{
  "Event": {
    "analysis": "1",
    "date": "2026-03-02",
    "extends_uuid": "",
    "info": "Maltrail IOC for 2026-03-02",
    "publish_timestamp": "1772492402",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1772488806",
    "uuid": "fa6aa843-efeb-47d1-aeb4-37679b1ae471",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#d6f264",
        "local": false,
        "name": "MALWARE",
        "relationship_type": ""
      },
      {
        "colour": "#00833c",
        "local": false,
        "name": "misp:threat-level=\"medium-risk\"",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      },
      {
        "colour": "#0064ac",
        "local": false,
        "name": "osint:source-type=\"manual-collection\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T07:00:02+00:00",
        "timestamp": "1772434803",
        "to_ids": false,
        "type": "url",
        "uuid": "65194bf5-7cac-4fc9-97ab-2c50a481f392",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6abf2ca77127c15820535b87c0e19783a2ec4262",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:03+00:00",
        "timestamp": "1772438404",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9bffcc6b-57df-4b26-bd29-2974d646affa",
        "value": "212.34.134.3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:05+00:00",
        "timestamp": "1772438405",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1eaf3eab-2215-463b-95be-66d7bc29a97f",
        "value": "31.59.139.31",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:05+00:00",
        "timestamp": "1772438406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5e186a2c-bd14-4075-bac0-bd06fb3443d6",
        "value": "5.178.96.160",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:06+00:00",
        "timestamp": "1772438406",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fb183d6f-b8e4-40c2-b27d-63a9092fe5cb",
        "value": "77.105.139.80",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:06+00:00",
        "timestamp": "1772438407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "69522e2a-6b22-4b41-8c7d-0ab98275e595",
        "value": "89.124.74.114",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:07+00:00",
        "timestamp": "1772438407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1e4541f4-4c63-49d9-8261-3827093a2c83",
        "value": "91.84.123.250",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:07+00:00",
        "timestamp": "1772438407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fe05a7f8-03b2-457f-9019-db07287028c8",
        "value": "91.92.243.101",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:07+00:00",
        "timestamp": "1772438407",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6e943afd-94d1-49a4-9d0b-2e7c3b1faf81",
        "value": "94.26.106.194",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:08+00:00",
        "timestamp": "1772438408",
        "to_ids": false,
        "type": "url",
        "uuid": "2d609fda-1440-4503-a60e-be4f4e14eecb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f485d10ff02729e9f7b3b0f04305c271347450c8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T08:00:08+00:00",
        "timestamp": "1772438408",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b9737eef-2d9e-458b-95b3-75073e6fae39",
        "value": "216.250.252.103",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:04+00:00",
        "timestamp": "1772442005",
        "to_ids": false,
        "type": "url",
        "uuid": "1b60c681-eddc-4e3f-addd-538733c94e4e",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d6e73f30f2777a8ad6291998a119b57e5bbfc449",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:05+00:00",
        "timestamp": "1772442006",
        "to_ids": false,
        "type": "url",
        "uuid": "b44eceb8-55c4-4597-add0-a0746678ff08",
        "value": "https://cyberandramen.net/2026/03/02/before-the-proxy-uncovering-active-plugx-staging-infrastructure-linked-to-three-prc-actors",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:06+00:00",
        "timestamp": "1772442006",
        "to_ids": true,
        "type": "domain",
        "uuid": "34a667a6-d004-4232-a0c8-133ac08d1495",
        "value": "adimagemarketing.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:06+00:00",
        "timestamp": "1772442006",
        "to_ids": true,
        "type": "domain",
        "uuid": "01e237fe-e755-4dbe-b8fe-60a057904938",
        "value": "anbusivam.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:06+00:00",
        "timestamp": "1772442006",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfa6bba9-28f0-4e88-a833-b7b0f558d3ba",
        "value": "basecampbox.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:06+00:00",
