36+00:00",
        "timestamp": "1785675756",
        "to_ids": false,
        "type": "url",
        "uuid": "885eeb7a-308a-49b1-8454-8abe8726e392",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0e344637b213d3d42309e938db72e8263c11f75e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:36+00:00",
        "timestamp": "1785675756",
        "to_ids": false,
        "type": "url",
        "uuid": "48b17230-1cfd-41fc-9f13-b7da7c69f840",
        "value": "https://x.com/banthisguy9349/status/2083280643295707376",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:36+00:00",
        "timestamp": "1785675757",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7e5b3290-0330-49c8-8231-81700fd75565",
        "value": "31.97.137.157",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:37+00:00",
        "timestamp": "1785675757",
        "to_ids": false,
        "type": "url",
        "uuid": "ffb0a207-895c-4139-bca2-1598cfa67110",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6c7f1155de388de30ac281912d50ac88c09b6b3a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:37+00:00",
        "timestamp": "1785675757",
        "to_ids": false,
        "type": "url",
        "uuid": "4bbe8f06-bd28-493a-a30d-3aa33200a2bb",
        "value": "https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2026-07-14-Malicious-files-and-infrastructure-from-npm-PyPI-Supply-Chain-packages.txt",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:37+00:00",
        "timestamp": "1785675757",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1dbf861d-9f36-4568-bacf-0641492d9152",
        "value": "148.230.93.72",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:37+00:00",
        "timestamp": "1785675757",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "38b9ee2e-28fc-45f2-9c18-542e89ea6716",
        "value": "162.35.174.220",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:37+00:00",
        "timestamp": "1785675757",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f4704fd2-156e-4350-a495-3be304109a18",
        "value": "164.92.104.155",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:37+00:00",
        "timestamp": "1785675757",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "869a40ca-9cab-470a-8655-671d84cea4a8",
        "value": "165.22.202.213",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675758",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "73cd03b9-e652-4253-94fe-77a808c60a53",
        "value": "172.235.144.71",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675758",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5d718914-928a-4690-a5e3-522f616f6ee3",
        "value": "195.250.25.214",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675758",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1f428fd4-44fa-4b90-aea4-859fafcb6a17",
        "value": "198.58.109.141",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675758",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "62b754c1-6f12-417e-be91-f4bb40ba6471",
        "value": "217.60.195.151",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675758",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "0d66c54e-ee17-41ad-881b-0ec52a8f4b5e",
        "value": "43.201.183.135",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675758",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f2a9c5ee-c648-45cb-bc7a-38316e1e3496",
        "value": "45.9.148.93",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:38+00:00",
        "timestamp": "1785675759",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ba3adba7-4fc1-4fa1-9ff2-b66011807875",
        "value": "5.181.188.230",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "evilginx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:39+00:00",
        "timestamp": "1785675759",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c6f6ddfc-24a1-45b4-ad3a-c24433e004cd",
        "value": "66.29.131.145",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:39+00:00",
        "timestamp": "1785675759",
        "to_ids": false,
        "type": "url",
        "uuid": "c170f1eb-7f27-44ba-87a1-a65f67b2a623",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/86b97434c7e7a5b46609c08ab05d8e21124a6318",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:39+00:00",
        "timestamp": "1785675759",
        "to_ids": false,
        "type": "url",
        "uuid": "162094cb-241c-4575-8222-a6cc8ff3629f",
        "value": "https://x.com/Unit42_Intel/status/2083205050449473561",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675760",
        "to_ids": true,
        "type": "domain",
        "uuid": "2593019a-8e8f-4b7e-9d7b-914f86326231",
        "value": "855e-35-192-215-234.ngrok.io",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675760",
        "to_ids": true,
        "type": "domain",
        "uuid": "f502f979-0041-4c1b-811d-4d96b5ac0730",
        "value": "advancebusinessfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675760",
        "to_ids": true,
        "type": "domain",
        "uuid": "ab73607c-02da-4dbe-a78f-08e4e0f2978e",
        "value": "archonseven.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675760",
        "to_ids": true,
        "type": "domain",
        "uuid": "43226448-488a-4994-b21f-736a40edcd3c",
        "value": "b2k4.notun.tech",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675760",
        "to_ids": true,
        "type": "domain",
        "uuid": "1160364a-f854-49c8-96c9-22b392e13c43",
        "value": "bizcapconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675760",
        "to_ids": true,
        "type": "domain",
        "uuid": "b14ceb06-d642-4821-9bd8-cc137e09c2f3",
        "value": "bizfundingbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:40+00:00",
        "timestamp": "1785675761",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8ae940c-8e04-49f4-ba19-3f32c6d072ba",
        "value": "businesscapconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:41+00:00",
        "timestamp": "1785675761",
        "to_ids": true,
        "type": "domain",
        "uuid": "2e270e85-89b5-489b-a40c-3bad853d50e5",
        "value": "businesscapitalconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:41+00:00",
        "timestamp": "1785675761",
        "to_ids": true,
        "type": "domain",
        "uuid": "18d47fc1-90be-4f0e-beb6-c13eb693f47e",
        "value": "businessfundingbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:41+00:00",
        "timestamp": "1785675761",
        "to_ids": true,
        "type": "domain",
        "uuid": "0d9b50b0-48e5-4931-a09e-9e6e224df325",
        "value": "capitalconnectioncenter.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:41+00:00",
        "timestamp": "1785675761",
        "to_ids": true,
        "type": "domain",
        "uuid": "231a19a3-7e8b-4e19-a1a1-7ef483752926",
        "value": "capitalresourcecenter.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:41+00:00",
        "timestamp": "1785675761",
        "to_ids": true,
        "type": "domain",
        "uuid": "471d079e-1bbc-4231-8abf-8a7f7c782a96",
        "value": "capitalsourcecenter.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:41+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "d0746dc0-6c90-4f9d-b406-3e842bf239ab",
        "value": "capitalsourcehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "624c4b7b-ae4f-45c7-9dc4-6c3eac15ce53",
        "value": "cawray.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "9e68d470-b193-4a86-ba88-95fde72782f5",
        "value": "contextfort.ai",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f342873-0753-4e06-8f27-8ed468ab2124",
        "value": "edrukca.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "0629e655-c186-42f9-be3a-b8c1089ffcd8",
        "value": "fundingnavigatorhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "21d70eaf-7b59-400b-a250-48eca7ebd8c1",
        "value": "keywise.com.br",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675762",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5acd60f-9664-4cc6-885f-2432de6d84df",
        "value": "mainnet.unstoppableapi.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:42+00:00",
        "timestamp": "1785675763",
        "to_ids": true,
        "type": "domain",
        "uuid": "53a495ff-1e2e-48b1-a891-7a13466a7d28",
        "value": "mcasource.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:43+00:00",
        "timestamp": "1785675763",
        "to_ids": true,
        "type": "domain",
        "uuid": "222b996c-24c5-495e-b426-cf03aafcc2ab",
        "value": "mcasource.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:43+00:00",
        "timestamp": "1785675763",
        "to_ids": true,
        "type": "domain",
        "uuid": "fc818c58-a789-4c32-82cf-b69b7ff94c58",
