{ "Event": { "analysis": "1", "date": "2026-04-14", "extends_uuid": "", "info": "Maltrail IOC for 2026-04-15", "publish_timestamp": "1776290402", "published": true, "threat_level_id": "2", "timestamp": "1776286851", "uuid": "e1b629a9-1476-4830-a5ee-83b601e05ff3", "Orgc": { "name": "Krawczyk Industries Limited", "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#d6f264", "local": false, "name": "MALWARE", "relationship_type": "" }, { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#00ce5f", "local": false, "name": "misp:event-type=\"observation\"", "relationship_type": "" }, { "colour": "#009042", "local": false, "name": "misp:automation-level=\"unsupervised\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#0071c3", "local": false, "name": "osint:lifetime=\"perpetual\"", "relationship_type": "" }, { "colour": "#0064ac", "local": false, "name": "osint:source-type=\"manual-collection\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "apt_oceanlotus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:06+00:00", "timestamp": "1776240006", "to_ids": false, "type": "url", "uuid": "01d0a56c-7188-4c75-80ee-bcc5bd9f86b9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5defd12470b657858d84889044a5a01005390c68", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_oceanlotus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:06+00:00", "timestamp": "1776240006", "to_ids": false, "type": "url", "uuid": "51446bbb-22a0-4daa-ad88-00800226b72d", "value": "https://x.com/RedDrip7/status/2044239571370815802", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_oceanlotus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:06+00:00", "timestamp": "1776240006", "to_ids": false, "type": "url", "uuid": "211131e0-601d-4cec-90b9-e05952465453", "value": "https://www.virustotal.com/gui/file/31e812704e41e7e779d96a553500d45409d4b46c7f1007af2ba042407d562b1d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_oceanlotus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:06+00:00", "timestamp": "1776240006", "to_ids": true, "type": "ip-dst", "uuid": "c923e94a-53ba-4752-9be1-0780d669619e", "value": "152.32.144.5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:06+00:00", "timestamp": "1776240006", "to_ids": false, "type": "url", "uuid": "7396c3be-e132-42d3-bc07-8b9c40f970e2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b167f68b155108195b7d2ad05195ed974f7905d0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cyberstrikeai", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:06+00:00", "timestamp": "1776240007", "to_ids": true, "type": "ip-dst", "uuid": "5e5d93c9-877f-4dcf-ad73-bd73e63e6dec", "value": "101.96.200.5", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:07+00:00", "timestamp": "1776240007", "to_ids": false, "type": "url", "uuid": "db02eae3-545e-4161-b426-ea4b53001967", "value": "https://api.github.com/repos/stamparm/maltrail/commits/6d69e6c1c2f4e14ba1ac6950a530d315a99d590a", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:07+00:00", "timestamp": "1776240007", "to_ids": false, "type": "url", "uuid": "0e947b45-b83a-4cfb-aca2-a7aad782dde1", "value": "https://x.com/Fact_Finder03/status/2044293562721075686", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:07+00:00", "timestamp": "1776240007", "to_ids": true, "type": "ip-dst", "uuid": "0bd0a028-c5c9-43c5-80a9-f43ec465eae1", "value": "188.214.144.18", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:07+00:00", "timestamp": "1776240007", "to_ids": true, "type": "ip-dst", "uuid": "c83aa963-d0a0-47f6-b0cb-5137f534365e", "value": "45.154.98.217", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:07+00:00", "timestamp": "1776240007", "to_ids": true, "type": "domain", "uuid": "c819946f-68c8-4534-906b-ad6056f0be0f", "value": "mon-espace-colis.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:07+00:00", "timestamp": "1776240007", "to_ids": true, "type": "domain", "uuid": "cc41b2d1-6e30-4a18-b883-33f6dc505cc6", "value": "relaisdelacommanderie.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "cursebot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240008", "to_ids": true, "type": "domain", "uuid": "cda0a7c1-a0cf-43cb-aba5-078c03c555d0", "value": "saxudou.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_mirai", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240008", "to_ids": false, "type": "url", "uuid": "f503a681-181c-4267-b019-5b4bdbd9c428", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cee23e3cbd30bc61290dc5e08777472af61859fc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_mirai", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240008", "to_ids": false, "type": "url", "uuid": "a90edd65-e245-43f0-882e-ab3c49c359cb", "value": "https://www.virustotal.com/gui/file/0df73efae0aa434ef3ddee8230e0f9ade11e68f250e9c2491408439f96588bab/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_mirai", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240008", "to_ids": true, "type": "domain", "uuid": "33044d33-7e05-4f42-9d3b-0debb72afbd4", "value": "school-kids.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "elf_mirai", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240008", "to_ids": true, "type": "domain", "uuid": "a4979974-9923-4181-bea3-0bbc0b376c15", "value": "lmfao.school-kids.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240008", "to_ids": false, "type": "url", "uuid": "8e1dab1a-4f5b-40c6-85c9-269c3fba31ba", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0fd12be0814d871c14ed7c47f56bf11f53e6c95b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:08+00:00", "timestamp": "1776240009", "to_ids": false, "type": "url", "uuid": "0a448f39-b642-49ac-89a3-651846f23358", "value": "https://x.com/Fact_Finder03/status/2044297770341937339", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:09+00:00", "timestamp": "1776240009", "to_ids": true, "type": "ip-dst", "uuid": "edd5d2af-1e5c-4593-a221-7b07bd020a09", "value": "141.147.45.169", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:09+00:00", "timestamp": "1776240009", "to_ids": false, "type": "url", "uuid": "c50b4272-88eb-4e81-9dd3-648731924eca", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0744c65509f4286504e0a73e9fed5a28d3f0cba2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:09+00:00", "timestamp": "1776240009", "to_ids": false, "type": "url", "uuid": "b89c14e6-82c1-401f-a061-735be497d857", "value": "https://github.com/hagezi/dns-blocklists/issues/9791", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:09+00:00", "timestamp": "1776240009", "to_ids": true, "type": "domain", "uuid": "54ff1c91-15b3-4ba3-b6c4-36ba2955c360", "value": "cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:09+00:00", "timestamp": "1776240010", "to_ids": true, "type": "domain", "uuid": "8e661f59-e526-4fdc-9806-1ed7b5e9e6fd", "value": "top.rodeo", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:10+00:00", "timestamp": "1776240010", "to_ids": true, "type": "domain", "uuid": "e2b546cf-b3e5-4706-ae3d-871cec4ef997", "value": "api.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:10+00:00", "timestamp": "1776240010", "to_ids": true, "type": "domain", "uuid": "35636280-bc6c-4e20-8175-a069c9a16378", "value": "cdn.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:10+00:00", "timestamp": "1776240010", "to_ids": true, "type": "domain", "uuid": "1d33880a-35e2-4158-9360-cf17ef44e9cf", "value": "chat.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:10+00:00", "timestamp": "1776240010", "to_ids": true, "type": "domain", "uuid": "6c57f15f-922d-4e36-8cd8-b03857219439", "value": "coin-miner.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:10+00:00", "timestamp": "1776240010", "to_ids": true, "type": "domain", "uuid": "826646d7-5501-4352-b1dd-42fc34d59b0d", "value": "crm.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:10+00:00", "timestamp": "1776240011", "to_ids": true, "type": "domain", "uuid": "92677d61-3bc6-4257-992d-5e54507eb467", "value": "gamewss.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:11+00:00", "timestamp": "1776240011", "to_ids": true, "type": "domain", "uuid": "bef2d237-a54a-43df-b2fd-992d56ce6ea2", "value": "goldminer.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:11+00:00", "timestamp": "1776240011", "to_ids": true, "type": "domain", "uuid": "b144ef43-4a07-4d42-9050-7e706dddf3a4", "value": "herculessportslegend.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:11+00:00", "timestamp": "1776240011", "to_ids": true, "type": "domain", "uuid": "2f12810b-5c4c-49bc-8fc4-805b26d90bed", "value": "metal.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:11+00:00", "timestamp": "1776240011", "to_ids": true, "type": "domain", "uuid": "8ab179aa-c78c-4bcb-96eb-f43ec642fd59", "value": "mines.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:11+00:00", "timestamp": "1776240011", "to_ids": true, "type": "domain", "uuid": "750bce7b-90c3-4d3e-8272-b1e983557495", "value": "multiaccount.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:11+00:00", "timestamp": "1776240012", "to_ids": true, "type": "domain", "uuid": "fa844f3c-29bb-4d75-95a1-9315172b20bd", "value": "tg.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:12+00:00", "timestamp": "1776240012", "to_ids": true, "type": "domain", "uuid": "6d891236-f0a5-438d-a5ef-755c9b2b9d17", "value": "topup.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:12+00:00", "timestamp": "1776240012", "to_ids": true, "type": "domain", "uuid": "50e802bf-3df0-4585-a4de-6c29c6fea7b6", "value": "wheel.cloudapi.stream", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "whitelist", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:12+00:00", "timestamp": "1776240012", "to_ids": false, "type": "url", "uuid": "9e26ec97-4251-4935-8474-f74b2d05f27e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/874ec144ee704d733445ef0f2d4504617e72beaf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "whitelist", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:12+00:00", "timestamp": "1776240012", "to_ids": false, "type": "url", "uuid": "33683a00-1dce-461c-99c4-71875766fa6e", "value": "https://github.com/hagezi/dns-blocklists/issues/9785", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "whitelist", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T08:00:12+00:00", "timestamp": "1776240012", "to_ids": true, "type": "domain", "uuid": "fa74dc1e-b590-4c30-91e2-ed93f80f314c", "value": "universalminecrafttool.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:03+00:00", "timestamp": "1776243604", "to_ids": false, "type": "url", "uuid": "7a1e76a7-6f2c-4645-a888-d87fbde36230", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8d6a90cdbdaf9a05b6554decd6f14e10490b1fd2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:04+00:00", "timestamp": "1776243604", "to_ids": true, "type": "domain", "uuid": "518c3ee9-2a08-45ac-b86a-e40aea3d4ba3", "value": "celaysimplined.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:04+00:00", "timestamp": "1776243604", "to_ids": true, "type": "domain", "uuid": "34277109-8a31-4ffe-9491-99f76e7a0a7c", "value": "cosmicrelayhub3.lol", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:04+00:00", "timestamp": "1776243604", "to_ids": true, "type": "domain", "uuid": "a7c178fb-4232-4e09-9b2e-93ed1a92e444", "value": "maphercheitylus.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:04+00:00", "timestamp": "1776243604", "to_ids": false, "type": "url", "uuid": "445cfec2-df2c-4145-9a2a-9f14cc1459e6", "value": "https://api.github.com/repos/stamparm/maltrail/commits/81db3103b8efc5095a3bf39cc1e5c47bfe4992ee", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "magentocore", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:04+00:00", "timestamp": "1776243604", "to_ids": true, "type": "domain", "uuid": "92a15b90-633f-4909-875e-f037c90fad84", "value": "000root.shop", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:04+00:00", "timestamp": "1776243605", "to_ids": false, "type": "url", "uuid": "81622c51-46cd-4061-bcc1-a8f09fa4e353", "value": "https://api.github.com/repos/stamparm/maltrail/commits/97cccc1d84677520440ffe789a383995ed418813", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:05+00:00", "timestamp": "1776243605", "to_ids": true, "type": "ip-dst", "uuid": "f75d4cb7-998b-4d64-85c7-47cc299560df", "value": "141.11.197.63", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "sectoprat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:05+00:00", "timestamp": "1776243605", "to_ids": true, "type": "ip-dst", "uuid": "e2aa2e44-57c5-411f-bdcf-fac2b4def28d", "value": "144.31.159.168", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:05+00:00", "timestamp": "1776243605", "to_ids": false, "type": "url", "uuid": "5fb1ede8-202b-489b-a20f-8c972a354847", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d21e2cc0996c8d2c88916894caaba9648c3c9d71", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "android_joker", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T09:00:05+00:00", "timestamp": "1776243606", "to_ids": true, "type": "domain", "uuid": "4edb8e58-c8ed-49b7-9d75-76f49352770a", "value": "worshep.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:02+00:00", "timestamp": "1776247203", "to_ids": false, "type": "url", "uuid": "0c90a6c6-c867-4dd9-b6ff-ba491634f000", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d64e2931e72aa5de0bd15fad2b37b772d99d0fb2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:03+00:00", "timestamp": "1776247203", "to_ids": true, "type": "domain", "uuid": "9a4848a6-128f-4613-a798-29445c8b1277", "value": "alcovey.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:03+00:00", "timestamp": "1776247203", "to_ids": false, "type": "url", "uuid": "12445083-7d0a-47fa-a813-ed710358e2a8", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0ed8b537ef66fe4a40aeb03ad1b8e7390e9eccdf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:03+00:00", "timestamp": "1776247203", "to_ids": false, "type": "url", "uuid": "0bf64941-38ca-4a00-999c-722255ac6b3b", "value": "https://x.com/brkalbyrk7/status/2044139560318165073", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:03+00:00", "timestamp": "1776247204", "to_ids": true, "type": "domain", "uuid": "d054abe3-1128-4d2d-a9cc-ed080fcc0aca", "value": "daarnagroup.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:04+00:00", "timestamp": "1776247204", "to_ids": true, "type": "domain", "uuid": "53a99cc5-c2d2-475e-800b-4ef288e5ba56", "value": "mrakagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:04+00:00", "timestamp": "1776247204", "to_ids": true, "type": "domain", "uuid": "6d7f0c25-602c-4956-9186-5fd002f2b0d8", "value": "nvoaagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:04+00:00", "timestamp": "1776247204", "to_ids": true, "type": "domain", "uuid": "2b99f6a2-966b-4f26-8988-c4aaa5f33cdb", "value": "upscaleaquatics.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T10:00:04+00:00", "timestamp": "1776247204", "to_ids": true, "type": "domain", "uuid": "d0bbd73f-09c9-4410-ace1-7c440694a70c", "value": "vastbets.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:04+00:00", "timestamp": "1776250805", "to_ids": false, "type": "url", "uuid": "91ec8f5d-f8b1-4a40-87d4-279a2f5785ec", "value": "https://api.github.com/repos/stamparm/maltrail/commits/9328fdac4b3a8e74dc84a995232b1ac6170221fa", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "supershell_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:05+00:00", "timestamp": "1776250805", "to_ids": true, "type": "ip-dst", "uuid": "6b93f395-a76b-4acf-b797-c06f05fbac8f", "value": "43.247.135.185", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:05+00:00", "timestamp": "1776250805", "to_ids": false, "type": "url", "uuid": "07d097d6-d27f-489c-a2c3-b657ef798b04", "value": "https://api.github.com/repos/stamparm/maltrail/commits/fb3399ca1f2b073cf34eb10006d2931877282819", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:05+00:00", "timestamp": "1776250806", "to_ids": true, "type": "domain", "uuid": "8c87db6b-eb16-44dc-be4a-0771d4332f60", "value": "nid-naverbby.servecounterstrike.