        "timestamp": "1772442006",
        "to_ids": true,
        "type": "domain",
        "uuid": "7461133a-8532-453c-a7b1-668176fee50c",
        "value": "buywownow.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:06+00:00",
        "timestamp": "1772442007",
        "to_ids": true,
        "type": "domain",
        "uuid": "b03d91a3-301c-4cc8-a234-9819c3fea1ee",
        "value": "creatday.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:07+00:00",
        "timestamp": "1772442007",
        "to_ids": true,
        "type": "domain",
        "uuid": "302bac41-39bb-4cba-943c-5bfadcc70e37",
        "value": "doorforum.co",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:07+00:00",
        "timestamp": "1772442007",
        "to_ids": true,
        "type": "domain",
        "uuid": "97188ac2-dddc-4b74-856f-c4dbdc17ad06",
        "value": "ecoafrique.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:07+00:00",
        "timestamp": "1772442007",
        "to_ids": true,
        "type": "domain",
        "uuid": "15324666-4190-4990-aaf9-4333d9ab6121",
        "value": "fruitbrat.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:07+00:00",
        "timestamp": "1772442007",
        "to_ids": true,
        "type": "domain",
        "uuid": "24254e41-b05c-4a48-b01d-adfda983852b",
        "value": "gestationsdiabetes.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:07+00:00",
        "timestamp": "1772442007",
        "to_ids": true,
        "type": "domain",
        "uuid": "6c176067-8cc0-4a6c-9ddc-0fc0dd8227c7",
        "value": "hopelitellc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:07+00:00",
        "timestamp": "1772442008",
        "to_ids": true,
        "type": "domain",
        "uuid": "23f0e288-374e-4cc3-9e41-a85ce7fb25c6",
        "value": "ombut.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:08+00:00",
        "timestamp": "1772442008",
        "to_ids": true,
        "type": "domain",
        "uuid": "57b10229-fe18-4088-9e62-f434b2643849",
        "value": "phbusiness.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:08+00:00",
        "timestamp": "1772442008",
        "to_ids": true,
        "type": "domain",
        "uuid": "dcc6e772-dbdb-4f58-89ca-56627e275fc4",
        "value": "turileco.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:08+00:00",
        "timestamp": "1772442008",
        "to_ids": false,
        "type": "url",
        "uuid": "9971622a-15f0-4b8d-bab6-704d89ce60f1",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0d838114f6a39c38b74e80eb6c8143adeb4bf193",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:08+00:00",
        "timestamp": "1772442008",
        "to_ids": true,
        "type": "domain",
        "uuid": "82e55ad8-7884-4f24-89c2-8eea3739ad8a",
        "value": "filedriveway.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:08+00:00",
        "timestamp": "1772442008",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a7b75c4-71e4-4420-9a7a-97d127e7a768",
        "value": "fileuploadhero.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:08+00:00",
        "timestamp": "1772442009",
        "to_ids": false,
        "type": "url",
        "uuid": "4102d1e5-83ff-4a61-ac70-6403fcb82ea5",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/d89ed1cdff12d58bda88e4560c05ab2aff277016",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:09+00:00",
        "timestamp": "1772442009",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d2bd25e-012d-4d8c-af7d-2253c55c11c6",
        "value": "myauthservicepb.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:09+00:00",
        "timestamp": "1772442009",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b6ff31e-0f0a-4c35-864d-57a1ddadea3c",
        "value": "userside08-verin0fo45.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:09+00:00",
        "timestamp": "1772442009",
        "to_ids": false,
        "type": "url",
        "uuid": "8ff84c49-42ad-4d9c-a420-8a8dc408ad65",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/04cc04be52955c2b32613c96466bd63322a51b55",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:09+00:00",
        "timestamp": "1772442009",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "39c58616-2cca-4f98-a01d-550cdd2a714b",
        "value": "115.191.18.57",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:09+00:00",
        "timestamp": "1772442009",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f95e7886-d642-4452-b07f-b2ba3e90d9fc",
        "value": "43.139.187.115",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "supershell_c2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:09+00:00",