        "value": "newnz.seav.eu.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:43+00:00",
        "timestamp": "1785675763",
        "to_ids": true,
        "type": "domain",
        "uuid": "8823d29b-af5d-43c2-ac18-9de6ce2f8fc8",
        "value": "nppacks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:43+00:00",
        "timestamp": "1785675763",
        "to_ids": true,
        "type": "domain",
        "uuid": "2150caee-d271-46d5-a9d2-5b485c56aa5c",
        "value": "saferw.serveo.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:43+00:00",
        "timestamp": "1785675763",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f6b4150-338f-4c3c-b3c9-8655591f1745",
        "value": "server.saferpanichub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:43+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "9ea390e3-dc1b-4251-a1fa-317ed443813f",
        "value": "ssfbridgeconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:44+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "a2e2c79d-fbbc-4242-9fbe-1ef234156475",
        "value": "ssfcapitalbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:44+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "72581725-b3aa-40ef-9da5-c35a76663615",
        "value": "ssfcapitalconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:44+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b043543-bf38-4cc2-9e2f-d9fd32d604a1",
        "value": "ssfcapitalflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:44+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "636d8c5b-d54c-4e43-aa63-5c376d7b758a",
        "value": "ssfcapitalfocus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:44+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "ad439c5a-3092-4cb9-b470-3be6a443cbe1",
        "value": "ssfcapitalfund.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:44+00:00",
        "timestamp": "1785675764",
        "to_ids": true,
        "type": "domain",
        "uuid": "dd235ba3-d8f7-4b23-856d-1ea62b60b0f2",
        "value": "ssfcapitalfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675765",
        "to_ids": true,
        "type": "domain",
        "uuid": "c27ca40c-cace-4f72-94e6-42a5d0ded8d3",
        "value": "ssfcapitalfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675765",
        "to_ids": true,
        "type": "domain",
        "uuid": "26abfad0-569d-404e-9ba5-7e861a420aa8",
        "value": "ssfcapitalplan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675765",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb0444f6-a204-43fc-a8f5-049cc736ec7d",
        "value": "ssfcapitaltrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675765",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e43b9e2-be17-4757-888b-b08a5b7fa6a3",
        "value": "ssfcredit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675765",
        "to_ids": true,
        "type": "domain",
        "uuid": "893cf865-9cf5-42f0-94f6-76eb930f9d9f",
        "value": "ssfcreditmanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675765",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd2729ba-7c2d-42bc-a6f5-6101823a5f18",
        "value": "ssfcreditmgmt.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:45+00:00",
        "timestamp": "1785675766",
        "to_ids": true,
        "type": "domain",
        "uuid": "46ec91c3-2f94-40d0-89dd-c70bae1c3bc9",
        "value": "ssffinanceflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:46+00:00",
        "timestamp": "1785675766",
        "to_ids": true,
        "type": "domain",
        "uuid": "58111d0b-da5f-4615-bcfc-ac11efdefe83",
        "value": "ssffundflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:46+00:00",
        "timestamp": "1785675766",
        "to_ids": true,
        "type": "domain",
        "uuid": "3cc34463-0dfb-4d59-8e49-1c9a478417b2",
        "value": "ssffunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:46+00:00",
        "timestamp": "1785675766",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee0703da-92fa-455f-a705-a4a68dacc32f",
        "value": "ssffundingbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:46+00:00",
        "timestamp": "1785675766",
        "to_ids": true,
        "type": "domain",
        "uuid": "997bb05d-ed96-4377-9373-cf9c01c56a96",
        "value": "ssffundingflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:46+00:00",
        "timestamp": "1785675766",
        "to_ids": true,
        "type": "domain",
        "uuid": "fb4237a5-e572-4d6e-9046-d8ec8aef61b8",
        "value": "ssffundinghub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:46+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "31fb5fa4-6f14-4af0-a6e2-22463e9d67ee",
        "value": "ssffundingnetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "2851fcec-7675-4ad1-af4f-5d25ffa995ba",
        "value": "ssffundingpath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "7076f268-0dd6-4d27-8a28-bf15fd533b5e",
        "value": "ssffundingpathway.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a188a05-680d-4c9f-a6fa-61a4100da54d",
        "value": "ssffundingplan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f9948b1-b55d-4248-a566-b020e5e84c44",
        "value": "ssffundingtrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "064203d7-6f8f-4686-b0be-7da824616b9d",
        "value": "ssffundmanagement.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675767",
        "to_ids": true,
        "type": "domain",
        "uuid": "432872e3-57b2-42ee-92a8-20a80b39011d",
        "value": "ssfloanfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:47+00:00",
        "timestamp": "1785675768",
        "to_ids": true,
        "type": "domain",
        "uuid": "c3b09c77-9377-4ca7-a76a-761cf31299e3",
        "value": "ssfloanpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:48+00:00",
        "timestamp": "1785675768",
        "to_ids": true,
        "type": "domain",
        "uuid": "f483d2b1-4e27-48e1-ba01-87b13cf3da71",
        "value": "ssfmerchantfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:48+00:00",
        "timestamp": "1785675768",
        "to_ids": true,
        "type": "domain",
        "uuid": "1caeb91d-5433-423f-9087-dbd155123967",
        "value": "sterlingbizcap.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:48+00:00",
        "timestamp": "1785675768",
        "to_ids": true,
        "type": "domain",
        "uuid": "b26983db-5811-4172-8e95-2932e7903941",
        "value": "sterlingbizcapital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:48+00:00",
        "timestamp": "1785675768",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e722430-eda8-484c-8f12-5b9dd0804aa0",
        "value": "sterlingbizcapitalhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:48+00:00",
        "timestamp": "1785675768",
        "to_ids": true,
        "type": "domain",
        "uuid": "d938513f-43d0-47ef-81ed-1ae808b575d9",
        "value": "sterlingbizcredit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:48+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "db612fa6-6316-4194-be7d-ff76db17deec",
        "value": "sterlingbizfinance.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "f170b73c-4fb9-4239-ad77-d371cd7decdd",
        "value": "sterlingbizflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "00934e41-0d7f-4b1f-9784-91337cf9d61f",
        "value": "sterlingbizfund.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "8ca7ac48-7e80-4529-81a0-c043038f921b",
        "value": "sterlingbizfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "f08a5007-f9b3-4b2e-bf72-0c976213249f",
        "value": "sterlingbizline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "a81323a5-5d49-460b-a0ee-ec1e149e48e1",
        "value": "sterlingbizloans.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675769",
        "to_ids": true,
        "type": "domain",
        "uuid": "53015779-5611-406e-a3e8-bafce92a9a3c",
        "value": "sterlingbizpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:49+00:00",
        "timestamp": "1785675770",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2ca7b0d-4360-41ff-9357-a07608c7793b",
        "value": "sterlingbizservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:50+00:00",
        "timestamp": "1785675770",
        "to_ids": true,
        "type": "domain",
        "uuid": "eea0368f-5f33-4f62-84d5-9815f90ae788",
        "value": "sterlingbusinessboost.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:50+00:00",
        "timestamp": "1785675770",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f034d7c-accf-4027-abca-10d6b13cee27",
        "value": "sterlingbusinessfinance.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:50+00:00",
        "timestamp": "1785675770",
        "to_ids": true,
        "type": "domain",