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:06+00:00", "timestamp": "1776250806", "to_ids": false, "type": "url", "uuid": "9a32418d-3b03-44ef-91e5-3eabd3f694a3", "value": "https://api.github.com/repos/stamparm/maltrail/commits/458539ac738ee3c9d3159b716b5df541990d2a78", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:06+00:00", "timestamp": "1776250806", "to_ids": true, "type": "domain", "uuid": "1b526b00-b0fe-40fb-aeaa-2a6f65eb93f6", "value": "8orangemediazone.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:06+00:00", "timestamp": "1776250806", "to_ids": true, "type": "domain", "uuid": "6f611098-d002-4765-bf17-9a0447f08df2", "value": "apxeagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:06+00:00", "timestamp": "1776250806", "to_ids": true, "type": "domain", "uuid": "281e2bc3-1388-43c7-8d77-2b6bceae4f80", "value": "baemagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:06+00:00", "timestamp": "1776250807", "to_ids": true, "type": "domain", "uuid": "c4e98ef2-f317-4a39-8ec2-2a02596ac2a1", "value": "dosqueen.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:07+00:00", "timestamp": "1776250807", "to_ids": true, "type": "domain", "uuid": "ca16fab9-84b7-4244-bb86-122339b91889", "value": "foodbiteslovers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:07+00:00", "timestamp": "1776250807", "to_ids": true, "type": "domain", "uuid": "62a89978-c38e-47cc-ba4c-98fed4423429", "value": "lnuaagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:07+00:00", "timestamp": "1776250807", "to_ids": true, "type": "domain", "uuid": "c989da42-7e28-4952-954f-c5c74357fc91", "value": "lovemensfitness.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:07+00:00", "timestamp": "1776250807", "to_ids": true, "type": "domain", "uuid": "bfb07af5-e5fe-4b64-ac13-925933ed95c3", "value": "lvieagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:07+00:00", "timestamp": "1776250807", "to_ids": true, "type": "domain", "uuid": "68d7bd08-13a4-4b40-8d89-9ff20c80e838", "value": "mastreagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:07+00:00", "timestamp": "1776250808", "to_ids": true, "type": "domain", "uuid": "d28dfb6b-3916-43f7-942d-87b6b5dcb811", "value": "meditationyog.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:08+00:00", "timestamp": "1776250808", "to_ids": true, "type": "domain", "uuid": "907a9b88-5a38-4021-95b4-9ac3c72114b7", "value": "mergaagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:08+00:00", "timestamp": "1776250808", "to_ids": true, "type": "domain", "uuid": "46a0f493-f74c-4cfd-a56d-176fc1ffc575", "value": "mirthemp.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:08+00:00", "timestamp": "1776250808", "to_ids": true, "type": "domain", "uuid": "6b5e410d-1387-4aa7-a64f-95dedcf75ec9", "value": "mteaagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:08+00:00", "timestamp": "1776250808", "to_ids": true, "type": "domain", "uuid": "7bd50c0f-7f75-4c22-bdfb-d5a5f63ec907", "value": "mystciagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:08+00:00", "timestamp": "1776250808", "to_ids": true, "type": "domain", "uuid": "ebb49b08-c768-4c17-837b-4930d624acd3", "value": "neoroagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:08+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "5c01aacd-3618-4f9e-b734-6a3493dd9c77", "value": "nxeusagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "babe1807-8e6f-4d4e-80a1-ce26a2500fd8", "value": "oepnagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "81363dc5-4e39-4dd0-8861-625036310fab", "value": "orcaleagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "cec54985-af3e-4592-8ac4-bff577763b60", "value": "orinoagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "386caf4d-0ba7-4953-b505-6639467f3cf4", "value": "peaecagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "e8930584-c38d-4117-88b2-8a856d958ee3", "value": "poratlagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250809", "to_ids": true, "type": "domain", "uuid": "0db0279f-9038-4501-b354-6b3ea779e79d", "value": "primefinanceway.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:09+00:00", "timestamp": "1776250810", "to_ids": true, "type": "domain", "uuid": "7efed78e-ecba-4e08-95b5-ac369b215d18", "value": "prmieagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:10+00:00", "timestamp": "1776250810", "to_ids": true, "type": "domain", "uuid": "44b0a4c2-e812-409d-a232-2ae54ea0cf37", "value": "proetctagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:10+00:00", "timestamp": "1776250810", "to_ids": true, "type": "domain", "uuid": "92759117-d1c1-4cfe-a3ca-ab24105dff15", "value": "prptoagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:10+00:00", "timestamp": "1776250810", "to_ids": true, "type": "domain", "uuid": "c197b4db-bd6c-4d38-b17c-1d591d9eedee", "value": "pruagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:10+00:00", "timestamp": "1776250810", "to_ids": true, "type": "domain", "uuid": "ddf2da17-96fe-4efc-b55f-fefc137da908", "value": "qantumagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:10+00:00", "timestamp": "1776250810", "to_ids": true, "type": "domain", "uuid": "248a9921-4b02-4f02-b34a-6fd4314194b9", "value": "qeuryagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:10+00:00", "timestamp": "1776250811", "to_ids": true, "type": "domain", "uuid": "495e576f-67df-4aa2-98cd-e0f6d1faf50c", "value": "qusetagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:11+00:00", "timestamp": "1776250811", "to_ids": true, "type": "domain", "uuid": "65ff9082-174d-4760-9073-f3aceede19ac", "value": "raelagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:11+00:00", "timestamp": "1776250811", "to_ids": true, "type": "domain", "uuid": "7f3e49bd-dd63-4305-b8f1-a7fd33aff93f", "value": "roadreadyexperts.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:11+00:00", "timestamp": "1776250811", "to_ids": true, "type": "domain", "uuid": "cd6b8ccc-b583-4b73-b02d-7be9da7768cc", "value": "roteagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:11+00:00", "timestamp": "1776250811", "to_ids": true, "type": "domain", "uuid": "97ac1717-3eef-4495-ba74-e7ff657aa0a0", "value": "ruenagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:11+00:00", "timestamp": "1776250811", "to_ids": true, "type": "domain", "uuid": "5b421056-dd8b-47f4-ac7a-68f08830d37c", "value": "sloidagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:11+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "2c892e21-c0a1-4d1b-82f9-e2f5c42dc379", "value": "smratagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "f5274cbe-9f25-4c37-8a7d-c747717e45ca", "value": "sportylight.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "4891b54a-df98-4054-943b-380d2da9ba9e", "value": "sprieagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "230799d2-3890-45cf-8f4c-403eb5777698", "value": "sreachagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "d76d50d4-e882-4c05-8182-01c8047ab553", "value": "stelaragent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "2a74caf7-c48b-4a29-b221-a1de4c4f54a8", "value": "stremaagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250812", "to_ids": true, "type": "domain", "uuid": "54f230fc-babe-4847-9cc0-6564de35b2b0", "value": "synhtagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:12+00:00", "timestamp": "1776250813", "to_ids": true, "type": "domain", "uuid": "89b25c75-7973-4899-b889-a3ff57653233", "value": "thnikagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:13+00:00", "timestamp": "1776250813", "to_ids": true, "type": "domain", "uuid": "0cb1e214-a2f7-42e9-ab04-76b8745535b1", "value": "towreagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:13+00:00", "timestamp": "1776250813", "to_ids": true, "type": "domain", "uuid": "d4d485b0-9e90-4cfa-aa2b-1afbfda498a3", "value": "truaagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:13+00:00", "timestamp": "1776250813", "to_ids": true, "type": "domain", "uuid": "986144a7-d3a5-4dfd-8723-97762c7a96e1", "value": "twinklyagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:13+00:00", "timestamp": "1776250813", "to_ids": true, "type": "domain", "uuid": "2c03772a-8296-49c1-a019-bf44a3346355", "value": "vexillographers.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:13+00:00", "timestamp": "1776250813", "to_ids": true, "type": "domain", "uuid": "7df95772-ec2e-4957-aad5-d358d68855d0", "value": "virtalagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:13+00:00", "timestamp": "1776250814", "to_ids": true, "type": "domain", "uuid": "e2fb9805-2c1b-4320-a892-05f2788b762a", "value": "visoinagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:14+00:00", "timestamp": "1776250814", "to_ids": true, "type": "domain", "uuid": "2dcba91f-d9be-468d-b1e8-5feffbe58ff0", "value": "vsatagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "osx_atomic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:14+00:00", "timestamp": "1776250814", "to_ids": true, "type": "domain", "uuid": "d780e821-af36-47a2-81fc-ed85d5e1a605", "value": "wihsagent.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:14+00:00", "timestamp": "1776250814", "to_ids": false, "type": "url", "uuid": "b6ee50df-7f98-4c32-915b-bc1837c8b385", "value": "https://api.github.com/repos/stamparm/maltrail/commits/8fedb5c235c68c80885d2a1ce89eb4f4f04a9b0e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:14+00:00", "timestamp": "1776250814", "to_ids": false, "type": "url", "uuid": "38d5a56a-36d9-404a-bb31-bb761ddf0ed6", "value": "https://x.com/smica83/status/2044168017689346291", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:14+00:00", "timestamp": "1776250815", "to_ids": false, "type": "url", "uuid": "cc165367-ebeb-4b72-8707-daddf53c4f8b", "value": "https://tria.ge/260414-1f26csbw7q/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:15+00:00", "timestamp": "1776250815", "to_ids": false, "type": "url", "uuid": "d9f317cd-e304-4d4e-a5dd-bf69469e656a", "value": "https://www.virustotal.com/gui/file/44946dad48f01fbc08571789b5d7c2a151ff0d6e52f43e53f4005fd4fcf8e316/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "offloader", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:15+00:00", "timestamp": "1776250815", "to_ids": true, "type": "ip-dst", "uuid": "01dcd254-32e1-460f-86c9-b8e28707d994", "value": "16.171.9.97", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "mors", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:15+00:00", "timestamp": "1776250815", "to_ids": false, "type": "url", "uuid": "9004361d-62ff-4fcf-ba00-7f28b2833e74", "value": "https://api.github.com/repos/stamparm/maltrail/commits/1c25f8590dac1b77d5221b77b94d22a094f81310", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "mors", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:15+00:00", "timestamp": "1776250815", "to_ids": false, "type": "url", "uuid": "feacadf3-c000-4d40-9bec-aaf471f1dddc", "value": "https://x.com/suyog41/status/2044305430277697957", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "mors", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:15+00:00", "timestamp": "1776250815", "to_ids": false, "type": "url", "uuid": "4bac7864-371a-466c-8c27-348197c202d1", "value": "https://www.virustotal.com/gui/file/a8ea9f15269135edcee3f219b7d6666c537746a9dc79e464e6d8b19b1ec6022c/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "mors", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T11:00:15+00:00", "timestamp": "1776250815", "to_ids": true, "type": "domain", "uuid": "f3fca6c5-8535-4137-a3a4-953c251b1f1c", "value": "your-c2.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:03+00:00", "timestamp": "1776254404", "to_ids": false, "type": "url", "uuid": "dc9b6407-4b46-4f23-a10b-21ca74b3f208", "value": "https://api.github.com/repos/stamparm/maltrail/commits/aae6e25e4b0b8962f7e23af88bc6f4b87fb5f1df", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:04+00:00", "timestamp": "1776254404", "to_ids": false, "type": "url", "uuid": "d17dea7f-ec2e-4812-8f1b-1b218a9fbbe2", "value": "https://www.virustotal.com/gui/ip-address/95.129.236.208/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:04+00:00", "timestamp": "1776254405", "to_ids": true, "type": "ip-dst", "uuid": "34d9cae3-04a1-4bf6-a391-a307f0ac486e", "value": "95.129.236.208", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:05+00:00", "timestamp": "1776254405", "to_ids": true, "type": "domain", "uuid": "4519b7c8-09c1-4db9-9c88-746fd8217ad4", "value": "api.lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:05+00:00", "timestamp": "1776254405", "to_ids": true, "type": "domain", "uuid": "31849cd1-0cd4-4713-a97d-cb90f2fd1300", "value": "beta.lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:05+00:00", "timestamp": "1776254406", "to_ids": true, "type": "domain", "uuid": "9f43c3fd-f0cb-4952-9f92-d12b171acb5e", "value": "cdn.lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:06+00:00", "timestamp": "1776254406", "to_ids": true, "type": "domain", "uuid": "d4d6758f-dbfc-4f90-a3ab-ff71ccab29bb", "value": "ksro.lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:06+00:00", "timestamp": "1776254406", "to_ids": true, "type": "domain", "uuid": "247bf35c-c20d-483a-b6c2-5251770d5d57", "value": "m.lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:06+00:00", "timestamp": "1776254406", "to_ids": true, "type": "domain", "uuid": "200ec079-6f18-4567-bc4c-d67eab87b594", "value": "uwu.lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:06+00:00", "timestamp": "1776254406", "to_ids": false, "type": "url", "uuid": "8725f55f-753d-4b4f-856c-c01b6ace736b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d1d40ae250e7ccaaf9263d0a31dfbd4b493ae8e6", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:06+00:00", "timestamp": "1776254407", "to_ids": false, "type": "url", "uuid": "2f840231-7ed4-4f7b-a1d8-64d274aa0ec1", "value": "https://api.github.com/repos/stamparm/maltrail/commits/95efe0b0b3762b307a04a375a9a7806966acea42", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "0ktapus", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T12:00:07+00:00", "timestamp": "1776254407", "to_ids": true, "type": "domain", "uuid": "5aa1d0db-adf5-4049-8659-58c2673eb4de", "value": "lapsus.by", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:03+00:00", "timestamp": "1776261604", "to_ids": false, "type": "url", "uuid": "bedf16ff-abb2-42c9-be43-55d90f117bff", "value": "https://api.github.com/repos/stamparm/maltrail/commits/daa1931a11336c1ecf350eab2cac29a9be0fa381", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:04+00:00", "timestamp": "1776261604", "to_ids": true, "type": "domain", "uuid": "38081802-9514-4219-8bab-e5101e11e7eb", "value": "rvtoolsaq.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:05+00:00", "timestamp": "1776261605", "to_ids": false, "type": "url", "uuid": "5b23782c-7613-4de4-a7b6-fc7d5797428d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d56ec4af90bf44e0673728a68c591921685f052d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:05+00:00", "timestamp": "1776261605", "to_ids": true, "type": "domain", "uuid": "3d3aeff5-6b77-4d11-a0ea-8be5849e74a3", "value": "devolutions.space", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:05+00:00", "timestamp": "1776261605", "to_ids": true, "type": "domain", "uuid": "01a79d96-ed83-41c7-a70d-ea2efb2ad186", "value": "robwaree.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:05+00:00", "timestamp": "1776261605", "to_ids": true, "type": "domain", "uuid": "80800446-dee2-448d-bc6c-03647cb96a5b", "value": "robwares.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:05+00:00", "timestamp": "1776261605", "to_ids": true, "type": "domain", "uuid": "5b8ce49d-a8b6-47c0-a49e-b74d1779356d", "value": "rv-toolls.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:05+00:00", "timestamp": "1776261605", "to_ids": true, "type": "domain", "uuid": "1ac25ddf-83e9-402b-a353-886375bea974", "value": "rvtoois.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261606", "to_ids": true, "type": "domain", "uuid": "86004041-1e24-4dc9-b517-fd738d8dd9f8", "value": "rvtoolacs.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261606", "to_ids": true, "type": "domain", "uuid": "7e8579ef-9939-4791-add5-b770d98a2ca7", "value": "rvtoolvm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261606", "to_ids": true, "type": "domain", "uuid": "f3af7305-7e31-4429-b5c2-fe3b91b89fbd", "value": "s3bravser.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261606", "to_ids": true, "type": "domain", "uuid": "424839f8-8e2c-470b-9920-9adfdc803f11", "value": "s3brawser.