        "timestamp": "1772442010",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5ed45acb-3195-45a4-afb3-0901868f21c9",
        "value": "95.181.162.121",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:10+00:00",
        "timestamp": "1772442010",
        "to_ids": false,
        "type": "url",
        "uuid": "6ce8ffdc-8f16-45c7-9f77-fa8d1183b45b",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/01e0914e85c0f326e1ff444a781ff812435e245a",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:10+00:00",
        "timestamp": "1772442010",
        "to_ids": true,
        "type": "domain",
        "uuid": "2deb9737-e2ee-42a4-9b7f-38be69a8d983",
        "value": "aliborhani.ir",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:10+00:00",
        "timestamp": "1772442010",
        "to_ids": true,
        "type": "domain",
        "uuid": "24bdf1e5-8767-450d-a2f2-03c7e03cdf3b",
        "value": "bambooairways.vn",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:10+00:00",
        "timestamp": "1772442010",
        "to_ids": true,
        "type": "domain",
        "uuid": "a52f4880-0fb0-43eb-9feb-905a4e448fc9",
        "value": "mytravelfoods.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:10+00:00",
        "timestamp": "1772442011",
        "to_ids": true,
        "type": "domain",
        "uuid": "92341d9b-b1b6-48e4-9a29-4254e58f6763",
        "value": "bhgcfdt.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:11+00:00",
        "timestamp": "1772442011",
        "to_ids": true,
        "type": "domain",
        "uuid": "a212c4bf-d441-4342-aa9c-4d829afa0928",
        "value": "denhgdxd.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:11+00:00",
        "timestamp": "1772442011",
        "to_ids": true,
        "type": "domain",
        "uuid": "3f3433c5-6a28-41bc-9ace-588bddc962a9",
        "value": "mlkkiooc.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "fakeapp",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:11+00:00",
        "timestamp": "1772442011",
        "to_ids": true,
        "type": "domain",
        "uuid": "54d7bfe8-190e-4661-ba00-ef7d0301c34b",
        "value": "tyhvcsio.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:11+00:00",
        "timestamp": "1772442011",
        "to_ids": false,
        "type": "url",
        "uuid": "da1f9af9-03a6-4b8e-bda9-e073f1ffe72f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e38959e4e2db329dc8319c3c92abaf02297a05ff",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:11+00:00",
        "timestamp": "1772442012",
        "to_ids": true,
        "type": "domain",
        "uuid": "aed04c1e-c275-428a-b260-661b4df078f1",
        "value": "metual.cyou",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "android_joker",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:12+00:00",
        "timestamp": "1772442012",
        "to_ids": true,
        "type": "domain",
        "uuid": "5ae55799-e091-4eae-8071-eb0d7a18a525",
        "value": "sremm.uno",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:12+00:00",
        "timestamp": "1772442012",
        "to_ids": false,
        "type": "url",
        "uuid": "6aedfc29-bafc-45c1-beff-6b07ffa6ba97",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ebb03253bb60d473c3a4cecd840e28c84f8b74c3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:12+00:00",
        "timestamp": "1772442012",
        "to_ids": true,
        "type": "domain",
        "uuid": "557df76a-a18c-4297-b448-2b77ccff3c02",
        "value": "airphysicianllc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:12+00:00",
        "timestamp": "1772442012",
        "to_ids": true,
        "type": "domain",
        "uuid": "f38076f4-abc4-44ac-a84b-f5d9cc790eed",
        "value": "apnisaree.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:12+00:00",
        "timestamp": "1772442012",
        "to_ids": true,
        "type": "domain",
        "uuid": "b368910a-3924-4aa7-b42f-118ead93022c",
        "value": "bharatfinadvisors.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442013",
        "to_ids": true,
        "type": "domain",
        "uuid": "08aeb1dc-c773-4834-b3b5-39b363ec6fc7",
        "value": "grupoamepc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442013",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7c332f7-310e-49da-9dbd-aa52196b987b",
        "value": "gwinnettveterans.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442013",
        "to_ids": true,
        "type": "domain",
        "uuid": "0530d92d-d4bf-408f-8104-81e05eda95c6",
        "value": "hotelposadalacatrina.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442013",
        "to_ids": true,
        "type": "domain",
        "uuid": "acbfa470-c05e-4b17-9b39-972bffcf9f3d",