        "uuid": "e4234b6e-aa2b-49b0-81d8-0cd3b1427541",
        "value": "sterlingbusinessfunders.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:50+00:00",
        "timestamp": "1785675770",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d169e47-0312-42e6-83f2-90e5baa01c8a",
        "value": "sterlingbusinessfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:50+00:00",
        "timestamp": "1785675770",
        "to_ids": true,
        "type": "domain",
        "uuid": "662f9e23-7b11-4d2d-8c61-9427f864f6ed",
        "value": "sterlingbusinessfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:50+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "c2d9daca-2352-4396-a9a6-ed86383f636f",
        "value": "sterlingbusinessgroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "61f41251-b4d9-498d-afe3-a779d2e3b433",
        "value": "sterlingbusinessloans.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "99c7c65e-f3ab-4663-b530-87d21899dcba",
        "value": "sterlingbusinesspartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "f485d9f8-39ca-405d-8811-69cf6fd5b6f7",
        "value": "sterlingbusinesssource.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dbaaa08-2030-4c95-b813-c75d59791d8e",
        "value": "sterlingcapboost.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f5b40b1-acf0-4513-a02d-d601e7d256ee",
        "value": "sterlingcapbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675771",
        "to_ids": true,
        "type": "domain",
        "uuid": "174f32db-4589-47fd-9ae8-96e62349139a",
        "value": "sterlingcapcentral.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:51+00:00",
        "timestamp": "1785675772",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec078d24-cd1c-4828-99b5-97a3d7d87b07",
        "value": "sterlingcapconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:52+00:00",
        "timestamp": "1785675772",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d6cb088-41e8-4271-a43a-83d7a74cd8d2",
        "value": "sterlingcapdrive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:52+00:00",
        "timestamp": "1785675772",
        "to_ids": true,
        "type": "domain",
        "uuid": "06fb2e0b-e67e-45cf-a3ed-bec1f8c3c518",
        "value": "sterlingcapflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:52+00:00",
        "timestamp": "1785675772",
        "to_ids": true,
        "type": "domain",
        "uuid": "bdc165d5-8c70-4d52-8427-fe0e0a9df8d1",
        "value": "sterlingcapflowpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:52+00:00",
        "timestamp": "1785675772",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebf8dd3f-dba0-4c8f-b8fa-c2b34b869c86",
        "value": "sterlingcapforward.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:52+00:00",
        "timestamp": "1785675772",
        "to_ids": true,
        "type": "domain",
        "uuid": "50535338-1f7f-4312-9680-cb48b9b72ab5",
        "value": "sterlingcapfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:52+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b96437a-0439-4a05-b5bd-81fd8673b385",
        "value": "sterlingcapgrowth.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f4e5525-cb07-4aa3-8072-cd07a007645d",
        "value": "sterlingcapital360.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b3c7765-014e-4809-bf62-e461fcd6acab",
        "value": "sterlingcapitalaccess.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "938cdd8c-5087-49db-8d87-884b5a6cc381",
        "value": "sterlingcapitaladvisers.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "5264e6d7-e9db-4647-8855-9785779f3d5e",
        "value": "sterlingcapitaladvisor.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "768455c4-e9e1-495e-b3a3-a07ffbcf02dc",
        "value": "sterlingcapitalbase.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675773",
        "to_ids": true,
        "type": "domain",
        "uuid": "28cbb465-0a76-410c-8147-b96840fbd846",
        "value": "sterlingcapitalbiz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:53+00:00",
        "timestamp": "1785675774",
        "to_ids": true,
        "type": "domain",
        "uuid": "c6747145-bf12-41e6-aa4c-3c4dea9da5e5",
        "value": "sterlingcapitalboost.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:54+00:00",
        "timestamp": "1785675774",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d241ff0-4e63-4cb9-82d2-bc7ac1b01cee",
        "value": "sterlingcapitalbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:54+00:00",
        "timestamp": "1785675774",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7236009-25bc-4acd-9f3b-f1d0a34efb72",
        "value": "sterlingcapitalconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:54+00:00",
        "timestamp": "1785675774",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a9cae7a-ca54-4ee8-b2e3-1004b5a15258",
        "value": "sterlingcapitaldirect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:54+00:00",
        "timestamp": "1785675774",
        "to_ids": true,
        "type": "domain",
        "uuid": "2a726fb8-21ae-4a27-98e1-b4e7eeb4cda2",
        "value": "sterlingcapitaldivsion.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:54+00:00",
        "timestamp": "1785675774",
        "to_ids": true,
        "type": "domain",
        "uuid": "91138e67-e187-4984-9e15-14403607d9b8",
        "value": "sterlingcapitalfocus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:54+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "07e641ca-c998-4767-994d-968231ce37c6",
        "value": "sterlingcapitalhq.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5542c17-8dae-4e8d-9c3c-214a4e1911cb",
        "value": "sterlingcapitallending.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "b0055fd1-d901-4a4e-a789-2528adba259b",
        "value": "sterlingcapitalline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "4820e9d8-7e7b-42fd-acdb-b3331e54f9cf",
        "value": "sterlingcapitalnetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "6a898bc4-4c58-4ce2-ad09-bfefcec0c35a",
        "value": "sterlingcapitalpath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0bbdbb9-28dd-459e-ab9f-1b85f7675074",
        "value": "sterlingcapitalpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675775",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5c7df20-c0dc-4184-abae-e673487a4423",
        "value": "sterlingcapitalpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:55+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "01ec0e17-7410-43a0-b3cf-a362a4e3e573",
        "value": "sterlingcapitalreach.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:56+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "6cf9d715-ce47-4076-9e86-32e23e299447",
        "value": "sterlingcapitalresources.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:56+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "e90fa8b5-5e73-4088-a4e2-10cd9a2a54a1",
        "value": "sterlingcapitalroute.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:56+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "dbadcc22-19b3-46fc-bebe-aa6f5ab7a1ad",
        "value": "sterlingcapitalsource.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:56+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "93fbab32-816c-4784-ae9e-321d0732710b",
        "value": "sterlingcapitalstream.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:56+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "8922811f-ca27-46fb-8512-cf63ff7aaeec",
        "value": "sterlingcapitalstreet.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:56+00:00",
        "timestamp": "1785675776",
        "to_ids": true,
        "type": "domain",
        "uuid": "a521731c-fed1-415d-8994-efc7f923bab6",
        "value": "sterlingcapitaltrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675777",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c6824c3-8d7d-47c8-8b1f-14d500d9af28",
        "value": "sterlingcapitalworks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675777",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a414a9f-a186-42a2-b9c9-be0ee60ea9b5",
        "value": "sterlingcapitalx.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675777",
        "to_ids": true,
        "type": "domain",
        "uuid": "31287e6f-7c5b-4319-af62-0679dce34b6a",
        "value": "sterlingcaplink.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675777",
        "to_ids": true,
        "type": "domain",
        "uuid": "32b4f51e-a750-4ed8-a43b-5f8a692a3ebb",
        "value": "sterlingcappros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675777",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1a9298d-d4ae-4d21-9b74-a2b18ec0b501",