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261606", "to_ids": true, "type": "domain", "uuid": "2a4394d7-8fb2-4f98-9273-b65c46679cb6", "value": "s3brovser.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261606", "to_ids": true, "type": "domain", "uuid": "40770498-07af-42d3-ad37-da03ed188002", "value": "s3brovvser.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:06+00:00", "timestamp": "1776261607", "to_ids": true, "type": "domain", "uuid": "87a0b615-cb2d-46b4-86a8-8edbd6dc3659", "value": "aapanel116864.hostkey.in", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:07+00:00", "timestamp": "1776261607", "to_ids": true, "type": "domain", "uuid": "bf1010ec-9d85-48cf-8189-5ed3754179c5", "value": "fastpanel116864.hostkey.in", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:07+00:00", "timestamp": "1776261607", "to_ids": true, "type": "domain", "uuid": "cdf2276b-0b13-434e-98be-cb0083687e08", "value": "za.rvtoolvm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:07+00:00", "timestamp": "1776261607", "to_ids": false, "type": "url", "uuid": "14f378cf-7823-4710-a19e-61695a4ad6d2", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a9170a71dc9a647d342014cb9107d3e7c8d8150d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:07+00:00", "timestamp": "1776261607", "to_ids": false, "type": "url", "uuid": "77bfb190-e53c-4374-b790-f388c70cc5c6", "value": "https://research.cert.orangecyberdefense.com/smokedham/smoking_out_an_affiliate.pdf", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:07+00:00", "timestamp": "1776261607", "to_ids": true, "type": "domain", "uuid": "348e8a6f-3a2d-4adb-b4db-887845d2be53", "value": "angryipa.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:07+00:00", "timestamp": "1776261608", "to_ids": true, "type": "domain", "uuid": "53caee38-5e26-4fb3-876a-fafd230a047b", "value": "angryipac.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:08+00:00", "timestamp": "1776261608", "to_ids": true, "type": "domain", "uuid": "349c1cb6-a6c8-4c4c-8dec-a0a0f0760440", "value": "angryipac.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:08+00:00", "timestamp": "1776261608", "to_ids": true, "type": "domain", "uuid": "ab1ca7ba-8cbe-43de-9459-2278140b1310", "value": "angryipsc.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:08+00:00", "timestamp": "1776261608", "to_ids": true, "type": "domain", "uuid": "2046e9df-9d4e-4201-8030-acce175d18c5", "value": "dbforges.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:08+00:00", "timestamp": "1776261608", "to_ids": true, "type": "domain", "uuid": "ae1263cd-b391-4e54-98b5-c72771e9bb40", "value": "devartc.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:08+00:00", "timestamp": "1776261608", "to_ids": true, "type": "domain", "uuid": "207ba262-9dff-4aaa-8408-48ca85eddc7e", "value": "devartes.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:08+00:00", "timestamp": "1776261609", "to_ids": true, "type": "domain", "uuid": "22601a6e-a7ae-46a2-b7cc-700116c19a50", "value": "devartos.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:09+00:00", "timestamp": "1776261609", "to_ids": true, "type": "domain", "uuid": "3ba160f2-8e40-41b7-a4d3-7e9dd1c816ef", "value": "devartq.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:09+00:00", "timestamp": "1776261609", "to_ids": true, "type": "domain", "uuid": "269c2b3c-eff5-4625-a1d8-89ce62cfddd5", "value": "devartsi.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:09+00:00", "timestamp": "1776261609", "to_ids": true, "type": "domain", "uuid": "a2142ef5-877b-4f27-ae0f-5a6359aaf96a", "value": "devolutions-rdm.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:09+00:00", "timestamp": "1776261609", "to_ids": true, "type": "domain", "uuid": "b225f6e6-36f2-49d7-b72b-8707bd8c82bc", "value": "elasticsa.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:09+00:00", "timestamp": "1776261609", "to_ids": true, "type": "domain", "uuid": "6be805f9-51c8-43cd-a4fa-c8598fe62141", "value": "elasticse.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:09+00:00", "timestamp": "1776261610", "to_ids": true, "type": "domain", "uuid": "42c92743-4497-4076-bdf8-040629a0c5f1", "value": "elasticso.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:10+00:00", "timestamp": "1776261610", "to_ids": true, "type": "domain", "uuid": "46af56d3-c2f5-44b3-9ce9-a043f0660b49", "value": "eliasic.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:10+00:00", "timestamp": "1776261610", "to_ids": true, "type": "domain", "uuid": "87ca746f-67a5-4f41-8fb2-c1f657526dd2", "value": "emcocoftvare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:10+00:00", "timestamp": "1776261610", "to_ids": true, "type": "domain", "uuid": "1d33d25f-eb17-4808-8c94-66528d53bd62", "value": "emcosoftwr.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:10+00:00", "timestamp": "1776261610", "to_ids": true, "type": "domain", "uuid": "80ffa594-de6e-4f40-bbff-f9c3f7b8d570", "value": "feleasofit.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:10+00:00", "timestamp": "1776261610", "to_ids": true, "type": "domain", "uuid": "072bde75-93fc-499e-81af-8e5499b62339", "value": "feleasot.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:10+00:00", "timestamp": "1776261611", "to_ids": true, "type": "domain", "uuid": "acf17599-ed1e-4833-bea2-ea0e1ca768eb", "value": "felenasofts.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:11+00:00", "timestamp": "1776261611", "to_ids": true, "type": "domain", "uuid": "e020f9be-662a-454a-9ac5-0047cf6dcacc", "value": "felenasoftse.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:11+00:00", "timestamp": "1776261611", "to_ids": true, "type": "domain", "uuid": "be0eb77a-3131-466e-95db-3cbf0368da8e", "value": "ispyconect.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:11+00:00", "timestamp": "1776261611", "to_ids": true, "type": "domain", "uuid": "554bfbbe-4f0a-417e-adeb-19ecd7ffe776", "value": "ivms-4200.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:11+00:00", "timestamp": "1776261611", "to_ids": true, "type": "domain", "uuid": "2584cdad-aac5-4351-a32f-d75fc5ba8b3e", "value": "kibanal.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:11+00:00", "timestamp": "1776261611", "to_ids": true, "type": "domain", "uuid": "a4c3c1a9-8d5b-42d5-9c52-f8c9aa2bf81c", "value": "royaiapps.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:11+00:00", "timestamp": "1776261612", "to_ids": true, "type": "domain", "uuid": "dee9fdb3-f86b-40d3-8165-e0cc85317a8c", "value": "royaiaps.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:12+00:00", "timestamp": "1776261612", "to_ids": true, "type": "domain", "uuid": "a2e360ab-4fdb-4236-b3d7-9b1b02627c60", "value": "rv-tool.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:12+00:00", "timestamp": "1776261612", "to_ids": true, "type": "domain", "uuid": "31c8a483-1ad7-4ed5-8405-b78d8b108e4f", "value": "rv-toolsa.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:12+00:00", "timestamp": "1776261612", "to_ids": true, "type": "domain", "uuid": "6b3e7fc0-02d8-4e0d-9ab8-139f42868763", "value": "rv-toolso.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:12+00:00", "timestamp": "1776261612", "to_ids": true, "type": "domain", "uuid": "f7459d78-f329-40a8-8b0f-99a1e32cdfca", "value": "rvtoo1.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:12+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "4d3b08a2-3efc-467d-8138-18d5164b5059", "value": "rvtoole.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "e1049013-c961-4ef1-8713-fe492008faed", "value": "rvtoolik.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "e671f4d6-7d79-42f3-b8cd-80316c27e150", "value": "rvtoolsme.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "8ba9ef24-8ab7-4f98-ba5e-7a8c70552ef3", "value": "rvtoolsv.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "89bea4c7-8efe-4d0f-9bf9-d2005d96fc9f", "value": "rvtoolsz.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "5fc90301-3514-4371-b8da-3e337d40f918", "value": "rvtoolze.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261613", "to_ids": true, "type": "domain", "uuid": "3c24d700-fc77-4dd0-8549-07a9ff8f3ee4", "value": "spyconect.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:13+00:00", "timestamp": "1776261614", "to_ids": true, "type": "domain", "uuid": "bb4477ca-6740-4113-b267-69b58f861333", "value": "thumaas.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:14+00:00", "timestamp": "1776261614", "to_ids": true, "type": "domain", "uuid": "92531cdc-6c3c-4011-b701-85ff5cfbbcae", "value": "thumaos.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:14+00:00", "timestamp": "1776261614", "to_ids": true, "type": "domain", "uuid": "b417467d-c6f1-4bf5-8785-469af0db1969", "value": "vmback.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:14+00:00", "timestamp": "1776261614", "to_ids": true, "type": "domain", "uuid": "b540d32f-4470-4c1c-8959-ebb948943b13", "value": "vmbacku.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:14+00:00", "timestamp": "1776261614", "to_ids": true, "type": "domain", "uuid": "cf27af06-30f9-491b-9eaa-d77bc8a8d948", "value": "vmbackups.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:14+00:00", "timestamp": "1776261614", "to_ids": true, "type": "domain", "uuid": "fcfa961a-ff11-49ef-9300-4c4db410b219", "value": "vmsbackup.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:15+00:00", "timestamp": "1776261615", "to_ids": true, "type": "domain", "uuid": "4b8358a1-240d-43d4-a7b7-897ab445c94f", "value": "admin.rvtoolacs.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:15+00:00", "timestamp": "1776261615", "to_ids": true, "type": "domain", "uuid": "48b9e015-a440-4415-bade-e7759101c17b", "value": "api.rvtoolacs.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:15+00:00", "timestamp": "1776261615", "to_ids": true, "type": "domain", "uuid": "ee1a399a-9854-4a5d-9c3c-e2e98504f1b3", "value": "dev.rvtoolacs.online", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:15+00:00", "timestamp": "1776261615", "to_ids": false, "type": "url", "uuid": "11be6cd1-8b04-4ec9-8040-59739ecbd659", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f902f89eacb2c0345f5f7a52584b44d7aaf11ce1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:15+00:00", "timestamp": "1776261616", "to_ids": false, "type": "url", "uuid": "160437b0-e1e6-46e0-98ff-9a941e58cbd9", "value": "https://x.com/Fact_Finder03/status/2044382730163802368", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:16+00:00", "timestamp": "1776261616", "to_ids": true, "type": "ip-dst", "uuid": "fbfd5f2e-ae38-4883-955d-59fb75c630ac", "value": "13.127.13.73", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:16+00:00", "timestamp": "1776261616", "to_ids": true, "type": "ip-dst", "uuid": "b079a30a-193e-4ce6-8709-12079b154bd9", "value": "185.228.83.217", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "airbot", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T14:00:16+00:00", "timestamp": "1776261616", "to_ids": true, "type": "ip-dst", "uuid": "5e25e571-7727-42a3-b0aa-931a81718dae", "value": "198.13.159.132", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:06+00:00", "timestamp": "1776265206", "to_ids": false, "type": "url", "uuid": "328d88db-331d-40f7-b65e-d51b3254f2a9", "value": "https://api.github.com/repos/stamparm/maltrail/commits/2cc787ac6a589af54210bead62e07117e77eabc1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:06+00:00", "timestamp": "1776265206", "to_ids": false, "type": "url", "uuid": "99e8db14-27ee-4fbe-a66c-9051d7b596c8", "value": "https://www.virustotal.com/gui/file/507d40eb1542e9c2a763b765a540153cca93e9b86dbbf4004f28939290bb1135/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:06+00:00", "timestamp": "1776265206", "to_ids": false, "type": "url", "uuid": "5d67b0f4-3acb-44da-bf3b-5d0d91efed5e", "value": "https://www.virustotal.com/gui/file/7f9b6612138b7b47598669e6e57b417854d921b1557a4f28139cc948907cace8/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:06+00:00", "timestamp": "1776265207", "to_ids": false, "type": "url", "uuid": "54c403b9-36c3-4092-b7d5-5e846565b6b9", "value": "https://www.virustotal.com/gui/file/9b00ce3b72371c12f93d50eba473241e0a5c8cc1050e3d9ab9fe4ec21e2f5841/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:07+00:00", "timestamp": "1776265207", "to_ids": true, "type": "domain", "uuid": "59839762-79e0-4c05-baa0-bbaf1afe0aff", "value": "fileviewer.blog", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:07+00:00", "timestamp": "1776265207", "to_ids": true, "type": "domain", "uuid": "0c78b1ec-7f19-4639-814e-da81cabbe1e8", "value": "pdfplugout.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "generic", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:07+00:00", "timestamp": "1776265207", "to_ids": true, "type": "domain", "uuid": "2bce49c5-5dc6-4776-b41c-3c3acdbaca98", "value": "editor.fileviewer.blog", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "formbook", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:07+00:00", "timestamp": "1776265207", "to_ids": false, "type": "url", "uuid": "e67534cb-5a30-4edb-9660-8fd7b4de01d4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/0a1b328afeffc033595a1b598b96e9ecafa2227e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "formbook", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:07+00:00", "timestamp": "1776265207", "to_ids": false, "type": "url", "uuid": "7ab67efd-f84a-495a-9dcc-27509b92425a", "value": "https://tria.ge/260407-hhqw1acw8v/behavioral2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "formbook", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:08+00:00", "timestamp": "1776265208", "to_ids": true, "type": "domain", "uuid": "a9ecb4fc-27f3-42d1-9aaa-75dab17652c4", "value": "vagner.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:08+00:00", "timestamp": "1776265208", "to_ids": false, "type": "url", "uuid": "0aaa6d87-6935-4ff4-8e2f-3d9c3c60c569", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a2857d42f1a898620f014ef9d56a5e7b2403993e", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:08+00:00", "timestamp": "1776265208", "to_ids": false, "type": "url", "uuid": "cbf3f9f2-0518-4045-ab19-afd637b8b5fa", "value": "https://x.com/blackbigswan/status/2044403038392098847", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:08+00:00", "timestamp": "1776265208", "to_ids": false, "type": "url", "uuid": "0f5e3d52-3cce-43b8-9c13-65b079542ca4", "value": "https://www.virustotal.com/gui/file/0ab2fe60e6a9c59a3c2a645653883151b80883079d78099179d4a256c10c554b/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:08+00:00", "timestamp": "1776265209", "to_ids": true, "type": "domain", "uuid": "edb89a71-5a95-4797-a60b-24c052443854", "value": "websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:09+00:00", "timestamp": "1776265209", "to_ids": true, "type": "domain", "uuid": "c5434e13-51e2-4489-ada3-f04dd04daf92", "value": "app.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:09+00:00", "timestamp": "1776265209", "to_ids": true, "type": "domain", "uuid": "76de9510-9522-4f3b-90bf-303ab6e92c06", "value": "emails.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:09+00:00", "timestamp": "1776265209", "to_ids": true, "type": "domain", "uuid": "89f58f00-b8b1-4f18-97dc-12001c110777", "value": "inv.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:09+00:00", "timestamp": "1776265209", "to_ids": true, "type": "domain", "uuid": "296759e5-81da-4636-85b7-780213e90650", "value": "maq.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:09+00:00", "timestamp": "1776265209", "to_ids": true, "type": "domain", "uuid": "cd5460b3-f8be-4c51-87ec-008d958a6051", "value": "midia.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:09+00:00", "timestamp": "1776265210", "to_ids": true, "type": "domain", "uuid": "1a3d0f50-4fcc-499a-aa1a-abd627a4ce53", "value": "ooo.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:10+00:00", "timestamp": "1776265210", "to_ids": true, "type": "domain", "uuid": "5ada43f8-a780-4881-a6e3-6dd34ed8259d", "value": "servidor.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:10+00:00", "timestamp": "1776265210", "to_ids": true, "type": "domain", "uuid": "40951fdf-937f-4d32-ba6c-eea3c0cebb69", "value": "valexa.