        "value": "lushivf.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442013",
        "to_ids": false,
        "type": "url",
        "uuid": "79a0fb74-39f4-49d6-b8c1-7442fd4f36fa",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/c783cf1764e9201051fefc688da9e81985df9756",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442013",
        "to_ids": false,
        "type": "url",
        "uuid": "51c90f7e-6d2d-4ccc-a7bd-e26fbf9e67a8",
        "value": "https://x.com/JAMESWT_WT/status/2028380625904742532",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:13+00:00",
        "timestamp": "1772442014",
        "to_ids": false,
        "type": "url",
        "uuid": "24e32811-3396-4586-bdc6-4e371315d9ac",
        "value": "https://www.virustotal.com/gui/file/5da334eeb99fb0a64315eab4899d90a0db5a6562c406505d789eb1bbde4ed529/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:14+00:00",
        "timestamp": "1772442014",
        "to_ids": false,
        "type": "url",
        "uuid": "3530cbaf-81da-4ba0-963e-350ae2f14b7d",
        "value": "https://www.virustotal.com/gui/file/369a079956e89b337f797e4a7e8788c2ab574358c23cb907136144d9f5371e5e/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:14+00:00",
        "timestamp": "1772442014",
        "to_ids": false,
        "type": "url",
        "uuid": "b62dabef-4292-4406-affb-c01dc397db83",
        "value": "https://www.virustotal.com/gui/file/3a9c1b39fac927a569c014428d75755037c371f6bf8b3cf98dcae8bb35d8eedf/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T09:00:14+00:00",
        "timestamp": "1772442014",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e6082736-a9d4-4084-9585-28f1cc107dd2",
        "value": "116.203.167.195",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:03+00:00",
        "timestamp": "1772445604",
        "to_ids": false,
        "type": "url",
        "uuid": "a519e71f-ccd7-479d-aee1-2b5400bf22b9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f89819ca84cd6ed20999608c09e9d87ead3fa55e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:04+00:00",
        "timestamp": "1772445605",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dc6d671-4604-428b-ae82-1b8bb4e09e97",
        "value": "microsoai.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:05+00:00",
        "timestamp": "1772445606",
        "to_ids": true,
        "type": "domain",
        "uuid": "76bcd994-a27f-41bd-b98d-08a17417dd76",
        "value": "shareyourartistry.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:06+00:00",
        "timestamp": "1772445606",
        "to_ids": false,
        "type": "url",
        "uuid": "9602cd91-8441-41f4-91cb-19140b8818e4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7a0d00f8d50edd83ef462981c46ac4a2611b9d13",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:06+00:00",
        "timestamp": "1772445606",
        "to_ids": true,
        "type": "domain",
        "uuid": "95cb6b16-0e8b-4237-8fd1-72b039caaa1b",
        "value": "bricodeco.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:06+00:00",
        "timestamp": "1772445606",
        "to_ids": false,
        "type": "url",
        "uuid": "946dd494-90b2-4be9-8f12-fc4eb3e4faa4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ba29a1273db24e8315ea95cbf92706518cee5edb",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:06+00:00",
        "timestamp": "1772445607",
        "to_ids": true,
        "type": "domain",
        "uuid": "ee161417-1156-4b7a-879e-bc7bc224179f",
        "value": "seacapecod.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:07+00:00",
        "timestamp": "1772445607",
        "to_ids": false,
        "type": "url",
        "uuid": "5aeb614a-7031-4a40-a39b-45a80b92eeb6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/9ff539e4531feb36123fa5fe71b1b76d03a8ef86",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:07+00:00",
        "timestamp": "1772445607",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6b020a49-b7c7-4c56-ae3d-5e0692c1b111",
        "value": "103.27.109.117",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:07+00:00",
        "timestamp": "1772445607",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "40ad4b40-533c-4546-914e-8e2080a75631",
        "value": "108.165.100.85",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:07+00:00",
        "timestamp": "1772445607",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1c374f61-728f-4816-a58b-76eb7ff337d9",
        "value": "108.165.147.57",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:07+00:00",
        "timestamp": "1772445607",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "d15cba34-4753-4b1e-b027-9104151f7e1e",