        "value": "sterlingcaptrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675777",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc19dadd-2210-43c9-a44e-024290bde7d0",
        "value": "sterlingcapventuresgroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:57+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f7d3ab1-f46a-4ad2-b209-e5d5ba376353",
        "value": "sterlingcashflowsolutions.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "7af10214-027c-42ef-b71c-ac74c34a0feb",
        "value": "sterlingcreditfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "64d4d35d-09a1-435c-be56-ed1e397be453",
        "value": "sterlingcreditline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "5265eee0-29f1-4a7c-94c2-48a1560230e4",
        "value": "sterlingcreditpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d11a780-c81e-4a04-800e-04ddabffea2a",
        "value": "sterlingcreditstreet.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "15b17508-800e-4678-bd40-f6e0186ceae3",
        "value": "sterlingfinancefocus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675778",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c29f1fe-1749-407e-a150-f5fd2eb6c50c",
        "value": "sterlingfinancehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:58+00:00",
        "timestamp": "1785675779",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a41cb1e-8550-4118-a74d-077ff5215fcc",
        "value": "sterlingfinancepath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:59+00:00",
        "timestamp": "1785675779",
        "to_ids": true,
        "type": "domain",
        "uuid": "ca6220fb-043a-4f7f-8806-eb94468ed643",
        "value": "sterlingfinancepro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:59+00:00",
        "timestamp": "1785675779",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f24f79f-7cc9-4522-88b3-8792ae55e9ff",
        "value": "sterlingfinanceroute.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:59+00:00",
        "timestamp": "1785675779",
        "to_ids": true,
        "type": "domain",
        "uuid": "24d668b6-f705-440a-bbd1-c649885be7c2",
        "value": "sterlingfinancetrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:59+00:00",
        "timestamp": "1785675779",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6c7c047-206a-449d-b072-c73d334efa8c",
        "value": "sterlingfinancialbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:59+00:00",
        "timestamp": "1785675779",
        "to_ids": true,
        "type": "domain",
        "uuid": "3427b02f-785f-4c49-b6ed-6f0ed296a2d1",
        "value": "sterlingfinancialflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:02:59+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "d28a3413-1689-4f5a-8750-9798af016173",
        "value": "sterlingfinancialhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "964a9701-495d-4e4f-a046-f717dc13211e",
        "value": "sterlingfinancialpath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "c01d28ac-59e8-4d07-8311-3e0dbbd46352",
        "value": "sterlingfinancialtrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "50856d29-2aa3-45a7-8f89-a24b0e12efb0",
        "value": "sterlingfinancialventures.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "28764fe0-7d96-4d96-8d14-2bec5d2a0c5d",
        "value": "sterlingfinancingplan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "d5f14403-d827-4500-8725-21e25cf97bc8",
        "value": "sterlingfinancingpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675780",
        "to_ids": true,
        "type": "domain",
        "uuid": "9991c1c3-8c7f-4ea6-9105-2489f1d44647",
        "value": "sterlingfinancingroute.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:00+00:00",
        "timestamp": "1785675781",
        "to_ids": true,
        "type": "domain",
        "uuid": "f7d7c6fd-4c35-4289-bdee-f08bf3db098b",
        "value": "sterlingfinboost.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:01+00:00",
        "timestamp": "1785675781",
        "to_ids": true,
        "type": "domain",
        "uuid": "6b7e17df-fbec-46ea-a6ee-7cc3e45392be",
        "value": "sterlingfinbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:01+00:00",
        "timestamp": "1785675781",
        "to_ids": true,
        "type": "domain",
        "uuid": "604b63b5-00df-4fd5-9507-e68635aa4b94",
        "value": "sterlingfinflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:01+00:00",
        "timestamp": "1785675781",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e8e4b7a-2c02-4971-8c3d-1abbdf3d287f",
        "value": "sterlingfinforward.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:01+00:00",
        "timestamp": "1785675781",
        "to_ids": true,
        "type": "domain",
        "uuid": "4c24ac93-2b14-4433-a624-4cfc15cc105b",
        "value": "sterlingfinloans.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:01+00:00",
        "timestamp": "1785675781",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bffd761-3feb-4df2-a5f6-9494a33c0d73",
        "value": "sterlingfinoptions.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:01+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1450aa6-733e-4bbd-bbdf-6a8ee4b1f4cb",
        "value": "sterlingfintrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:02+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5e44959-2ef4-4837-9447-fd305e84fa46",
        "value": "sterlingfinventures.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:02+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "f5c54a08-fd7e-41fd-ade1-173ae1da3fe8",
        "value": "sterlingfinventuresgroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:02+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "8eafe1a0-d791-43a9-aca8-15f52fd56c96",
        "value": "sterlingfundbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:02+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "5410130c-34e1-4d64-bfd1-0b4542ff3632",
        "value": "sterlingfundcapital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:02+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb8b01fa-5deb-45c6-b8ab-7ee3a5f27c9e",
        "value": "sterlingfundconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:02+00:00",
        "timestamp": "1785675782",
        "to_ids": true,
        "type": "domain",
        "uuid": "755e3489-f24f-433e-90ee-b51b281ed8dc",
        "value": "sterlingfunddeck.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675783",
        "to_ids": true,
        "type": "domain",
        "uuid": "e01106e0-0ef4-428e-9f2c-3afb8c129471",
        "value": "sterlingfunddrive.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675783",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ab2e86a-f8ea-43aa-a43c-a937bf7c2271",
        "value": "sterlingfundedge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675783",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd439170-fc0b-4160-b4f8-0ad1cef80ec4",
        "value": "sterlingfundexpert.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675783",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0626f5b-ced7-457d-94ed-dd44825385dd",
        "value": "sterlingfundfi.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675783",
        "to_ids": true,
        "type": "domain",
        "uuid": "e99dbccf-094c-44d5-9dcf-0dba425b7b5e",
        "value": "sterlingfundflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675783",
        "to_ids": true,
        "type": "domain",
        "uuid": "1af1bbb7-f51c-4dfb-b285-55b805c9b447",
        "value": "sterlingfundfocus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:03+00:00",
        "timestamp": "1785675784",
        "to_ids": true,
        "type": "domain",
        "uuid": "1beef335-5808-42a3-8e4a-f4ec5cb3505b",
        "value": "sterlingfundforward.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:04+00:00",
        "timestamp": "1785675784",
        "to_ids": true,
        "type": "domain",
        "uuid": "d45977bc-7997-4a16-b265-08ef1a63cea0",
        "value": "sterlingfundgenie.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:04+00:00",
        "timestamp": "1785675784",
        "to_ids": true,
        "type": "domain",
        "uuid": "0993dcda-a4f6-4d0f-9597-74b5ad9a12b9",
        "value": "sterlingfundgrowth.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:04+00:00",
        "timestamp": "1785675784",
        "to_ids": true,
        "type": "domain",
        "uuid": "c473e189-c39b-44b3-bc5e-9b7fc035f41e",
        "value": "sterlingfundhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:04+00:00",
        "timestamp": "1785675784",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f7699ad-9f24-4304-aeb8-f258aa789a50",
        "value": "sterlingfundingadvisors.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:04+00:00",
        "timestamp": "1785675784",
        "to_ids": true,