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "vidar", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:10+00:00", "timestamp": "1776265210", "to_ids": true, "type": "domain", "uuid": "fa9d12ff-d008-45f3-b239-6da6a8aa9fbc", "value": "wsp.websitedemos.com.br", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:10+00:00", "timestamp": "1776265211", "to_ids": false, "type": "url", "uuid": "44168b42-4474-4ca6-abd8-3c5d4410204f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/bd3d5d464915f710c113067f1c9208a5186330f2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:11+00:00", "timestamp": "1776265211", "to_ids": true, "type": "domain", "uuid": "1e817b60-c88a-472c-9940-4e01ca63d11d", "value": "ismemcs.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:11+00:00", "timestamp": "1776265211", "to_ids": true, "type": "domain", "uuid": "85ce12c9-92d9-4535-9b96-478ae7259ee9", "value": "moma-cdn.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:11+00:00", "timestamp": "1776265211", "to_ids": true, "type": "domain", "uuid": "19dea8f3-d494-4534-878f-cfae82fba186", "value": "pakistanpower.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:11+00:00", "timestamp": "1776265211", "to_ids": true, "type": "domain", "uuid": "114a7f4b-dff0-463d-8745-4df7fc03d1fb", "value": "pakpower.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:11+00:00", "timestamp": "1776265211", "to_ids": true, "type": "domain", "uuid": "c4da958d-d3d3-4249-97b1-c7caab8e632f", "value": "pakserver.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:11+00:00", "timestamp": "1776265212", "to_ids": true, "type": "domain", "uuid": "5cb5c738-6706-4a56-a647-58b86a0014ac", "value": "pkenergy.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:12+00:00", "timestamp": "1776265212", "to_ids": true, "type": "domain", "uuid": "955ff10e-6f54-42fd-8d58-b96966425e75", "value": "pkfileserver.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:12+00:00", "timestamp": "1776265212", "to_ids": true, "type": "domain", "uuid": "150ec7a6-58a6-44ad-a538-eaeb82d950df", "value": "pkserver.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:12+00:00", "timestamp": "1776265212", "to_ids": true, "type": "domain", "uuid": "b2711969-09db-4e99-9c0f-44e91601ee91", "value": "energy.pakpower.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:12+00:00", "timestamp": "1776265212", "to_ids": false, "type": "url", "uuid": "3346aa32-3c01-491a-9223-fba093182d43", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a292e93764bd7b49891a34332103842e0117209d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:12+00:00", "timestamp": "1776265213", "to_ids": false, "type": "url", "uuid": "a4992f60-682b-4bcf-8186-d7d15c0fbe90", "value": "https://x.com/smica83/status/2044416468469555212", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:13+00:00", "timestamp": "1776265213", "to_ids": false, "type": "url", "uuid": "58f28cbe-4416-49ba-ba5a-28a0467e0b30", "value": "https://tria.ge/260415-rc7r1agt7l/behavioral1", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:13+00:00", "timestamp": "1776265213", "to_ids": false, "type": "url", "uuid": "a11807b0-1ec0-4ade-8ebb-40cad217f201", "value": "https://www.virustotal.com/gui/file/045d995dee9b3fba080415be55c932f245582c44d70243fc3fbf0174fd3495bd/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:13+00:00", "timestamp": "1776265213", "to_ids": true, "type": "domain", "uuid": "7d329918-6da6-4432-ac42-2d004a5ea984", "value": "arrayhouse.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_patchwork", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:13+00:00", "timestamp": "1776265213", "to_ids": true, "type": "domain", "uuid": "9fa5770b-6ff3-4341-80ec-9a953a08376a", "value": "psca-gop.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:13+00:00", "timestamp": "1776265214", "to_ids": false, "type": "url", "uuid": "b90829f4-757b-4ea2-af8d-05384af3a312", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7eadbdf11e881ebcfefbc56e3480147f0eb5ea8d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:14+00:00", "timestamp": "1776265214", "to_ids": true, "type": "domain", "uuid": "1393a6a8-e3fd-4293-a2f9-b073a8148b7a", "value": "supportly.au", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:14+00:00", "timestamp": "1776265214", "to_ids": true, "type": "domain", "uuid": "050d821c-3ae4-4a6c-8d18-0770272b5f8e", "value": "ap7.supportly.au", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:14+00:00", "timestamp": "1776265214", "to_ids": true, "type": "domain", "uuid": "1d40fb31-53c8-4567-8052-af9c28b85526", "value": "clients.supportly.au", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:14+00:00", "timestamp": "1776265214", "to_ids": true, "type": "domain", "uuid": "09244f1b-aa11-4bc6-841c-44aa045841fa", "value": "gy4q.supportly.au", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:15+00:00", "timestamp": "1776265215", "to_ids": true, "type": "domain", "uuid": "775ac013-8e28-4a02-9195-8b0256660353", "value": "s74u.supportly.au", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "ek_clearfake", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:15+00:00", "timestamp": "1776265215", "to_ids": true, "type": "domain", "uuid": "a9440f7a-ba5b-4a70-8d42-578a323f957e", "value": "vag.supportly.au", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:15+00:00", "timestamp": "1776265215", "to_ids": false, "type": "url", "uuid": "494bc2e8-2725-4918-a635-76b180b55b44", "value": "https://api.github.com/repos/stamparm/maltrail/commits/cf27f405e1ccd450ffc7bdb6fa5bc7fb97121ce8", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:15+00:00", "timestamp": "1776265215", "to_ids": false, "type": "url", "uuid": "448c7e94-548c-4e36-8139-a5c345956a14", "value": "https://github.com/cert-orangecyberdefense/cti/blob/main/smokedham/iocs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:15+00:00", "timestamp": "1776265216", "to_ids": true, "type": "domain", "uuid": "ed76c4fa-7e76-485f-9a72-3b19878bdd80", "value": "08f0.proxy-edge-c5f.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:16+00:00", "timestamp": "1776265216", "to_ids": true, "type": "domain", "uuid": "d8ca0ce4-9079-4ca7-82d8-23f01a6ff985", "value": "alert-router-b3a.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:16+00:00", "timestamp": "1776265216", "to_ids": true, "type": "domain", "uuid": "757455ea-956a-4b92-ac03-26e13fc51064", "value": "api-gateway-a3f.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:16+00:00", "timestamp": "1776265216", "to_ids": true, "type": "domain", "uuid": "75a0277c-669a-4952-8083-9b3e37bc2720", "value": "app.sync-engine-d8b.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:16+00:00", "timestamp": "1776265216", "to_ids": true, "type": "domain", "uuid": "ee9ada6e-1bf6-4147-9f90-25e2be294372", "value": "calm-haze-cdae.test-runner-4b7.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:16+00:00", "timestamp": "1776265216", "to_ids": true, "type": "domain", "uuid": "6b9a8b47-b599-4c86-9684-21448b2da72f", "value": "daniel-foster.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:16+00:00", "timestamp": "1776265217", "to_ids": true, "type": "domain", "uuid": "8389d510-e6af-4fea-9dd6-00a492eb3a43", "value": "dark-bar-d282.nina-alvarez.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:17+00:00", "timestamp": "1776265217", "to_ids": true, "type": "domain", "uuid": "63fe8a8c-0d76-4a7b-9d79-6e4aed442fa4", "value": "data-pipeline-9e4.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:17+00:00", "timestamp": "1776265217", "to_ids": true, "type": "domain", "uuid": "9ead3281-a1a4-4860-93a9-65b53277a699", "value": "db-proxy-9b2.daniel-foster.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:17+00:00", "timestamp": "1776265217", "to_ids": true, "type": "domain", "uuid": "cedb7d96-f21d-4af0-a9f3-098e01baece7", "value": "deram71445.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:17+00:00", "timestamp": "1776265217", "to_ids": true, "type": "domain", "uuid": "a9217d79-d87b-4a0e-b324-faeccaf408fd", "value": "dev-web-serv.noroho5002.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:18+00:00", "timestamp": "1776265218", "to_ids": true, "type": "domain", "uuid": "84480902-e8ad-4555-a99e-a0c4d1ca73a1", "value": "dev1-server.sogal69343.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:18+00:00", "timestamp": "1776265218", "to_ids": true, "type": "domain", "uuid": "94802a9b-13c8-421c-bd0a-ad040eb3b6b5", "value": "disk-7133.identity-svc-9mz.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:18+00:00", "timestamp": "1776265218", "to_ids": true, "type": "domain", "uuid": "3191835c-ace9-45ca-bd3e-26cef19de9b6", "value": "divine-glitter-cfb4.elena-morales.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:18+00:00", "timestamp": "1776265218", "to_ids": true, "type": "domain", "uuid": "5914998b-41f1-49e6-81ae-44d44bfa0563", "value": "edge-proxy-7kx.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:18+00:00", "timestamp": "1776265218", "to_ids": true, "type": "domain", "uuid": "d4c73ab1-93be-46be-896f-c63a47d40448", "value": "elena-morales.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:18+00:00", "timestamp": "1776265219", "to_ids": true, "type": "domain", "uuid": "c753080a-8618-4020-a66d-4426c4404fd4", "value": "floral-grass-3c6f.cowivat156.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:19+00:00", "timestamp": "1776265219", "to_ids": true, "type": "domain", "uuid": "39a09263-a94e-4c34-937f-68fc5a2f1209", "value": "identity-svc-9mz.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:19+00:00", "timestamp": "1776265219", "to_ids": true, "type": "domain", "uuid": "afaef0a9-0fbf-4e6d-8664-234b2b9e1f43", "value": "ingress-ctrl-7c9.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:19+00:00", "timestamp": "1776265219", "to_ids": true, "type": "domain", "uuid": "17145355-cb8e-4f5b-9f17-007996b544fe", "value": "kaxij51156.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:19+00:00", "timestamp": "1776265219", "to_ids": true, "type": "domain", "uuid": "b5b7372a-3e68-4243-8ce4-7fb14c749a7f", "value": "kegemom113.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:19+00:00", "timestamp": "1776265219", "to_ids": true, "type": "domain", "uuid": "1711ca50-91ff-436e-a035-020b0d4dc7ba", "value": "little-frog-2e65.kaxij51156.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:19+00:00", "timestamp": "1776265220", "to_ids": true, "type": "domain", "uuid": "3ca2d5c4-5ad7-44f7-8d97-dd7157c92cfb", "value": "lively-37b6.edge-proxy-7kx.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:20+00:00", "timestamp": "1776265220", "to_ids": true, "type": "domain", "uuid": "c08cc7d2-61a8-459b-a2a9-fde117aeb057", "value": "log-ingest-f1d.nina-alvarez.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:20+00:00", "timestamp": "1776265220", "to_ids": true, "type": "domain", "uuid": "9fab9ac4-0e4f-4634-9817-049452a35ba5", "value": "mayisi1259.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:20+00:00", "timestamp": "1776265220", "to_ids": true, "type": "domain", "uuid": "d3c2af8e-76f9-4fd6-87e3-4eb31758a08d", "value": "mud.alert-router-b3a.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:20+00:00", "timestamp": "1776265220", "to_ids": true, "type": "domain", "uuid": "9e178024-6c8e-4e9a-a739-09fa294d8340", "value": "nina-alvarez.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:20+00:00", "timestamp": "1776265220", "to_ids": true, "type": "domain", "uuid": "dcd624e5-c49f-4c20-88c8-f5559e5eb651", "value": "noroho5002.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:21+00:00", "timestamp": "1776265221", "to_ids": true, "type": "domain", "uuid": "f1dfc630-3d4c-4d4b-9a6a-5c42aeab9446", "value": "proxy-edge-c5f.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:21+00:00", "timestamp": "1776265221", "to_ids": true, "type": "domain", "uuid": "b7c8ad7f-783c-4df8-852c-e1609df09e4c", "value": "rapid.data-pipeline-9e4.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:21+00:00", "timestamp": "1776265221", "to_ids": true, "type": "domain", "uuid": "44588887-99e4-4d86-aa7f-ab0c249ae26f", "value": "rem-cdn-server.mayisi1259.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:21+00:00", "timestamp": "1776265221", "to_ids": true, "type": "domain", "uuid": "19b22890-5852-4f45-a7ad-c038b202e8c3", "value": "scan-engine-a2d.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:21+00:00", "timestamp": "1776265221", "to_ids": true, "type": "domain", "uuid": "a2aee4cd-f00b-491c-b06f-9dcb52f03d9d", "value": "server-web-cdn.kegemom113.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:21+00:00", "timestamp": "1776265222", "to_ids": true, "type": "domain", "uuid": "5bc23311-6c31-4c01-be26-6ac346456978", "value": "sogal69343.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:22+00:00", "timestamp": "1776265222", "to_ids": true, "type": "domain", "uuid": "f5340024-e75a-4883-8751-a19be769062e", "value": "square-wave-65dd.api-gateway-a3f.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:22+00:00", "timestamp": "1776265222", "to_ids": true, "type": "domain", "uuid": "3f8ccfa2-4fbc-4969-bfbd-a00b1d23afe1", "value": "sunset.vault-proxy-5d3.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:22+00:00", "timestamp": "1776265222", "to_ids": true, "type": "domain", "uuid": "1b4044d4-444b-447d-82b7-8f112f291a58", "value": "sync-engine-d8b.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:22+00:00", "timestamp": "1776265222", "to_ids": true, "type": "domain", "uuid": "44cf3c66-e165-49c9-8f5f-02ce2c7afe47", "value": "test-runner-4b7.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:22+00:00", "timestamp": "1776265223", "to_ids": true, "type": "domain", "uuid": "62b72ce3-81aa-4c40-bdb0-4cb7f9be85e8", "value": "vault-proxy-5d3.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:23+00:00", "timestamp": "1776265223", "to_ids": true, "type": "domain", "uuid": "433388e2-2639-44ec-a54d-b063dbca97d7", "value": "webapp.ingress-ctrl-7c9.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:23+00:00", "timestamp": "1776265223", "to_ids": true, "type": "domain", "uuid": "676cb6cd-f1e2-4425-80b7-42fbb6404355", "value": "webapp.scan-engine-a2d.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T15:00:23+00:00", "timestamp": "1776265223", "to_ids": true, "type": "domain", "uuid": "7e92dd02-d2be-43d7-a5e2-d59e48c76c4c", "value": "young-tooth-5980.deram71445.workers.