        "type": "domain",
        "uuid": "184cc933-a224-4341-8709-0833376d82ab",
        "value": "sterlingfundingbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:05+00:00",
        "timestamp": "1785675785",
        "to_ids": true,
        "type": "domain",
        "uuid": "59838466-e17e-4739-8e0c-3b10dc177ba1",
        "value": "sterlingfundingcorp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:05+00:00",
        "timestamp": "1785675785",
        "to_ids": true,
        "type": "domain",
        "uuid": "600b1f34-acc4-4706-81cd-9aef1c4ac392",
        "value": "sterlingfundingexperts.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:05+00:00",
        "timestamp": "1785675785",
        "to_ids": true,
        "type": "domain",
        "uuid": "ccd6934c-51dc-4fd6-bb0c-85fa1ec088b1",
        "value": "sterlingfundingfocus.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:05+00:00",
        "timestamp": "1785675785",
        "to_ids": true,
        "type": "domain",
        "uuid": "7dc5600f-c18f-48d4-9b28-a728b5839096",
        "value": "sterlingfundinggroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:05+00:00",
        "timestamp": "1785675785",
        "to_ids": true,
        "type": "domain",
        "uuid": "415cc220-c645-49d4-99e2-daa0d2740f1a",
        "value": "sterlingfundingline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:05+00:00",
        "timestamp": "1785675785",
        "to_ids": true,
        "type": "domain",
        "uuid": "3837f9b6-a993-4e44-8b3d-c6ace00fb416",
        "value": "sterlingfundingpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675786",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b193612-edbf-49f3-805d-213898840467",
        "value": "sterlingfundingplan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675786",
        "to_ids": true,
        "type": "domain",
        "uuid": "3fb05282-8012-4b8d-ab29-229cf3d53100",
        "value": "sterlingfundingpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675786",
        "to_ids": true,
        "type": "domain",
        "uuid": "51552388-74b2-4dbb-b11a-b8e5e9122bb6",
        "value": "sterlingfundingpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675786",
        "to_ids": true,
        "type": "domain",
        "uuid": "d004782a-ff13-49b4-bd6d-1cbd1f2a4d0c",
        "value": "sterlingfundingroute.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675786",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d038561-fec9-449a-85c5-83f069d2c6f1",
        "value": "sterlingfundingsource.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675786",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd309ce2-0057-43cc-ab8c-63877a7f7878",
        "value": "sterlingfundingstreet.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:06+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e15e0fb-2773-40a9-b3ea-99193c2657fb",
        "value": "sterlingfundingtrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "783dcabf-ec24-4d94-927d-3fd41655216c",
        "value": "sterlingfundlift.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "2d177bbc-a985-4c37-b23b-a42e33126b9f",
        "value": "sterlingfundline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a141331-3df2-4c3b-a270-88af8aa76186",
        "value": "sterlingfundnetwork.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "21fd8d99-8d38-407b-9aad-e3224e895489",
        "value": "sterlingfundnow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "12bc9a6e-e832-40be-960d-6bcfb41de538",
        "value": "sterlingfundpath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675787",
        "to_ids": true,
        "type": "domain",
        "uuid": "0eea8df0-e75e-4d8b-85dd-0e5e34fba254",
        "value": "sterlingfundplan.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:07+00:00",
        "timestamp": "1785675788",
        "to_ids": true,
        "type": "domain",
        "uuid": "33b5f2ed-cdb0-462b-a0b2-38470ba460d5",
        "value": "sterlingfundportal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:08+00:00",
        "timestamp": "1785675788",
        "to_ids": true,
        "type": "domain",
        "uuid": "d4ecea1f-406d-42a3-ab05-8e6c6b437473",
        "value": "sterlingfundpower.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:08+00:00",
        "timestamp": "1785675788",
        "to_ids": true,
        "type": "domain",
        "uuid": "fd9fb246-65d6-4656-919d-a200c69b1cbd",
        "value": "sterlingfundpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:08+00:00",
        "timestamp": "1785675788",
        "to_ids": true,
        "type": "domain",
        "uuid": "9b758f02-df0c-436a-87aa-ad273d7e8d53",
        "value": "sterlingfundpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:08+00:00",
        "timestamp": "1785675788",
        "to_ids": true,
        "type": "domain",
        "uuid": "90a61c02-0c1b-41f0-be55-84720bc45744",
        "value": "sterlingfundquest.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:08+00:00",
        "timestamp": "1785675788",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c6b8172-f0b2-439b-9a07-eb8add71ae5f",
        "value": "sterlingfundrise.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:08+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3a20726-a4ee-440d-8bc9-3e7ca9efd2f4",
        "value": "sterlingfundroute.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "1c9629b6-e66c-4119-acf8-4531ae615385",
        "value": "sterlingfundservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "e07135e7-73b2-4055-8227-cbbe9670c943",
        "value": "sterlingfundsolutions.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "5045ed98-b5e9-421b-8532-6093b47f42e3",
        "value": "sterlingfundsource.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "0c8b2eae-c786-43e9-abee-0a50f7e9db5f",
        "value": "sterlingfundstream.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "f18f46b6-0525-4b6b-9918-650048121949",
        "value": "sterlingfundtrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675789",
        "to_ids": true,
        "type": "domain",
        "uuid": "af9c14c7-c270-4ef7-8a78-9c8858dc7fbb",
        "value": "sterlingfundzone.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:09+00:00",
        "timestamp": "1785675790",
        "to_ids": true,
        "type": "domain",
        "uuid": "c0210963-f428-458e-9dcb-31694c2ac4a2",
        "value": "sterlinggrowthboost.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:10+00:00",
        "timestamp": "1785675790",
        "to_ids": true,
        "type": "domain",
        "uuid": "21ece523-d304-4cfe-b25d-83a7c149eb22",
        "value": "sterlinggrowthbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:10+00:00",
        "timestamp": "1785675790",
        "to_ids": true,
        "type": "domain",
        "uuid": "e13d85a3-5a5e-4db7-ae5d-6770836d0985",
        "value": "sterlinggrowthcap.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:10+00:00",
        "timestamp": "1785675790",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f6b3705-b34b-4de0-8bd7-05a1b97e8d4c",
        "value": "sterlinggrowthcapital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:10+00:00",
        "timestamp": "1785675790",
        "to_ids": true,
        "type": "domain",
        "uuid": "f4aa19fd-0c2d-4423-8909-99c0f7c4693c",
        "value": "sterlinggrowthflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:10+00:00",
        "timestamp": "1785675790",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5e16aa3-34a0-418c-8230-64cb7489bdb6",
        "value": "sterlinggrowthfunding.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:10+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "d2d53a30-8a02-4fc5-b0f5-26341b273700",
        "value": "sterlinggrowthfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:11+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "d294a2e2-eeb1-47ec-a2e2-188a1b28a9f8",
        "value": "sterlinggrowthhub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:11+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "5b09476a-cf04-4054-8eb8-ef808551a003",
        "value": "sterlinggrowthloans.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:11+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "67a2dc8f-e671-412c-a04b-d994812d824c",
        "value": "sterlinggrowthpath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:11+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "53aaa5c3-42af-406b-a5af-5e9fe58a2914",
        "value": "sterlinggrowthservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:11+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "6ae2ca6f-e132-4667-b069-70b70544303f",
        "value": "sterlinggrowthventures.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:11+00:00",