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:05+00:00", "timestamp": "1776268805", "to_ids": false, "type": "url", "uuid": "2c67a456-e1ac-4b79-9c75-aceee63d4e65", "value": "https://api.github.com/repos/stamparm/maltrail/commits/b09a997af2879133dab4afda6609930597cdb6cd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:05+00:00", "timestamp": "1776268806", "to_ids": false, "type": "url", "uuid": "882ff0cf-53fd-4ce1-8563-d7a59683a0b8", "value": "https://www.virustotal.com/gui/file/c50bd9865ed65a9c298768f245d8eaff1baa410735ff5673a73d1411c425b7c6/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:06+00:00", "timestamp": "1776268806", "to_ids": false, "type": "url", "uuid": "6fb3c1fa-077c-48de-bd83-48cb6f1bc2af", "value": "https://blog.netlab.360.com/ssh_stealer_facefish_en", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:06+00:00", "timestamp": "1776268806", "to_ids": false, "type": "url", "uuid": "5316f3fe-fe5c-4864-9575-43c238e911b2", "value": "https://otx.alienvault.com/pulse/60b0b9c71621a0149fd3bc07", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:06+00:00", "timestamp": "1776268806", "to_ids": false, "type": "url", "uuid": "c504c977-85c7-45a8-964d-e3ce2ffcee93", "value": "https://www.virustotal.com/gui/file/c787e57a8077f0df838ae416cbf6dd38ecc670e532c3369bff2ef571cd94d36e/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:06+00:00", "timestamp": "1776268806", "to_ids": false, "type": "url", "uuid": "a21718c5-7042-4b7e-8146-74df2b6c895e", "value": "https://www.virustotal.com/gui/file/ab9cc4ee82aa6f57ba2a113aab905c33e278c969399db4188d0ea5942ad3bb7d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:06+00:00", "timestamp": "1776268806", "to_ids": false, "type": "url", "uuid": "ae68c9eb-236e-49a9-8ec8-d8926fd49b14", "value": "https://x.com/malwrhunterteam/status/1819483285330055491", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:07+00:00", "timestamp": "1776268807", "to_ids": false, "type": "url", "uuid": "4f5a9a30-0f46-422c-bdb0-fff99a833510", "value": "https://www.virustotal.com/gui/file/38720d0fd54cdb0e1224b5df4ea052f1303a1b0f17d971e1737f8acd8f6a2ae5/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:07+00:00", "timestamp": "1776268807", "to_ids": true, "type": "ip-dst", "uuid": "8570c73b-363c-43da-a373-00ee5b71d750", "value": "176.111.174.26", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:07+00:00", "timestamp": "1776268807", "to_ids": true, "type": "ip-dst", "uuid": "5760e9e6-61d0-4270-a427-fb883dd8e121", "value": "91.92.250.69", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:07+00:00", "timestamp": "1776268807", "to_ids": true, "type": "domain", "uuid": "c8fa88a5-da4b-4487-b2cf-1dc68c891ffe", "value": "humsters-db-dc001.ru", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:07+00:00", "timestamp": "1776268808", "to_ids": false, "type": "url", "uuid": "5e4c21f1-f6b7-48fe-96a7-e443136e8fc8", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d9fc2f94c0a59d9b7e7a3adbdef8e1aa5b54e0f2", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:08+00:00", "timestamp": "1776268808", "to_ids": false, "type": "url", "uuid": "7d3d0780-9371-4e73-b531-5136ef28285f", "value": "https://x.com/malwrhunterteam/status/2044397336231624992", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:08+00:00", "timestamp": "1776268808", "to_ids": false, "type": "url", "uuid": "c3982fd5-507e-4a2f-b624-67bf2b53e323", "value": "https://x.com/smica83/status/2044398324132774027", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:08+00:00", "timestamp": "1776268808", "to_ids": false, "type": "url", "uuid": "9e4572d2-12aa-4130-afc4-99bd92f2ab77", "value": "https://www.virustotal.com/gui/file/9b6140ae326a631302c76e07fca48dec99a8de4fa6a4b6b5fbfc55c20f74d44d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:08+00:00", "timestamp": "1776268808", "to_ids": false, "type": "url", "uuid": "06f20358-9a27-41ee-9d9f-300391314fc8", "value": "https://www.virustotal.com/gui/file/c627a70688b0f6e7c9951a9777c67f31a391f245c60bc7bfcbf0fbad963af63d/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "gored", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:08+00:00", "timestamp": "1776268808", "to_ids": true, "type": "domain", "uuid": "d1450d9c-310d-4231-8526-c82832783360", "value": "kernelupdate.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "elf_facefish", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:08+00:00", "timestamp": "1776268809", "to_ids": false, "type": "url", "uuid": "4b63d400-aee0-4206-a941-38815bbda759", "value": "https://api.github.com/repos/stamparm/maltrail/commits/be3415c36937014f1b85a0892f3657a928b3a031", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:09+00:00", "timestamp": "1776268810", "to_ids": false, "type": "url", "uuid": "fb168c12-3a02-4161-aaad-10fa23e2eb0f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/f1993760d3532766a0c12f9d9fec3749464b020f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268810", "to_ids": true, "type": "domain", "uuid": "c7140cca-468d-4685-b0fa-8ee306fd888d", "value": "diskqenios.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268810", "to_ids": true, "type": "domain", "uuid": "79175aa7-127f-42c8-bbe9-dbe2fa3ce89d", "value": "cdn-ae.azureedge.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268810", "to_ids": false, "type": "url", "uuid": "a0bc2ef2-0966-4a13-9b1d-a8a34afc8142", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3cac953eddf453365ffe508d60c6a1accf5f5073", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268810", "to_ids": true, "type": "domain", "uuid": "72106843-9663-4bad-a859-fa2b37133107", "value": "server-software.azureedge.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_unc2465", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268810", "to_ids": true, "type": "domain", "uuid": "3f787639-ab0a-4524-9103-e525da1622c3", "value": "server-software-cdn.azureedge.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268810", "to_ids": false, "type": "url", "uuid": "64e03ba3-8dbe-4b11-8ea8-08e05bde3694", "value": "https://api.github.com/repos/stamparm/maltrail/commits/5fff2445c24677c5540ded186dee686513975eee", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:10+00:00", "timestamp": "1776268811", "to_ids": false, "type": "url", "uuid": "e51b2cbd-8628-4319-b2aa-938e2c7ca22c", "value": "https://x.com/smica83/status/2044417422606655769", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:11+00:00", "timestamp": "1776268811", "to_ids": false, "type": "url", "uuid": "e1066823-6c4d-492e-9673-6b1ab3c4901f", "value": "https://www.virustotal.com/gui/file/6fd40f0aba5c6bd9dd784abd8f5c0ede41e81e7cc4c0a9c614bd2aa32f449f89/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_bitter", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T16:00:11+00:00", "timestamp": "1776268811", "to_ids": true, "type": "domain", "uuid": "10b802bf-f921-4652-b613-2b376979be40", "value": "invstampvest.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:05+00:00", "timestamp": "1776279605", "to_ids": false, "type": "url", "uuid": "e9871766-a5dd-4715-a1f3-f9b2aad8f579", "value": "https://api.github.com/repos/stamparm/maltrail/commits/2a60368a43a735ee8348908d665068907a125199", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:05+00:00", "timestamp": "1776279606", "to_ids": true, "type": "domain", "uuid": "5e5589bb-c931-4d44-be7d-13382c21a656", "value": "phantomgate.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bad_service", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:06+00:00", "timestamp": "1776279606", "to_ids": false, "type": "url", "uuid": "3a2704e6-8dbd-4bc0-9abe-379e8f1d7163", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d76fd7014297363ec6b2e6684db85a86ac181a57", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "bad_service", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:06+00:00", "timestamp": "1776279606", "to_ids": false, "type": "url", "uuid": "05aac7bd-48bc-42b8-980d-87fbdb6f690d", "value": "https://www.virustotal.com/gui/ip-address/72.61.216.73/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "bad_service", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:06+00:00", "timestamp": "1776279606", "to_ids": true, "type": "domain", "uuid": "2dcc08c2-de8e-4d7e-9e01-a48ff9a1605f", "value": "phantomstresser.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:06+00:00", "timestamp": "1776279606", "to_ids": false, "type": "url", "uuid": "868b858f-1d70-4110-9972-3aa143c061c8", "value": "https://api.github.com/repos/stamparm/maltrail/commits/be25a04950669a653cc67fb93d4a0af99a21085f", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:06+00:00", "timestamp": "1776279607", "to_ids": false, "type": "url", "uuid": "69eac33a-20ed-4627-90f4-805946f04bbb", "value": "https://www.virustotal.com/gui/ip-address/144.31.207.167/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:07+00:00", "timestamp": "1776279607", "to_ids": true, "type": "domain", "uuid": "76a93f2d-c175-4553-b85e-c18b4c49acac", "value": "osdoooodkk231.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:07+00:00", "timestamp": "1776279607", "to_ids": false, "type": "url", "uuid": "429fac8a-fcba-426c-a279-4d7cbee6e35c", "value": "https://api.github.com/repos/stamparm/maltrail/commits/a1f98790ad785a0e0dba95578c80d48e2bc5cd8b", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:07+00:00", "timestamp": "1776279607", "to_ids": false, "type": "url", "uuid": "5cf222de-36f2-41cf-a56f-8588dab5fa13", "value": "https://x.com/elasticseclabs/status/2043738795057521004", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:07+00:00", "timestamp": "1776279607", "to_ids": false, "type": "url", "uuid": "ef2643aa-4ade-4bf4-8aa2-c15c697d6419", "value": "https://x.com/bluish_red_/status/2044065910357467587", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:07+00:00", "timestamp": "1776279607", "to_ids": false, "type": "url", "uuid": "ec908905-4792-4833-8b73-9f9c9df2a210", "value": "https://www.elastic.co/security-labs/phantom-in-the-vault?utm_source=organic-social", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:08+00:00", "timestamp": "1776279608", "to_ids": false, "type": "url", "uuid": "8c60c72d-2056-4fc9-83cc-553e8c72ec0f", "value": "https://www.virustotal.com/gui/file/def66275fa3baffb16e6e4ae0297861d9790ae7161fbc271a2ba05d121f13c70/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:08+00:00", "timestamp": "1776279608", "to_ids": true, "type": "domain", "uuid": "a8b99256-a6ef-4152-a34a-c320bd48697f", "value": "0x666.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:08+00:00", "timestamp": "1776279608", "to_ids": true, "type": "domain", "uuid": "007fe0a3-4797-4c03-b725-14c61c3fcf7a", "value": "fefea22134.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:08+00:00", "timestamp": "1776279608", "to_ids": true, "type": "domain", "uuid": "be243999-07a6-4c5d-b860-bab796e69590", "value": "gfsdjjg33jfk.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:08+00:00", "timestamp": "1776279608", "to_ids": true, "type": "domain", "uuid": "28f5503e-821e-449e-bb81-f58129b33910", "value": "panel.fefea22134.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "phantompulserat", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:09+00:00", "timestamp": "1776279609", "to_ids": true, "type": "domain", "uuid": "9d502b2a-6d60-49a0-9feb-cb3f905c7146", "value": "thoroughly-publisher-troy-clara.trycloudflare.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:09+00:00", "timestamp": "1776279609", "to_ids": false, "type": "url", "uuid": "07c89ea3-859a-41dc-ab92-62e3fd58e6db", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d336a057ce3146a13f12911e66510151a1e4fa97", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:09+00:00", "timestamp": "1776279609", "to_ids": false, "type": "url", "uuid": "69eeaf6e-aae6-4a0c-9a67-a636806719c1", "value": "https://x.com/Fact_Finder03/status/2044480624761745866", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:09+00:00", "timestamp": "1776279609", "to_ids": true, "type": "ip-dst", "uuid": "020c28c2-c05f-4d4c-83c9-5e847239f0b9", "value": "157.230.46.114", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:10+00:00", "timestamp": "1776279610", "to_ids": false, "type": "url", "uuid": "04dc3c81-a181-4b41-a39b-27ff776405e4", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d9965cbe00ffaf00ea063b8848eae02c711a5dd0", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:10+00:00", "timestamp": "1776279610", "to_ids": false, "type": "url", "uuid": "0e5deb86-c070-4148-ba36-9e39e7f60838", "value": "https://x.com/smica83/status/2044135255955710208", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "c2_panel", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:10+00:00", "timestamp": "1776279610", "to_ids": true, "type": "ip-dst", "uuid": "8aecc0e5-1742-4b33-bdf8-1e84e0e14c44", "value": "45.138.16.64", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:10+00:00", "timestamp": "1776279610", "to_ids": false, "type": "url", "uuid": "469cc043-cd82-44f7-9f22-4ad8b3f8d7b5", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3aae54cd88f5aea74b6b504c04c44f54b07141ab", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:10+00:00", "timestamp": "1776279611", "to_ids": false, "type": "url", "uuid": "321c7fc5-ce53-40e7-b7bf-301140b40374", "value": "https://www.virustotal.com/gui/file/ee3d776cdaf82335e4293e19ee313cc35eee49cde9963b96766a8f9c89d44a79/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "powershell_injector", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T19:00:11+00:00", "timestamp": "1776279611", "to_ids": true, "type": "domain", "uuid": "9b1b3849-3499-4fec-8b7a-e67cf4eabdca", "value": "legitserver.theworkpc.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "konni", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:03+00:00", "timestamp": "1776283203", "to_ids": false, "type": "url", "uuid": "0b5b3e78-e244-4afc-81cd-910aa4f34a66", "value": "https://api.github.com/repos/stamparm/maltrail/commits/7e8a8a4a56a8d06f5953ac59d8c3de893b9455f3", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "konni", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:03+00:00", "timestamp": "1776283203", "to_ids": false, "type": "url", "uuid": "839aa196-143f-48cf-8dd7-98769e1fc27a", "value": "https://x.com/byrne_emmy12099/status/2043973334929682715", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "konni", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:03+00:00", "timestamp": "1776283204", "to_ids": false, "type": "url", "uuid": "66794711-e4f6-42c5-9a34-4fcaae46e676", "value": "https://www.virustotal.com/gui/file/85b7b6c02fb7bf8c6446f702640949c66bc8d7c98057b83ee04e542dfe9a56d6/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "konni", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:04+00:00", "timestamp": "1776283205", "to_ids": true, "type": "domain", "uuid": "4b54194a-bd4c-4b4a-a9fe-6b19963b3939", "value": "dpaper.dothome.co.kr", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:05+00:00", "timestamp": "1776283205", "to_ids": false, "type": "url", "uuid": "9a21f6d8-5d8a-4f75-8533-e26fbd39f20d", "value": "https://api.github.com/repos/stamparm/maltrail/commits/c9ff7eafe1df1ad1734d7993e1c4155a4ad84285", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:05+00:00", "timestamp": "1776283206", "to_ids": false, "type": "url", "uuid": "7b79d9f6-6c74-494b-bd61-d2906d0238b4", "value": "https://x.com/abh1sek/status/2044260573324685605", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:06+00:00", "timestamp": "1776283206", "to_ids": false, "type": "url", "uuid": "14d4744f-a48c-4dce-a8b1-c9dccf7667b7", "value": "https://www.virustotal.com/gui/ip-address/195.201.194.107/relations", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:06+00:00", "timestamp": "1776283206", "to_ids": false, "type": "url", "uuid": "a68492f7-bb56-46b6-bf44-3dd5f56a8460", "value": "https://www.virustotal.com/gui/file/96f79c766d045e4c0733eda16fc9c5fd3a9ac567e0c5d61c4976de874c20ee30/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:06+00:00", "timestamp": "1776283206", "to_ids": false, "type": "url", "uuid": "9808b042-b279-42c9-98a4-26cfe32b68f8", "value": "https://www.virustotal.com/gui/file/aef28d1fb239269b74b85903ddeb62feb75e3dd2f037b6a72ad57e0d065c8a31/detection", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:06+00:00", "timestamp": "1776283206", "to_ids": true, "type": "ip-dst", "uuid": "b280a1f1-b095-406f-9d72-d79a96e8a15f", "value": "195.201.194.107", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:06+00:00", "timestamp": "1776283206", "to_ids": true, "type": "domain", "uuid": "06c27a24-66a4-4cdd-882d-e280a7c8f3bb", "value": "jrodacooker.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:06+00:00", "timestamp": "1776283207", "to_ids": true, "type": "domain", "uuid": "67868080-149a-47d9-b50c-bb9b76a42883", "value": "pricesheet.ink", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:07+00:00", "timestamp": "1776283207", "to_ids": true, "type": "domain", "uuid": "d2d3a414-17f8-4732-99df-84a35b461be4", "value": "whisdev.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:07+00:00", "timestamp": "1776283207", "to_ids": true, "type": "domain", "uuid": "9b906d9c-9def-47c3-abbf-348a0b743738", "value": "api-sub.jrodacooker.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:07+00:00", "timestamp": "1776283207", "to_ids": true, "type": "domain", "uuid": "3f3c1315-caee-49c7-9c73-dd10c127ad4f", "value": "copilot-ai.whisdev.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hacked_npmrepos", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T20:00:07+00:00", "timestamp": "1776283207", "to_ids": true, "type": "domain", "uuid": "10a0b62e-42b7-40a1-8ce5-d5c47a6d1f45", "value": "log.pricesheet.ink", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:03+00:00", "timestamp": "1776286804", "to_ids": false, "type": "url", "uuid": "f1de1ab3-4fea-4f4d-a7e0-e367d85fbf1b", "value": "https://api.github.com/repos/stamparm/maltrail/commits/3f0a6764b3c6888c9fb76f4373be742bf4a9707d", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:04+00:00", "timestamp": "1776286804", "to_ids": true, "type": "domain", "uuid": "e83c2ed9-6bc6-44c0-acc8-0ef9e19b1854", "value": "313uploadsds.