        "timestamp": "1785675791",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c54ecb9-0a02-4c0f-a1ce-526579d296ed",
        "value": "sterlinglendinggroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675792",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba0ab495-1cf7-4b08-b42a-e5d3e0a78a6f",
        "value": "sterlinglendingline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675792",
        "to_ids": true,
        "type": "domain",
        "uuid": "83a6c066-ab2c-4b51-8579-971800f159b8",
        "value": "sterlinglendingpro.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675792",
        "to_ids": true,
        "type": "domain",
        "uuid": "7f1bbeb0-812d-42af-8c54-14f7afe42939",
        "value": "sterlinglendingservices.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675792",
        "to_ids": true,
        "type": "domain",
        "uuid": "86c0e390-7300-4523-97e8-2bfe5741e04d",
        "value": "sterlingloanboost.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675792",
        "to_ids": true,
        "type": "domain",
        "uuid": "6147dc04-34a7-46a8-b7a7-797e32f9535b",
        "value": "sterlingloanboosters.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675792",
        "to_ids": true,
        "type": "domain",
        "uuid": "215e9f54-25ec-44af-80b9-aab7bb28b073",
        "value": "sterlingloanbridge.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:12+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "2090df66-ee59-4380-b0d9-9d90b9303263",
        "value": "sterlingloancapital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:13+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c3982c5-1d7f-4f2d-a219-abf0ed891e73",
        "value": "sterlingloanchoice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:13+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "96f80f5f-e86d-48c2-b48a-3402106394bb",
        "value": "sterlingloancloud.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:13+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba0f2ba6-cdab-4216-9524-bfcbd37057ec",
        "value": "sterlingloanconnect.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:13+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "5403c752-a766-4978-aa49-20c21898efa6",
        "value": "sterlingloanexpert.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:13+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cb49d68-d40e-4a46-949d-af1e37dbc8bf",
        "value": "sterlingloanfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:13+00:00",
        "timestamp": "1785675793",
        "to_ids": true,
        "type": "domain",
        "uuid": "4350ee74-574c-402e-af85-094b2c34d425",
        "value": "sterlingloanline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675794",
        "to_ids": true,
        "type": "domain",
        "uuid": "62a1145b-5ef7-4b4b-8f65-fc1aeb4dd63a",
        "value": "sterlingloanpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675794",
        "to_ids": true,
        "type": "domain",
        "uuid": "f260b93b-91ce-4315-b1fe-74e943294d88",
        "value": "sterlingloanpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675794",
        "to_ids": true,
        "type": "domain",
        "uuid": "aa9935ec-cb47-4909-86ef-40b105b32f81",
        "value": "sterlingloansource.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675794",
        "to_ids": true,
        "type": "domain",
        "uuid": "40cda7c5-7246-4901-9b8d-46e008bc3521",
        "value": "sterlingloanventure.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675794",
        "to_ids": true,
        "type": "domain",
        "uuid": "6d587495-9039-4e52-bbd9-7f673c3915a9",
        "value": "sterlingloanzone.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675794",
        "to_ids": true,
        "type": "domain",
        "uuid": "b9dc395e-f773-4c7e-abf7-13c0fcfcb12a",
        "value": "sterlingprofinance.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:14+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6b1f377-4aa6-41a1-b5eb-282e294eea1d",
        "value": "sterlingstfin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:15+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "adc39f31-080d-4a23-8f10-815ba2bfae88",
        "value": "sterlingstfin.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:15+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "597983a6-5dc9-4055-b722-f5eae407b6d7",
        "value": "sterlingstfinadv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:15+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "700f39ca-d102-402d-bf84-ea9c1e3a1b3b",
        "value": "sterlingstfinadvisors.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:15+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "708b280e-f005-4fc9-8018-07d4f1f23349",
        "value": "sterlingstfinance.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:15+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cb223ff-e93a-44ba-83d6-65c0bd8634d6",
        "value": "sterlingstfinancehub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:15+00:00",
        "timestamp": "1785675795",
        "to_ids": true,
        "type": "domain",
        "uuid": "85271207-89c2-4e6d-9ab3-03ab5b06aa8d",
        "value": "sterlingstfinancial.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675796",
        "to_ids": true,
        "type": "domain",
        "uuid": "67dfb4c3-cc8c-4ed8-a579-4939da297f5c",
        "value": "sterlingstfinco.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675796",
        "to_ids": true,
        "type": "domain",
        "uuid": "3769ca6e-39d9-4149-84a2-4c39147b66b3",
        "value": "sterlingstfinholdings.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675796",
        "to_ids": true,
        "type": "domain",
        "uuid": "f6727bcd-d809-4301-8bfb-ae134369a3ab",
        "value": "sterlingstfininv.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675796",
        "to_ids": true,
        "type": "domain",
        "uuid": "ea57808b-d6fa-4a0e-95d3-79278e5c483b",
        "value": "sterlingstfinpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675796",
        "to_ids": true,
        "type": "domain",
        "uuid": "f89d1c93-b173-4b0c-a4cc-8fc3c06b7243",
        "value": "sterlingstfis.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675796",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae038240-bdc3-4e5e-84b9-9eaa5c7d770b",
        "value": "sterlingstfundingflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:16+00:00",
        "timestamp": "1785675797",
        "to_ids": true,
        "type": "domain",
        "uuid": "732a7e72-d779-49f2-a000-3334a744d71b",
        "value": "sterlingstfundinghub.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:17+00:00",
        "timestamp": "1785675797",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f0ce78f-6bb1-4fae-832c-7ef528bed25f",
        "value": "sterlingstfundingline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:17+00:00",
        "timestamp": "1785675797",
        "to_ids": true,
        "type": "domain",
        "uuid": "6870fcf8-70af-45c3-82b9-7a31435ae196",
        "value": "sterlingstfundingpath.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:17+00:00",
        "timestamp": "1785675797",
        "to_ids": true,
        "type": "domain",
        "uuid": "e849dffa-01c6-4847-94b3-58963ae1c7d0",
        "value": "sterlingstfundingtrack.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:17+00:00",
        "timestamp": "1785675797",
        "to_ids": true,
        "type": "domain",
        "uuid": "240af471-17b7-4bb7-81d8-d9f1c19869c6",
        "value": "sterlingstreetcapitalflow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:17+00:00",
        "timestamp": "1785675797",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce77ec03-ed8b-4c78-8990-cb95ac5a689d",
        "value": "sterlingstreetcorp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:17+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8f4ba05-ff4a-4f4d-b357-098bce54d3bc",
        "value": "sterlingstreetfi.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bc7940a-148f-4a67-a42b-e2c023ec91ca",
        "value": "sterlingstreetfin.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "0ac7fc34-fbe4-4f93-b71f-870ea587bfe2",
        "value": "sterlingstreetfinadvisors.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "45396168-2cc3-4bf1-a101-0acaae032493",
        "value": "sterlingstreetfinancegroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "b89fbce4-c5a9-4cec-a4f7-e483c62e14bc",
        "value": "sterlingstreetfinancialco.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "a18ebba5-f448-4702-a803-517ef3b53b56",
        "value": "sterlingstreetfins.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675798",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac17e758-7b6b-463b-9f79-ba8d8456f62d",
        "value": "sterlingstreetfs.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:18+00:00",
        "timestamp": "1785675799",
        "to_ids": true,
        "type": "domain",
        "uuid": "25105286-ca14-4568-a6cb-435a2552fc52",
        "value": "sterlingstreetfunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:19+00:00",
        "timestamp": "1785675799",
        "to_ids": true,
        "type": "domain",
        "uuid": "37e2528b-72eb-4a7b-b076-2888580c6767",
        "value": "sterlingstreetholdings.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:19+00:00",
        "timestamp": "1785675799",
        "to_ids": true,
        "type": "domain",
        "uuid": "dce90b16-099f-4da2-81de-588b9a8ccf37",
        "value": "sterlingstreetlending.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:19+00:00",
        "timestamp": "1785675799",
        "to_ids": true,
        "type": "domain",
        "uuid": "94f60441-f1a4-4ff6-b9c2-bbdce4638e6b",
        "value": "sterlingstreetline.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:19+00:00",
        "timestamp": "1785675799",
        "to_ids": true,
        "type": "domain",
        "uuid": "12372794-f11c-47ba-988b-4394f3719f13",
        "value": "sterlingstreetpros.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:19+00:00",
        "timestamp": "1785675799",
        "to_ids": true,
        "type": "domain",
        "uuid": "e08d09ac-142d-44d3-82e1-cd8623eb0f72",
        "value": "sterlingstreetsolutions.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:19+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "69926446-f078-42be-ae10-d66a6adfdfcc",
        "value": "sterlingstreetworks.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:20+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f3b24ae-78cb-4e15-85f9-fe7cf2822462",
        "value": "sterlingworkingcapital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:20+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "16f59d34-0f49-49c3-8c51-c53022dcd194",
        "value": "strerlingstreetfinance.us",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:20+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "5cf88a5c-d56f-4ecf-895c-1c6fdc1f8f48",
        "value": "strictly-adjusted-ewe.ngrok-free.app",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:20+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "bc81ff0f-0805-40a0-ab8e-1453859714d4",
        "value": "trueleafadvance.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:20+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "68a74d39-9f28-4169-9389-feb5318edd95",
        "value": "trueleafbizloans.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:20+00:00",
        "timestamp": "1785675800",
        "to_ids": true,
        "type": "domain",
        "uuid": "a14aac22-e2b0-4881-8c2a-b425568de5d2",
        "value": "trueleafboost.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675801",
        "to_ids": true,
        "type": "domain",
        "uuid": "5285a6d2-c06b-48b3-9a8a-6d57fa88407a",
        "value": "trueleafbridge.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675801",
        "to_ids": true,
        "type": "domain",
        "uuid": "d33e99e2-369f-493b-9dea-40976728d11e",
        "value": "trueleafcapital.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675801",
        "to_ids": true,
        "type": "domain",
        "uuid": "26c7b539-75e3-464a-89be-eded7b0db10a",
        "value": "trueleafcredit.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675801",
        "to_ids": true,
        "type": "domain",
        "uuid": "598d9c96-fd62-47b6-975b-0e208b5e42ac",
        "value": "trueleaffinance.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675801",
        "to_ids": true,
        "type": "domain",
        "uuid": "631383a0-a2bd-4c00-a132-99a8874bd51f",
        "value": "trueleaffinance.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675801",
        "to_ids": true,
        "type": "domain",
        "uuid": "04a8a66f-a989-4e4e-b161-82000ec99797",
        "value": "trueleaffinance.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:21+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bda4417-003f-4f64-88a4-ebf37901bca0",
        "value": "trueleaffinance.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d39f563-4113-4e7b-8c40-888dc55f7db5",
        "value": "trueleaffinance.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "8396579f-a0e1-4f21-b4e2-69b2e99dfad1",
        "value": "trueleaffinancial.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "54e6f59a-18a3-4fb0-918b-d9c4f8aaa494",
        "value": "trueleaffund.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "a94d4df9-e377-4ab6-a68e-c743ffa84c2e",
        "value": "trueleaffundgroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5cc71bf-8a2a-4963-b33d-7662949b33b8",
        "value": "trueleaffunding.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675802",
        "to_ids": true,
        "type": "domain",
        "uuid": "079007ec-39ea-42b9-a398-4992cf5d42b0",
        "value": "trueleaffunding.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:22+00:00",
        "timestamp": "1785675803",
        "to_ids": true,
        "type": "domain",
        "uuid": "4551c732-a10b-4fbd-8888-edf651f22d28",
        "value": "trueleaffunding.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:23+00:00",
        "timestamp": "1785675803",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c32416f-16a3-4b7b-a820-d9b5aeaa9b84",
        "value": "trueleaffunding.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:23+00:00",
        "timestamp": "1785675803",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e46bcb1-f27e-41a4-94e6-20fc4bb245e1",
        "value": "trueleaffundinggroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:23+00:00",
        "timestamp": "1785675803",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bd72844-5d3f-44cb-8b9e-bc912291d255",
        "value": "trueleaffundingpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:23+00:00",
        "timestamp": "1785675803",
        "to_ids": true,
        "type": "domain",
        "uuid": "21eb5627-8b55-4844-8079-1bb4c04dece6",
        "value": "trueleaffundpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:23+00:00",
        "timestamp": "1785675803",
        "to_ids": true,
        "type": "domain",
        "uuid": "f69c247f-6ba0-4273-8541-c6a3721f07da",
        "value": "trueleaffunds.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:23+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5a4deeb-42a1-4055-9aa8-30d031548852",
        "value": "trueleaffunds.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ad6414a-5542-438d-99e7-d54e5e3f1414",
        "value": "trueleaffunds.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "f1ecb024-9366-4011-87b1-c48e78963caa",
        "value": "trueleaffunds.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "29272fdf-7d67-42c5-9392-70d91899431e",
        "value": "trueleaffunds.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b549602-39bd-4386-81b6-407d97037b02",
        "value": "trueleaffundsgroup.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f711df9-542c-45aa-b3cb-9d4f3da0bc41",
        "value": "trueleafgrowth.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675804",
        "to_ids": true,
        "type": "domain",
        "uuid": "53f9ce54-1b71-47c2-8488-cb07cdb32d15",
        "value": "trueleafline.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:24+00:00",
        "timestamp": "1785675805",
        "to_ids": true,
        "type": "domain",
        "uuid": "25183747-8ca2-4b77-8ab8-2f9f8bd716da",
        "value": "trueleafline.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:25+00:00",
        "timestamp": "1785675805",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd4fa2fa-8b8a-4780-aac8-e83cad287162",
        "value": "trueleafloan.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:25+00:00",
        "timestamp": "1785675805",
        "to_ids": true,
        "type": "domain",
        "uuid": "73f41d2a-4609-440c-a331-e0f28f2dabff",
        "value": "trueleafloans.biz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:25+00:00",
        "timestamp": "1785675805",
        "to_ids": true,
        "type": "domain",
        "uuid": "2ce675b2-b8b8-4e8f-8459-d5dacbc40c62",
        "value": "trueleafloans.cloud",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:25+00:00",
        "timestamp": "1785675805",
        "to_ids": true,
        "type": "domain",
        "uuid": "2523f2e3-ecbb-47ee-99fb-76ec450a8964",
        "value": "trueleafloans.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:25+00:00",