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:04+00:00", "timestamp": "1776286804", "to_ids": true, "type": "domain", "uuid": "fd26f58e-f06c-4c14-8d7d-81ccff863a4e", "value": "43000filesl.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:05+00:00", "timestamp": "1776286805", "to_ids": true, "type": "domain", "uuid": "2b5d405e-9010-4437-929e-6a801bd02d92", "value": "90033diskup.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:05+00:00", "timestamp": "1776286805", "to_ids": true, "type": "domain", "uuid": "0e20d304-c689-4eef-938c-ac87d8319d67", "value": "adfetshex.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:05+00:00", "timestamp": "1776286805", "to_ids": true, "type": "domain", "uuid": "31f2876c-2198-4010-84e9-921ce99cad2d", "value": "ajmad678ali21.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:05+00:00", "timestamp": "1776286805", "to_ids": true, "type": "domain", "uuid": "d7c4b515-29a3-45c1-9897-a8a3948e69bf", "value": "almaralo.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:05+00:00", "timestamp": "1776286806", "to_ids": true, "type": "domain", "uuid": "766d7ba8-3af7-4bb6-94d7-9bc6dcfdcbc0", "value": "andersonealiy.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:06+00:00", "timestamp": "1776286806", "to_ids": true, "type": "domain", "uuid": "fb907bc4-b043-4450-b704-3d3fcf86c4d9", "value": "asmasoftsdw.link", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:06+00:00", "timestamp": "1776286806", "to_ids": true, "type": "domain", "uuid": "fe9c4efa-b242-453a-8203-7d19a32e3daa", "value": "asssiaa.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:06+00:00", "timestamp": "1776286806", "to_ids": true, "type": "domain", "uuid": "b21491d8-fe72-4fb9-9761-f59413a95212", "value": "avvbtrre.autos", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:06+00:00", "timestamp": "1776286806", "to_ids": true, "type": "domain", "uuid": "32956f7e-98b5-414b-a508-e68e52ca3b69", "value": "baal234hain.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:06+00:00", "timestamp": "1776286806", "to_ids": true, "type": "domain", "uuid": "b07e8521-bb74-4e42-b22f-8b46abe4662a", "value": "baazzfgts.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:07+00:00", "timestamp": "1776286807", "to_ids": true, "type": "domain", "uuid": "cfcfb60e-42b5-411f-bb64-309279e81c60", "value": "bathuuub.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:07+00:00", "timestamp": "1776286807", "to_ids": true, "type": "domain", "uuid": "d5fa923c-83fb-4491-bd53-d679cf3f13f1", "value": "bdhujnmkp.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:07+00:00", "timestamp": "1776286807", "to_ids": true, "type": "domain", "uuid": "310f4e93-b96a-479c-a4cb-756fdc1d47ba", "value": "bgfcvxdyh.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:07+00:00", "timestamp": "1776286807", "to_ids": true, "type": "domain", "uuid": "af073280-849d-4415-aea8-7d8a3a0d3dd6", "value": "bgujkom.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:07+00:00", "timestamp": "1776286807", "to_ids": true, "type": "domain", "uuid": "e89f22a7-416e-48d7-ade6-7f8f2dfea2e1", "value": "bhftcde.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:07+00:00", "timestamp": "1776286808", "to_ids": true, "type": "domain", "uuid": "b82a640b-41a4-4e00-bedb-264b401b66d3", "value": "bhjnkiplc.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:08+00:00", "timestamp": "1776286808", "to_ids": true, "type": "domain", "uuid": "631ca795-d73a-4f0e-9225-8b697c5f3735", "value": "bphighcontrol.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:08+00:00", "timestamp": "1776286808", "to_ids": true, "type": "domain", "uuid": "b06ae523-3069-48b9-9024-95325d21ff70", "value": "bsniues.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:08+00:00", "timestamp": "1776286808", "to_ids": true, "type": "domain", "uuid": "68d3bdd0-0f78-4a42-8b6a-423d9548cc7a", "value": "cdertf.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:08+00:00", "timestamp": "1776286808", "to_ids": true, "type": "domain", "uuid": "213dbec2-d318-43cf-aef1-1400480c279d", "value": "cdfgters.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:08+00:00", "timestamp": "1776286809", "to_ids": true, "type": "domain", "uuid": "5d05d32e-0e71-4cc2-9b07-2d48b3a1be95", "value": "cetypua2bh.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:09+00:00", "timestamp": "1776286809", "to_ids": true, "type": "domain", "uuid": "8d010120-0f78-42fe-bcb1-20e6c9d901ee", "value": "chalyarchor.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:09+00:00", "timestamp": "1776286809", "to_ids": true, "type": "domain", "uuid": "b6b10867-a32c-4a0e-9b52-dba869cf7560", "value": "cloudgetpczone.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:09+00:00", "timestamp": "1776286809", "to_ids": true, "type": "domain", "uuid": "e01329dd-8cd7-48ef-8a3d-c34195560861", "value": "cloudmacosx.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:09+00:00", "timestamp": "1776286809", "to_ids": true, "type": "domain", "uuid": "53302d5e-ea0a-4cfe-a05e-4a68368337b7", "value": "cloudsecuresx.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:09+00:00", "timestamp": "1776286809", "to_ids": true, "type": "domain", "uuid": "23b7f76a-e215-4783-aa09-e40dd94a8526", "value": "cryptiva.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:09+00:00", "timestamp": "1776286810", "to_ids": true, "type": "domain", "uuid": "51f95420-7e80-4c03-af36-cff24a89354a", "value": "cuplodwazxvd.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:10+00:00", "timestamp": "1776286810", "to_ids": true, "type": "domain", "uuid": "4406bb9f-bf71-4456-9aec-1cbc0578acfb", "value": "davidfiles.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:10+00:00", "timestamp": "1776286810", "to_ids": true, "type": "domain", "uuid": "40e7c98f-e51b-4353-a4f9-7e84ad410805", "value": "ddfafxfs.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:10+00:00", "timestamp": "1776286810", "to_ids": true, "type": "domain", "uuid": "7ee89aa2-3506-4cb2-859e-ec661161dcc6", "value": "dfgthyui.cyou", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:10+00:00", "timestamp": "1776286810", "to_ids": true, "type": "domain", "uuid": "cc0010e3-540a-403f-a9d1-07d116a05d4a", "value": "dgfcchytgn.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:10+00:00", "timestamp": "1776286811", "to_ids": true, "type": "domain", "uuid": "2a00ce84-8d7d-498c-9aa2-6b1a02ee92b0", "value": "dgfiles.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:11+00:00", "timestamp": "1776286811", "to_ids": true, "type": "domain", "uuid": "cc534a52-9840-4b06-b8dc-239d00b9f970", "value": "dgtyhvero.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:11+00:00", "timestamp": "1776286811", "to_ids": true, "type": "domain", "uuid": "1e81d067-b8be-4b89-9691-acf7e9d1b2a1", "value": "digtretctgmdia.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:11+00:00", "timestamp": "1776286811", "to_ids": true, "type": "domain", "uuid": "77f68e98-d054-4216-9412-06cecbe01213", "value": "dmnyut.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:11+00:00", "timestamp": "1776286811", "to_ids": true, "type": "domain", "uuid": "7b57d216-a961-4717-a0e3-2369de9d7010", "value": "dogfeedsneed.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:11+00:00", "timestamp": "1776286811", "to_ids": true, "type": "domain", "uuid": "2b9bb1f9-3c68-4fdc-8e5e-eab74ddbda21", "value": "dogiloglo.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:12+00:00", "timestamp": "1776286812", "to_ids": true, "type": "domain", "uuid": "84b2139d-93d5-4fd6-a0c9-d6d62888826d", "value": "dogscllctrdasx.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:12+00:00", "timestamp": "1776286812", "to_ids": true, "type": "domain", "uuid": "3f7fbeb9-88ff-46b8-92b1-60e443a1724d", "value": "dogsmacsset.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:12+00:00", "timestamp": "1776286812", "to_ids": true, "type": "domain", "uuid": "68ffb308-fc78-405b-a62d-00b4524c99c6", "value": "download5get.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:12+00:00", "timestamp": "1776286812", "to_ids": true, "type": "domain", "uuid": "82a76ca7-5e79-42b6-9076-416dfb4bc65d", "value": "downloadcloud.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:12+00:00", "timestamp": "1776286812", "to_ids": true, "type": "domain", "uuid": "105a0d0f-0195-4a9d-b36c-8b20898eb192", "value": "downloadcloud.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:12+00:00", "timestamp": "1776286813", "to_ids": true, "type": "domain", "uuid": "fe11c392-144d-48b6-902b-0adba57eaadc", "value": "downloadpcgamesfiles.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:13+00:00", "timestamp": "1776286813", "to_ids": true, "type": "domain", "uuid": "d89027ea-b980-42ff-a2f2-42d79e8c98b5", "value": "downloadsecures.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:13+00:00", "timestamp": "1776286813", "to_ids": true, "type": "domain", "uuid": "dc921703-bc31-4ee5-8193-c3e7cd24fb77", "value": "downlodsafesstf.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:13+00:00", "timestamp": "1776286813", "to_ids": true, "type": "domain", "uuid": "f3fbaf5e-1419-47f8-abeb-eb1b5e3caa3e", "value": "drpure.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:13+00:00", "timestamp": "1776286813", "to_ids": true, "type": "domain", "uuid": "9c7258a2-8da2-441c-ad64-0d5de62f4bd6", "value": "dsfaf.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:13+00:00", "timestamp": "1776286814", "to_ids": true, "type": "domain", "uuid": "311f920f-6766-412c-9ed5-2712f8a7a215", "value": "dssdes.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:14+00:00", "timestamp": "1776286814", "to_ids": true, "type": "domain", "uuid": "fffc794e-96cd-413b-8730-1ad22d167e04", "value": "ducklofiles.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:14+00:00", "timestamp": "1776286814", "to_ids": true, "type": "domain", "uuid": "c4235af2-0891-40b3-825d-15be5326b28f", "value": "dwnhyfdtc.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:14+00:00", "timestamp": "1776286814", "to_ids": true, "type": "domain", "uuid": "4f34f73f-d147-4dc0-b1a7-8ed33982f0cf", "value": "dwnloadbbtin.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:14+00:00", "timestamp": "1776286814", "to_ids": true, "type": "domain", "uuid": "72b5d289-32d3-43c0-8643-44913aac822b", "value": "dwnloadcsdw.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:14+00:00", "timestamp": "1776286814", "to_ids": true, "type": "domain", "uuid": "4d45a534-d73e-4b70-b525-44d30903db24", "value": "dwnloadsmcss.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:14+00:00", "timestamp": "1776286815", "to_ids": true, "type": "domain", "uuid": "c651b4ad-7eef-4801-9043-94ceac53429e", "value": "dwnmloadmrdssn.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:15+00:00", "timestamp": "1776286815", "to_ids": true, "type": "domain", "uuid": "56eba039-a02c-4e69-bebf-09003d74ac2d", "value": "egfdbhy.one", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:15+00:00", "timestamp": "1776286815", "to_ids": true, "type": "domain", "uuid": "aa9d3e3c-1d93-459f-94e3-377af01010f5", "value": "erderqwa.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:15+00:00", "timestamp": "1776286815", "to_ids": true, "type": "domain", "uuid": "5cab59c3-67ed-41a6-8334-04922c6b2508", "value": "ertdfe.app", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:15+00:00", "timestamp": "1776286815", "to_ids": true, "type": "domain", "uuid": "79f118be-8241-43dd-875a-619c40898162", "value": "feesoftwares.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:15+00:00", "timestamp": "1776286816", "to_ids": true, "type": "domain", "uuid": "8c08eba9-8fa7-4074-9518-ef8a5c3ef910", "value": "fgbxdrpk.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:16+00:00", "timestamp": "1776286816", "to_ids": true, "type": "domain", "uuid": "ee81aafb-aaa2-469a-b575-5f2c1bd57589", "value": "fgvbjuio.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:16+00:00", "timestamp": "1776286816", "to_ids": true, "type": "domain", "uuid": "1b9c08dc-c0dc-47ae-b9b0-269e8f503375", "value": "file667554host76m.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:16+00:00", "timestamp": "1776286816", "to_ids": true, "type": "domain", "uuid": "849f2a14-1b54-4c16-8dbf-21f0bcc96abb", "value": "filehost76a.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:16+00:00", "timestamp": "1776286816", "to_ids": true, "type": "domain", "uuid": "85dd9974-250f-4d34-9bd0-e82b18477cfa", "value": "filesgetintopc.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:16+00:00", "timestamp": "1776286816", "to_ids": true, "type": "domain", "uuid": "36eaddec-51c3-43e7-8587-3eff0cf6ca39", "value": "fileszeroupload.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:17+00:00", "timestamp": "1776286817", "to_ids": true, "type": "domain", "uuid": "4d31e75d-6737-483f-badd-969621fd15cd", "value": "filezup.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:17+00:00", "timestamp": "1776286817", "to_ids": true, "type": "domain", "uuid": "4dab04c4-7369-481e-90ed-75835325f359", "value": "flexgetwindows.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:17+00:00", "timestamp": "1776286817", "to_ids": true, "type": "domain", "uuid": "7a53c5eb-0579-426a-acf9-4f8f642253e9", "value": "fulfrdescc.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:17+00:00", "timestamp": "1776286817", "to_ids": true, "type": "domain", "uuid": "99c1e64f-2b4d-4d7f-87fa-b0a072f77d70", "value": "fullcrackedpro.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:17+00:00", "timestamp": "1776286817", "to_ids": true, "type": "domain", "uuid": "1a85a584-0cbd-4acf-8c94-5c03aecdf728", "value": "gbh6gf.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:17+00:00", "timestamp": "1776286818", "to_ids": true, "type": "domain", "uuid": "19c41b50-3f1f-44dd-a440-b8b311844cfc", "value": "gdsbcjio.one", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:18+00:00", "timestamp": "1776286818", "to_ids": true, "type": "domain", "uuid": "5fc4ffdd-e097-4e29-bd6e-ffce35103751", "value": "getcdn1host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:18+00:00", "timestamp": "1776286818", "to_ids": true, "type": "domain", "uuid": "45ea7466-a225-48eb-995e-81650ba0b976", "value": "getcdn2host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:18+00:00", "timestamp": "1776286818", "to_ids": true, "type": "domain", "uuid": "ab2ebf23-3104-47fd-a65f-b89e453c56e5", "value": "getcdn3host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:18+00:00", "timestamp": "1776286818", "to_ids": true, "type": "domain", "uuid": "c622c552-4408-43f7-b099-250437183df9", "value": "getcdn4host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:18+00:00", "timestamp": "1776286818", "to_ids": true, "type": "domain", "uuid": "f21e710f-ea44-466e-ad90-664103f84533", "value": "getcdn5host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:18+00:00", "timestamp": "1776286819", "to_ids": true, "type": "domain", "uuid": "4457a7bb-9f83-493b-be71-1df06b2f762a", "value": "getcdn6host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:19+00:00", "timestamp": "1776286819", "to_ids": true, "type": "domain", "uuid": "5498f727-083c-4437-8e75-4dc9ce2d4db5", "value": "getcdn8host.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:19+00:00", "timestamp": "1776286819", "to_ids": true, "type": "domain", "uuid": "beeccabc-38e5-4ff1-9947-9e6db94c9488", "value": "getdwnload3.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:19+00:00", "timestamp": "1776286819", "to_ids": true, "type": "domain", "uuid": "8a56da23-39ab-4471-9171-2c9d5ae92ae7", "value": "getdwnloadss.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:19+00:00", "timestamp": "1776286819", "to_ids": true, "type": "domain", "uuid": "213c2dd5-9721-4f4e-817c-b1295b0c3d34", "value": "getsoftspcfree.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:19+00:00", "timestamp": "1776286820", "to_ids": true, "type": "domain", "uuid": "30164490-c3ab-4888-bbef-aa7b5df7b54e", "value": "getzerocloudfiles.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:20+00:00", "timestamp": "1776286820", "to_ids": true, "type": "domain", "uuid": "d44dfd06-efbf-4072-9597-568c09168247", "value": "ghtcdes.