        "timestamp": "1785675805",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fcfad76-56c8-4e78-8801-91de4c2a9231",
        "value": "trueleafloans.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "hacked_npmrepos",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:25+00:00",
        "timestamp": "1785675806",
        "to_ids": true,
        "type": "domain",
        "uuid": "e14e561f-e0c1-4d3d-9f39-c98edd37f38d",
        "value": "unstoppableapi.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675806",
        "to_ids": false,
        "type": "url",
        "uuid": "5dd6a181-9121-4a9e-b869-45c2e11b293c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5603a65c7879e148d4389823334b4935a255c422",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675806",
        "to_ids": false,
        "type": "url",
        "uuid": "e414d34a-b628-4f8f-a20c-ccbf4277e670",
        "value": "https://x.com/DarkJstr/status/2075156966175830437",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675806",
        "to_ids": false,
        "type": "url",
        "uuid": "fe5ab469-9664-4786-9fe7-12a5a2350000",
        "value": "https://x.com/DarkJstr/status/2083461379227271280",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675806",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "de9b266e-4168-4217-ab0e-e01f93ee57aa",
        "value": "23.224.4.114",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675806",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "34759a32-ecf4-4f66-ac73-ea9757c120ab",
        "value": "23.224.4.115",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675806",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d3412b92-dddf-44c6-8f75-0ba1c22c3c29",
        "value": "23.224.4.116",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:26+00:00",
        "timestamp": "1785675807",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c12b9361-5133-4cbc-9cf9-da76c910e552",
        "value": "23.224.4.117",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:27+00:00",
        "timestamp": "1785675807",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "3757acd5-60b8-49dd-adf5-ccb1d8945cc3",
        "value": "23.224.4.118",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:27+00:00",
        "timestamp": "1785675808",
        "to_ids": true,
        "type": "domain",
        "uuid": "4f3b8553-3141-4c34-8d24-dade92fcaf2e",
        "value": "crpx0.su",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:28+00:00",
        "timestamp": "1785675808",
        "to_ids": true,
        "type": "domain",
        "uuid": "54709149-3fa8-402e-b449-53dcbcba6c86",
        "value": "crpxoxo.pw",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "crpx0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T13:03:28+00:00",
        "timestamp": "1785675808",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f05115c-99b9-4b1f-9995-5ab0b88599f7",
        "value": "flash-token.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_duke",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:03+00:00",
        "timestamp": "1785679204",
        "to_ids": false,
        "type": "url",
        "uuid": "346cc964-6438-44e4-9914-639b744e3bcd",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ce2f862d4f58c7d2f22913b1afcfdae10c85a993",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_duke",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:04+00:00",
        "timestamp": "1785679204",
        "to_ids": false,
        "type": "url",
        "uuid": "12c58143-0b68-4231-8c67-8b0589d0574e",
        "value": "https://x.com/LloydLabs/status/2083594247547068883",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_duke",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:04+00:00",
        "timestamp": "1785679205",
        "to_ids": true,
        "type": "domain",
        "uuid": "d623ecd3-99b1-4812-814c-5c8e44cd4ed9",
        "value": "statistic-g.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:05+00:00",
        "timestamp": "1785679205",
        "to_ids": false,
        "type": "url",
        "uuid": "13466314-c16c-47d8-9434-66502758704c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2031c376bcda8bbc8053b7b96408626dd0a98361",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:05+00:00",
        "timestamp": "1785679205",
        "to_ids": true,
        "type": "domain",
        "uuid": "d92152e4-4689-4e7e-8621-51997f595a5c",
        "value": "autenticacao-doc.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:05+00:00",
        "timestamp": "1785679205",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a680da-1966-44a1-93b2-7a198560785d",
        "value": "boletos-notas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:05+00:00",
        "timestamp": "1785679205",
        "to_ids": true,
        "type": "domain",
        "uuid": "15ae74fd-c24f-4bd4-bd8e-ac820abf48c9",
        "value": "br-tradingview.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:06+00:00",
        "timestamp": "1785679206",
        "to_ids": true,
        "type": "domain",
        "uuid": "5f1d6e3a-d331-4671-a1d8-9fb3619ef056",
        "value": "contrato-mp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:06+00:00",
        "timestamp": "1785679206",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcec3170-89b6-4e96-90de-edf97e40997d",
        "value": "contratomcredito.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:06+00:00",
        "timestamp": "1785679206",
        "to_ids": true,
        "type": "domain",
        "uuid": "c101d048-891f-49a1-b789-25164e393507",
        "value": "contratomp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:06+00:00",
        "timestamp": "1785679206",
        "to_ids": true,
        "type": "domain",
        "uuid": "4110665d-df02-4764-95c2-f26bc0a1d02d",
        "value": "cvtpremiumprp.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:06+00:00",
        "timestamp": "1785679206",
        "to_ids": true,
        "type": "domain",
        "uuid": "790472b7-903d-44c1-bc9c-d49c3a14775d",
        "value": "dn-pdflite.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:06+00:00",
        "timestamp": "1785679206",
        "to_ids": true,
        "type": "domain",
        "uuid": "7ff34bc7-defa-4563-aaf2-5843c03aa38d",
        "value": "downloadwinrar.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:07+00:00",
        "timestamp": "1785679207",
        "to_ids": true,
        "type": "domain",
        "uuid": "511fe14c-69f8-4412-aabd-1e4400048a1d",
        "value": "nf.boletos-notas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:07+00:00",
        "timestamp": "1785679207",
        "to_ids": true,
        "type": "domain",
        "uuid": "a5dca25a-b94c-4963-86db-baa96c71fce4",
        "value": "nfe.boletos-notas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:07+00:00",
        "timestamp": "1785679207",
        "to_ids": true,
        "type": "domain",
        "uuid": "25c63eb3-833e-4593-8c88-81858fc2b109",
        "value": "pdf-m.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:07+00:00",
        "timestamp": "1785679207",
        "to_ids": true,
        "type": "domain",
        "uuid": "3bb9edff-3688-4d96-b676-376ed801232d",
        "value": "pdf-st.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:07+00:00",
        "timestamp": "1785679207",
        "to_ids": true,
        "type": "domain",
        "uuid": "c9225bd4-3c19-4e11-b55a-a795f5083804",
        "value": "upnoones.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:07+00:00",
        "timestamp": "1785679207",
        "to_ids": false,
        "type": "url",
        "uuid": "b1da9492-27c2-4462-9afa-a94b8e245f98",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d092cc85ab7f5febca081eab84e522573474bf87",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:08+00:00",
        "timestamp": "1785679208",
        "to_ids": false,
        "type": "url",
        "uuid": "178a9177-1f1a-40a8-926a-df153c333df7",
        "value": "https://x.com/JAMESWT_WT/status/2083168480220598569",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:08+00:00",
        "timestamp": "1785679208",
        "to_ids": true,
        "type": "domain",
        "uuid": "f50138e2-5b74-44a8-8336-d3aeff2f7a12",
        "value": "hpdf-bro.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:08+00:00",
        "timestamp": "1785679208",
        "to_ids": true,
        "type": "domain",
        "uuid": "fef1c1cc-04c1-425b-b0f1-fc92bb93ef51",
        "value": "pdf-bro.lat",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-08-02T14:00:08+00:00",
        "timestamp": "1785679208",
        "to_ids": true,
        "type": "domain",
        "uuid": "366b5677-2e69-4efa-9fd4-da8801c9664d",
        "value": "zeebusiness.page.link",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}