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:20+00:00", "timestamp": "1776286820", "to_ids": true, "type": "domain", "uuid": "ccbb47b7-2707-4592-978b-a749e01cfa6b", "value": "ghtybxsd.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:20+00:00", "timestamp": "1776286820", "to_ids": true, "type": "domain", "uuid": "9410e290-6e76-455a-9885-52f1f8469b76", "value": "gldenmjrn.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:20+00:00", "timestamp": "1776286820", "to_ids": true, "type": "domain", "uuid": "3120b40e-2a0b-4e26-9ad1-7d24a23fe840", "value": "gmeexyio.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:20+00:00", "timestamp": "1776286820", "to_ids": true, "type": "domain", "uuid": "59bdf12f-af44-4ca0-afaa-6ef42250b456", "value": "gtreq.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:20+00:00", "timestamp": "1776286821", "to_ids": true, "type": "domain", "uuid": "abaad0cd-3e00-4387-abf1-89ba0114b333", "value": "gurusmac.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:21+00:00", "timestamp": "1776286821", "to_ids": true, "type": "domain", "uuid": "5dec8b13-8c52-4213-b3ff-1e2ae52326ac", "value": "hafiz23lo45.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:21+00:00", "timestamp": "1776286821", "to_ids": true, "type": "domain", "uuid": "902f3170-c6c9-4cd8-b48f-50abd7de538b", "value": "hamac.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:21+00:00", "timestamp": "1776286821", "to_ids": true, "type": "domain", "uuid": "94203ec0-aced-4410-83c1-66604630d6b3", "value": "hashsb343dhokybaz.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:21+00:00", "timestamp": "1776286821", "to_ids": true, "type": "domain", "uuid": "83fac4f6-c229-4618-9a72-7ccc1064f0c4", "value": "haxccccmac.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:21+00:00", "timestamp": "1776286822", "to_ids": true, "type": "domain", "uuid": "2bf3aa7a-4c20-456e-a1c4-04a55af1f255", "value": "hbgujm.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:22+00:00", "timestamp": "1776286822", "to_ids": true, "type": "domain", "uuid": "b0f2ff19-ff70-4feb-a964-3f64e17fe8d4", "value": "hexbyte.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:22+00:00", "timestamp": "1776286822", "to_ids": true, "type": "domain", "uuid": "63eceb50-c70f-401a-9dd5-cd28ce2fec60", "value": "hitzonnne.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:22+00:00", "timestamp": "1776286822", "to_ids": true, "type": "domain", "uuid": "9c305baa-7378-4fcb-aff9-c602c9a5169f", "value": "hostfilcyd1.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:22+00:00", "timestamp": "1776286822", "to_ids": true, "type": "domain", "uuid": "4c47f162-2e6f-4273-9a24-0b923623385a", "value": "hostfilcyd2.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:22+00:00", "timestamp": "1776286822", "to_ids": true, "type": "domain", "uuid": "30d20fac-8a5b-425e-8aff-d2e2b387558a", "value": "hostfr1.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:23+00:00", "timestamp": "1776286823", "to_ids": true, "type": "domain", "uuid": "8b6168f8-c19a-471c-a814-62e759ce2c6f", "value": "hostfr2.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:23+00:00", "timestamp": "1776286823", "to_ids": true, "type": "domain", "uuid": "0d590bd4-cddf-4fb5-b9c4-4b921931ea72", "value": "hostfr3.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:23+00:00", "timestamp": "1776286823", "to_ids": true, "type": "domain", "uuid": "d5ee640e-3df5-428e-ac62-9de92ddafb93", "value": "hostfr4.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:23+00:00", "timestamp": "1776286823", "to_ids": true, "type": "domain", "uuid": "292548ed-f884-4c17-b5c5-72f391672fa0", "value": "hostfr5.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:23+00:00", "timestamp": "1776286823", "to_ids": true, "type": "domain", "uuid": "2bdfa040-ba93-423c-a50c-b1cf6a1c7507", "value": "hostfr6.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:24+00:00", "timestamp": "1776286824", "to_ids": true, "type": "domain", "uuid": "67a889c3-b9de-4283-bc47-ddb80432a5a7", "value": "hostfr7.it.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:24+00:00", "timestamp": "1776286824", "to_ids": true, "type": "domain", "uuid": "8c4befe5-cec9-40ae-89fe-2c8a96cd06c6", "value": "hybdeipo.one", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:24+00:00", "timestamp": "1776286824", "to_ids": true, "type": "domain", "uuid": "c9cd9a40-a5de-47b9-8444-0c95e192cdf7", "value": "hytf5osdf.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:24+00:00", "timestamp": "1776286824", "to_ids": true, "type": "domain", "uuid": "b196130d-2bb1-4048-ba71-a082919bd8bc", "value": "igetintopc.store", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:24+00:00", "timestamp": "1776286824", "to_ids": true, "type": "domain", "uuid": "cdce6c30-b346-4f8c-87a9-66f9376c97fa", "value": "jhahskan.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:24+00:00", "timestamp": "1776286825", "to_ids": true, "type": "domain", "uuid": "d90619d6-081d-46c1-8f6a-103ceddb759d", "value": "jilani54gulam12.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:25+00:00", "timestamp": "1776286825", "to_ids": true, "type": "domain", "uuid": "5b5d19ea-6978-4606-920a-6e6148c15763", "value": "jmvgdew.help", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:25+00:00", "timestamp": "1776286825", "to_ids": true, "type": "domain", "uuid": "3caad360-1ed1-487d-8b63-905a2fbdf3ce", "value": "joexzoancea.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:25+00:00", "timestamp": "1776286825", "to_ids": true, "type": "domain", "uuid": "66642748-f938-4908-86f8-4d319772952e", "value": "kat333softz.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:25+00:00", "timestamp": "1776286825", "to_ids": true, "type": "domain", "uuid": "77665748-3ee2-4b6d-9f36-9d73d0708d2c", "value": "kjhuiop.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:25+00:00", "timestamp": "1776286826", "to_ids": true, "type": "domain", "uuid": "346d9808-74fd-4eb8-9a9d-7a5aa513a408", "value": "kpgyhu.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:26+00:00", "timestamp": "1776286826", "to_ids": true, "type": "domain", "uuid": "417915ea-a3cf-427b-abff-7d53b1e6f606", "value": "kyseral.live", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:26+00:00", "timestamp": "1776286826", "to_ids": true, "type": "domain", "uuid": "a9c6cd27-0279-4db2-972e-1694a80c3a81", "value": "lampday.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:26+00:00", "timestamp": "1776286826", "to_ids": true, "type": "domain", "uuid": "d475ccd0-3f56-4572-a571-aa7b3cd92451", "value": "landingdsa.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:26+00:00", "timestamp": "1776286826", "to_ids": true, "type": "domain", "uuid": "3d58bda8-a928-499f-b1f4-bce1fa1052b4", "value": "liliane54reinger.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:26+00:00", "timestamp": "1776286826", "to_ids": true, "type": "domain", "uuid": "463e2f94-7095-409f-8d3e-cad2959bd198", "value": "lndingy.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:27+00:00", "timestamp": "1776286827", "to_ids": true, "type": "domain", "uuid": "92ee139f-8d76-4617-8617-bef3901a9ced", "value": "loghyibh6get.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:27+00:00", "timestamp": "1776286827", "to_ids": true, "type": "domain", "uuid": "b7d78caf-ff71-4d75-91bf-8178fc48f216", "value": "macosdrive.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:27+00:00", "timestamp": "1776286827", "to_ids": true, "type": "domain", "uuid": "e4a732c4-1efb-4446-844a-b99935187cba", "value": "macosvk.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:27+00:00", "timestamp": "1776286827", "to_ids": true, "type": "domain", "uuid": "41743061-c23a-4890-9938-2f0475c1e1ba", "value": "macwssld.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:27+00:00", "timestamp": "1776286827", "to_ids": true, "type": "domain", "uuid": "e231b876-ea5f-42bf-92e7-ce7dec121680", "value": "mcdefecehyt.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:28+00:00", "timestamp": "1776286828", "to_ids": true, "type": "domain", "uuid": "3948c155-8bc1-4bc0-9e70-80643def0684", "value": "mdeeswxabv.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:28+00:00", "timestamp": "1776286828", "to_ids": true, "type": "domain", "uuid": "f60e04ae-e5ce-40e7-b78d-c81ca131adb5", "value": "mediaadsx.us", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:28+00:00", "timestamp": "1776286828", "to_ids": true, "type": "domain", "uuid": "ddd3f8c2-88dd-431d-9ec5-0420c36b2391", "value": "megsetupdogs.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:28+00:00", "timestamp": "1776286828", "to_ids": true, "type": "domain", "uuid": "db688673-8e5a-46c2-91b7-dc4102390552", "value": "mgbcfju.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:28+00:00", "timestamp": "1776286828", "to_ids": true, "type": "domain", "uuid": "7e614995-4da8-43f8-996d-ae4bae56cdc8", "value": "mindtick.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:28+00:00", "timestamp": "1776286829", "to_ids": true, "type": "domain", "uuid": "00afa96e-d410-41ad-8ceb-609e79dcfb67", "value": "mixmediasixcv4.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:29+00:00", "timestamp": "1776286829", "to_ids": true, "type": "domain", "uuid": "e86d5f2c-18f5-4388-819d-cb1b1c3f11f4", "value": "mqs876dkrlo.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:29+00:00", "timestamp": "1776286829", "to_ids": true, "type": "domain", "uuid": "290e950e-6061-40d2-a922-1735e28f60be", "value": "naktech.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:29+00:00", "timestamp": "1776286829", "to_ids": true, "type": "domain", "uuid": "bb45ae74-036b-443f-9d43-2c4c547eb845", "value": "neesoftwares.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:29+00:00", "timestamp": "1776286829", "to_ids": true, "type": "domain", "uuid": "f1e403c2-103a-46ce-9a5e-369f1bdf3513", "value": "pccloud.college", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:29+00:00", "timestamp": "1776286829", "to_ids": true, "type": "domain", "uuid": "c35fbf5b-8a20-4ad2-bd51-df4616344cdb", "value": "pchsanb.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:30+00:00", "timestamp": "1776286830", "to_ids": true, "type": "domain", "uuid": "212268ee-ff1f-43ad-86dc-b6eab43c1e83", "value": "psdfrtg.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:30+00:00", "timestamp": "1776286830", "to_ids": true, "type": "domain", "uuid": "ec151f72-29ed-429a-be74-4b1869a60f46", "value": "rapidsofts.sbs", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:30+00:00", "timestamp": "1776286830", "to_ids": true, "type": "domain", "uuid": "e7b9ceb4-cbb5-4804-9b4b-2dc817b647ad", "value": "salt900malt.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:30+00:00", "timestamp": "1776286830", "to_ids": true, "type": "domain", "uuid": "8ad9d746-2d10-44e9-a8c6-95257a769895", "value": "scloudpremium.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:30+00:00", "timestamp": "1776286830", "to_ids": true, "type": "domain", "uuid": "b7d94e76-a668-4b9d-8412-d0e589bc34b5", "value": "scscwes.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:30+00:00", "timestamp": "1776286831", "to_ids": true, "type": "domain", "uuid": "c8f658fb-4406-4489-bbb6-5debcc5be549", "value": "securelinkedzxc.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:31+00:00", "timestamp": "1776286831", "to_ids": true, "type": "domain", "uuid": "785205ce-5af9-4528-822e-916cbdee1b3d", "value": "sedazs.site", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:31+00:00", "timestamp": "1776286831", "to_ids": true, "type": "domain", "uuid": "60d7cf52-70b8-402f-ac95-ee957c7caaa5", "value": "sharetool.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:31+00:00", "timestamp": "1776286831", "to_ids": true, "type": "domain", "uuid": "172c9201-2aee-4507-86f3-470d118d28c8", "value": "shrkkmcds.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:31+00:00", "timestamp": "1776286831", "to_ids": true, "type": "domain", "uuid": "c15ec43f-22a1-467f-bd22-ab801829b6df", "value": "shrydx.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:31+00:00", "timestamp": "1776286832", "to_ids": true, "type": "domain", "uuid": "06778c7e-9ba4-4377-a596-65939ebe2373", "value": "sixzsdctrs.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:32+00:00", "timestamp": "1776286832", "to_ids": true, "type": "domain", "uuid": "792c8c6c-dd5e-4c6f-b7d9-7571293739f9", "value": "softspcfreeget.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:32+00:00", "timestamp": "1776286832", "to_ids": true, "type": "domain", "uuid": "3d8077d0-4f3d-4cdd-a7d0-047a6202b8dd", "value": "spreadlovebro.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:32+00:00", "timestamp": "1776286832", "to_ids": true, "type": "domain", "uuid": "00c28570-5794-4ca2-980c-75978eec1111", "value": "stefaniemazilu.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:32+00:00", "timestamp": "1776286832", "to_ids": true, "type": "domain", "uuid": "35fe62b7-8cbe-4fc7-aead-955b574117fb", "value": "sthybdsc.lat", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:32+00:00", "timestamp": "1776286832", "to_ids": true, "type": "domain", "uuid": "8e81a4de-f72c-433c-892f-0d81c5edc699", "value": "sultns.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:32+00:00", "timestamp": "1776286833", "to_ids": true, "type": "domain", "uuid": "82acfdd4-da6a-46b2-8cdc-451c01a2d54a", "value": "technyo.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:33+00:00", "timestamp": "1776286833", "to_ids": true, "type": "domain", "uuid": "bdf036ca-219c-45e5-8191-7cdfa4e4de1e", "value": "techsoftwares.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:33+00:00", "timestamp": "1776286833", "to_ids": true, "type": "domain", "uuid": "c9da07c9-757b-4273-b82d-6fb03b005030", "value": "tgyer.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:33+00:00", "timestamp": "1776286833", "to_ids": true, "type": "domain", "uuid": "72ab36ad-8d1d-4d70-9d15-829dbc8ba9c1", "value": "thevcxz.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:33+00:00", "timestamp": "1776286833", "to_ids": true, "type": "domain", "uuid": "d9f6b56d-bf21-4596-876c-4b178a680162", "value": "trickwik.org", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:33+00:00", "timestamp": "1776286834", "to_ids": true, "type": "domain", "uuid": "01018d4e-0967-4be0-9978-83ccf18b2e0c", "value": "tyfgrd.fit", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:34+00:00", "timestamp": "1776286834", "to_ids": true, "type": "domain", "uuid": "7476d6b6-269e-44cd-b443-af506c1027bd", "value": "untiluoi.one", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:34+00:00", "timestamp": "1776286834", "to_ids": true, "type": "domain", "uuid": "e8d738c8-e385-47e1-ab86-201ffd896392", "value": "up-4ever.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:34+00:00", "timestamp": "1776286834", "to_ids": true, "type": "domain", "uuid": "3181c856-edd9-4ea4-bf0a-cec0eb2ff3f9", "value": "upsetup.link", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:34+00:00", "timestamp": "1776286834", "to_ids": true, "type": "domain", "uuid": "b995d72d-d122-4841-bf35-d79998f2dda0", "value": "vcxzgroup.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:34+00:00", "timestamp": "1776286834", "to_ids": true, "type": "domain", "uuid": "76d97d24-3dbe-4827-b4dd-6e797905b371", "value": "wikiingsfitlo.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:34+00:00", "timestamp": "1776286835", "to_ids": true, "type": "domain", "uuid": "3d46b1bc-0d07-43c5-9cc1-7b3c75d6bc5e", "value": "wincleanfile.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:35+00:00", "timestamp": "1776286835", "to_ids": true, "type": "domain", "uuid": "fb000c26-08ab-4f29-ba52-be540e3314a6", "value": "winmacfile.info", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:35+00:00", "timestamp": "1776286835", "to_ids": true, "type": "domain", "uuid": "b6ec4ea9-ed84-40b6-b0d0-1bf83356658d", "value": "winmacfile.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:35+00:00", "timestamp": "1776286835", "to_ids": true, "type": "domain", "uuid": "774fd8d2-fb68-4921-8422-1b292e8ba01f", "value": "winostan-tm.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:35+00:00", "timestamp": "1776286835", "to_ids": true, "type": "domain", "uuid": "ad938152-310a-442b-96b2-afc7ea1f284c", "value": "wllbeoks.cfd", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:35+00:00", "timestamp": "1776286836", "to_ids": true, "type": "domain", "uuid": "5f904694-2432-4deb-b8aa-33ffb71646ff", "value": "wqasproset.pro", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:36+00:00", "timestamp": "1776286836", "to_ids": true, "type": "domain", "uuid": "85fe6bdb-7745-407e-a44c-da4e83c31f8b", "value": "xyqon.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:36+00:00", "timestamp": "1776286836", "to_ids": true, "type": "domain", "uuid": "ea3047a3-f287-4bf3-b100-d65daccac83e", "value": "zcsdvsd.club", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:36+00:00", "timestamp": "1776286836", "to_ids": true, "type": "domain", "uuid": "58bc24ac-f66f-48b1-94cc-da48c7290f88", "value": "zipfilespc.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:36+00:00", "timestamp": "1776286836", "to_ids": true, "type": "domain", "uuid": "ea5e2ed5-518c-4946-ad44-fbbd0af9078c", "value": "zipup.click", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:36+00:00", "timestamp": "1776286837", "to_ids": true, "type": "domain", "uuid": "eabd799d-8a3b-4021-8aff-f44e0008166d", "value": "zohadfsds.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:37+00:00", "timestamp": "1776286837", "to_ids": true, "type": "domain", "uuid": "816f9e20-0359-4682-b983-7e8acf613f03", "value": "zonecloudzone.cloud", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:37+00:00", "timestamp": "1776286837", "to_ids": true, "type": "domain", "uuid": "00c48854-047e-40ee-a7c6-e86a572cdf23", "value": "zyqora.icu", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:37+00:00", "timestamp": "1776286837", "to_ids": true, "type": "domain", "uuid": "6eeb555c-e223-4759-a2a0-7d2de7814d3f", "value": "zytrixx.xyz", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:37+00:00", "timestamp": "1776286837", "to_ids": true, "type": "domain", "uuid": "bbd2f77d-59b2-4222-a663-18a4213397c5", "value": "bxaeah.eu.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:37+00:00", "timestamp": "1776286838", "to_ids": true, "type": "domain", "uuid": "5aa0d51a-e933-42ee-ad65-b90b89c08dbb", "value": "mndgsab.eu.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:38+00:00", "timestamp": "1776286838", "to_ids": true, "type": "domain", "uuid": "dfb6a253-a754-4efe-af16-bcb4184986a7", "value": "msgasatry.eu.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:38+00:00", "timestamp": "1776286838", "to_ids": true, "type": "domain", "uuid": "8583a524-a1ae-461e-99a8-dff739358642", "value": "tfhkfhaw.eu.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:38+00:00", "timestamp": "1776286838", "to_ids": true, "type": "domain", "uuid": "50c90b92-0233-4f44-8ad8-e01ab0ef452d", "value": "usghask.eu.cc", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:38+00:00", "timestamp": "1776286838", "to_ids": true, "type": "domain", "uuid": "c8721f1a-77b2-4936-ba2b-f944434563f5", "value": "2x.app-online-hk-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:38+00:00", "timestamp": "1776286838", "to_ids": true, "type": "domain", "uuid": "10a812ce-eddb-44a2-af31-0ff62865b9ef", "value": "9l.do-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:38+00:00", "timestamp": "1776286839", "to_ids": true, "type": "domain", "uuid": "3dd904d2-5b00-4177-ae70-2787fea7ab02", "value": "azkyn-whatsapp.org.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:39+00:00", "timestamp": "1776286839", "to_ids": true, "type": "domain", "uuid": "0252e7be-8655-4190-bd85-abeb1c82ecd9", "value": "bvnxkld-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:39+00:00", "timestamp": "1776286839", "to_ids": true, "type": "domain", "uuid": "bd6cac94-7a42-44ba-8f65-126d9c348ae8", "value": "do-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:39+00:00", "timestamp": "1776286839", "to_ids": true, "type": "domain", "uuid": "e1a2b895-cca4-446b-9f89-2e1d651c5874", "value": "fd.dik-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:39+00:00", "timestamp": "1776286839", "to_ids": true, "type": "domain", "uuid": "c18be9dc-c7b2-4b26-8813-5ea71f5e62e8", "value": "fdxvg-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:39+00:00", "timestamp": "1776286840", "to_ids": true, "type": "domain", "uuid": "1e953e66-8fae-42a8-b355-d0d8cc8858da", "value": "fn.dnp-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:40+00:00", "timestamp": "1776286840", "to_ids": true, "type": "domain", "uuid": "6ac9305d-70f0-4ceb-9371-acbe7b750dfd", "value": "fxrmpoa-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:40+00:00", "timestamp": "1776286840", "to_ids": true, "type": "domain", "uuid": "297d5629-ae25-4a1e-982f-499b9a2ad266", "value": "glxvopr-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:40+00:00", "timestamp": "1776286840", "to_ids": true, "type": "domain", "uuid": "3ea85e71-c60b-4817-aeb1-5f7e4b04d4e5", "value": "gprtx-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:40+00:00", "timestamp": "1776286840", "to_ids": true, "type": "domain", "uuid": "4ce76660-5507-4270-956d-1cb9e63c0ec5", "value": "jwqzrep-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:40+00:00", "timestamp": "1776286841", "to_ids": true, "type": "domain", "uuid": "d6186543-d1fc-4dd1-8cc4-c398f44156f5", "value": "kplazmq-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:41+00:00", "timestamp": "1776286841", "to_ids": true, "type": "domain", "uuid": "fbfb51ba-b55e-4205-a452-294758aa1edd", "value": "ktyqp-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:41+00:00", "timestamp": "1776286841", "to_ids": true, "type": "domain", "uuid": "df5c19ef-46b6-45c7-aff9-631c98c7e994", "value": "lsgxm-whatsapp.org.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:41+00:00", "timestamp": "1776286841", "to_ids": true, "type": "domain", "uuid": "b894ec65-5860-477d-9d83-61cf023bec47", "value": "lwtqk-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:41+00:00", "timestamp": "1776286841", "to_ids": true, "type": "domain", "uuid": "f4794db8-4273-4a7b-830c-cd566a51e560", "value": "m2.rxqma-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:41+00:00", "timestamp": "1776286842", "to_ids": true, "type": "domain", "uuid": "21ac3f9b-aa5d-408f-a318-6544656d2938", "value": "m5.axrqp-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:42+00:00", "timestamp": "1776286842", "to_ids": true, "type": "domain", "uuid": "e2f51a1a-5093-41a4-bf29-e42639cb6b24", "value": "mbxvcar-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:42+00:00", "timestamp": "1776286842", "to_ids": true, "type": "domain", "uuid": "581336fc-d3ca-4f95-aa1a-4459f6d4dc9f", "value": "mk.txrpm-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:42+00:00", "timestamp": "1776286842", "to_ids": true, "type": "domain", "uuid": "3897bc40-f12d-4a9d-92cc-53138143348d", "value": "mkhjt-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:42+00:00", "timestamp": "1776286842", "to_ids": true, "type": "domain", "uuid": "1229e402-dc04-450e-a139-f917b6baa174", "value": "mvqrxpa-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:42+00:00", "timestamp": "1776286843", "to_ids": true, "type": "domain", "uuid": "1881e959-952a-4f0e-ba9f-7adeb6fdedb9", "value": "prvmqnx-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:43+00:00", "timestamp": "1776286843", "to_ids": true, "type": "domain", "uuid": "45bd36d7-cc3f-4ca2-b0ff-4b24a89480af", "value": "pvqmrzn-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:43+00:00", "timestamp": "1776286843", "to_ids": true, "type": "domain", "uuid": "afbd138b-1f9f-4b47-8460-474bb509176f", "value": "pxnqvla-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:43+00:00", "timestamp": "1776286843", "to_ids": true, "type": "domain", "uuid": "7f86f8c2-8abb-4eed-a428-5be35b2d10bf", "value": "pxzlc-whatsapp.org.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:43+00:00", "timestamp": "1776286843", "to_ids": true, "type": "domain", "uuid": "53388a84-c9b6-4be0-8d8c-eaabd49ff91f", "value": "qrvmpzn-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:43+00:00", "timestamp": "1776286844", "to_ids": true, "type": "domain", "uuid": "6263d9b3-dd8c-4826-a379-8de7808b57c4", "value": "qvmrxpa-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:44+00:00", "timestamp": "1776286844", "to_ids": true, "type": "domain", "uuid": "8a36db63-b599-49df-85d0-4a4c27da13f7", "value": "rqpzvnm-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:44+00:00", "timestamp": "1776286844", "to_ids": true, "type": "domain", "uuid": "066113b3-3975-4ace-a27e-34d36736fd61", "value": "rvmqxpa-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:44+00:00", "timestamp": "1776286844", "to_ids": true, "type": "domain", "uuid": "fe955f73-375a-453d-9517-4cdb3078ef7c", "value": "rzmqvpa-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:44+00:00", "timestamp": "1776286844", "to_ids": true, "type": "domain", "uuid": "15f4caa0-fb3f-46b5-8d7a-a962633f5643", "value": "rzmvqpa-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:44+00:00", "timestamp": "1776286845", "to_ids": true, "type": "domain", "uuid": "35af10b8-0997-4c32-af7c-d3bd8cbd7c86", "value": "utpwf-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:45+00:00", "timestamp": "1776286845", "to_ids": true, "type": "domain", "uuid": "7f23caae-4426-46e4-b970-b085c5c2414c", "value": "utpwf-whatsapp.org.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:45+00:00", "timestamp": "1776286845", "to_ids": true, "type": "domain", "uuid": "327013d6-78bb-4dfb-a4bf-d5f9cfc1c695", "value": "wss-zxtmp-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:45+00:00", "timestamp": "1776286845", "to_ids": true, "type": "domain", "uuid": "c0dc6caa-3371-4c56-93fd-d747953712aa", "value": "xbltr-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:45+00:00", "timestamp": "1776286845", "to_ids": true, "type": "domain", "uuid": "f38a61e3-0f04-4b93-9092-c66aac439428", "value": "xf.wss-kxtro-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:45+00:00", "timestamp": "1776286845", "to_ids": true, "type": "domain", "uuid": "fba0e124-63d5-4edb-8115-378cd2d0b794", "value": "xtvrpke-whatsapp.hl.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:46+00:00", "timestamp": "1776286846", "to_ids": true, "type": "domain", "uuid": "a368c339-cf83-4949-a8c8-ee4e18f985eb", "value": "ymsdp-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:46+00:00", "timestamp": "1776286846", "to_ids": true, "type": "domain", "uuid": "fae184f8-db83-40c6-af7f-bf0fcc664944", "value": "zmnxp-whatsapp.org.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "fakeapp", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:46+00:00", "timestamp": "1776286846", "to_ids": true, "type": "domain", "uuid": "889de536-d024-4cd3-a08c-db61cfdb3bd5", "value": "zrywa-whatsapp.com.cn", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "hak5cloud_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:46+00:00", "timestamp": "1776286846", "to_ids": false, "type": "url", "uuid": "116d00d0-db92-4701-99cd-4436e6c83c7e", "value": "https://api.github.com/repos/stamparm/maltrail/commits/55454873f4994c743eb713af3fdcc885b6da9264", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hak5cloud_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:46+00:00", "timestamp": "1776286846", "to_ids": true, "type": "domain", "uuid": "8c8fd2a6-38c2-4e42-81db-8e69f5457422", "value": "api.padmi.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hak5cloud_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:46+00:00", "timestamp": "1776286847", "to_ids": true, "type": "domain", "uuid": "9082cd26-701a-403a-9b0b-7088cf57e000", "value": "c2.gaechter.dev", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "hak5cloud_c2", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:47+00:00", "timestamp": "1776286847", "to_ids": true, "type": "domain", "uuid": "1cebec20-f753-4b1a-9a7a-d79e4b8126b2", "value": "cpcontacts.thotera.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:47+00:00", "timestamp": "1776286847", "to_ids": false, "type": "url", "uuid": "611eb356-2121-4210-947f-5a4541c4a01f", "value": "https://api.github.com/repos/stamparm/maltrail/commits/d30358a15a9cff35d99f20c68630e8159cb43999", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:47+00:00", "timestamp": "1776286847", "to_ids": true, "type": "domain", "uuid": "60fe4ee4-d872-4118-950b-82c4d81f5299", "value": "bn.ndocaapass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:47+00:00", "timestamp": "1776286847", "to_ids": true, "type": "domain", "uuid": "75af2b90-7a10-466b-89af-05804fc915db", "value": "navs.bn.ndocaapass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:47+00:00", "timestamp": "1776286848", "to_ids": true, "type": "domain", "uuid": "209eb5c8-95fe-4079-83f5-60d52a71c489", "value": "ncodbvpass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:48+00:00", "timestamp": "1776286848", "to_ids": true, "type": "domain", "uuid": "29d66fe8-f506-4c31-829f-b76359da429f", "value": "ndocaapass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:48+00:00", "timestamp": "1776286848", "to_ids": true, "type": "domain", "uuid": "9153712d-3a69-475f-aa16-32548bc95854", "value": "ndocadpass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:48+00:00", "timestamp": "1776286848", "to_ids": true, "type": "domain", "uuid": "bddb2b32-1cbd-444f-aaec-72b1d00934ad", "value": "ndocatpass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:48+00:00", "timestamp": "1776286848", "to_ids": true, "type": "domain", "uuid": "447c0dad-5271-4bb0-9b8f-d83a4ce5ad2c", "value": "ndocaupass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:48+00:00", "timestamp": "1776286848", "to_ids": true, "type": "domain", "uuid": "61622418-15b8-4850-8100-0e75b6e4b473", "value": "ndocazpass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:48+00:00", "timestamp": "1776286849", "to_ids": true, "type": "domain", "uuid": "6dfd7d75-e7ea-406f-8377-02606b24616d", "value": "ndocbapass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:49+00:00", "timestamp": "1776286849", "to_ids": true, "type": "domain", "uuid": "9b52578e-e2b0-4fef-810b-3cee7408f220", "value": "ndocbcpass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:49+00:00", "timestamp": "1776286849", "to_ids": true, "type": "domain", "uuid": "89135592-deef-4227-808e-bf5dbe4e0b1b", "value": "ndocbdpass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:49+00:00", "timestamp": "1776286849", "to_ids": true, "type": "domain", "uuid": "4cd352f1-4741-4aaf-b2da-1fb95213399e", "value": "ndocbepass.dynv6.net", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:49+00:00", "timestamp": "1776286849", "to_ids": true, "type": "domain", "uuid": "c03dc7c9-84e0-44f9-8c7e-7fe02a32813a", "value": "ndocbfpass.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:50+00:00", "timestamp": "1776286850", "to_ids": true, "type": "domain", "uuid": "0f3c00a8-47bc-41aa-8d96-2fd73a11707c", "value": "ndocbgpass.v6.army", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:50+00:00", "timestamp": "1776286850", "to_ids": true, "type": "domain", "uuid": "f67ed04b-0644-4c05-a3cb-8a4ed8591e02", "value": "nid-log.com", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:50+00:00", "timestamp": "1776286850", "to_ids": true, "type": "domain", "uuid": "6a757cd9-568b-44c4-85ef-e6b04da34292", "value": "yzjkdaspo.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:50+00:00", "timestamp": "1776286850", "to_ids": true, "type": "domain", "uuid": "5bb1b287-4033-4b78-8c1f-dc3b457f3c25", "value": "yzjladsiouewk.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:50+00:00", "timestamp": "1776286850", "to_ids": true, "type": "domain", "uuid": "8bc2ced5-2d0a-4ccc-af6d-aee9fd2791b8", "value": "yzkjdasiouej.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:50+00:00", "timestamp": "1776286851", "to_ids": true, "type": "domain", "uuid": "db16a6ad-9309-4514-81ab-8359d6bee5e7", "value": "yzopjasdiw.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "apt_kimsuky", "deleted": false, "disable_correlation": false, "last_seen": "2026-04-15T21:00:51+00:00", "timestamp": "1776286851", "to_ids": true, "type": "domain", "uuid": "349b94d6-629f-428c-99c1-633d3277006f", "value": "yzopjklfs.top", "Tag": [ { "colour": "#00833c", "local": false, "name": "misp:threat-level=\"medium-risk\"", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" } ] } ] } }