        "value": "108.165.155.157",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:07+00:00",
        "timestamp": "1772445607",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "7d8b03cf-0cc5-4530-b1c2-57bc06a44a42",
        "value": "108.165.177.122",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "b8730360-1106-47b5-ad7b-3c2d70de2bad",
        "value": "166.88.100.64",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "6c17b089-83e5-4746-be89-cbc32831c22b",
        "value": "182.255.45.45",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fe8595d9-f50c-42d3-af6f-da7f0bef399b",
        "value": "198.20.153.140",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fbedd7bc-c767-4a12-bd44-2622a97ecab6",
        "value": "23.27.0.125",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "46c081e5-7ee8-4717-b40e-4ed937311508",
        "value": "23.27.0.237",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "655d21c6-fd44-4a9e-a083-e6103ceb6093",
        "value": "23.27.0.80",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T10:00:08+00:00",
        "timestamp": "1772445609",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1f388a19-520f-45ad-b658-ed0d79b03b4a",
        "value": "23.27.199.143",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:03+00:00",
        "timestamp": "1772449204",
        "to_ids": false,
        "type": "url",
        "uuid": "c2d0444b-a235-4eba-b8f8-6661c3dd1440",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/33b40bc68404585bf1be9d743a6e11fdb75a8ddd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:04+00:00",
        "timestamp": "1772449205",
        "to_ids": false,
        "type": "url",
        "uuid": "6e01d263-bcfb-45b6-849b-f04c33bfb453",
        "value": "https://x.com/k3yp0d/status/2028417699206857158",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:05+00:00",
        "timestamp": "1772449205",
        "to_ids": false,
        "type": "url",
        "uuid": "7e117da4-ab56-42e2-a266-d233c30afb89",
        "value": "https://www.virustotal.com/gui/file/a8c380b57cb7c381ca6ba845bd7af7333f52ee4dc4e935e98b48bb81facad72b/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:05+00:00",
        "timestamp": "1772449205",
        "to_ids": true,
        "type": "domain",
        "uuid": "2bc46d55-9ba6-436b-b48e-d005c823a6b3",
        "value": "ai-like.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:05+00:00",
        "timestamp": "1772449205",
        "to_ids": true,
        "type": "domain",
        "uuid": "b8421d44-7ea0-4732-a9e2-32ffa4b44e3d",
        "value": "bokjojo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:05+00:00",
        "timestamp": "1772449206",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b5f7215-ae32-48c7-9c38-ebfc99b58f70",
        "value": "boxic.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:06+00:00",
        "timestamp": "1772449206",
        "to_ids": true,
        "type": "domain",
        "uuid": "fef8f52f-8863-41f1-93ee-96b368ef6194",
        "value": "domawe.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:06+00:00",
        "timestamp": "1772449206",
        "to_ids": true,
        "type": "domain",
        "uuid": "69391c65-a75f-411c-b1dc-0caf4c496e2f",
        "value": "grtrip.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:06+00:00",
        "timestamp": "1772449206",
        "to_ids": true,
        "type": "domain",
        "uuid": "e04e967c-6d4c-4a5f-aae4-e4a838ff6743",
        "value": "mazafakaerindahouse.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:06+00:00",
        "timestamp": "1772449206",
        "to_ids": true,
        "type": "domain",
        "uuid": "c87a005d-8e57-4637-a347-8278fab2289e",
        "value": "nekjojo.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "nightshadec2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:06+00:00",
        "timestamp": "1772449206",
        "to_ids": true,
        "type": "domain",
        "uuid": "902af8d3-3cdb-4dcb-9564-cc8fdc60b39e",
        "value": "yaami.org",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:07+00:00",
        "timestamp": "1772449207",
        "to_ids": false,
        "type": "url",
        "uuid": "e6031f76-40cf-4206-81fc-df5d4b75724f",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/6d9952aad5791b4aee48505b7f4dbb1c6aedef79",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:07+00:00",
        "timestamp": "1772449207",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f3fb97a-39be-448d-a3f4-bece1e67caf4",
        "value": "farforshop.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "lummac2",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:07+00:00",
        "timestamp": "1772449207",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87bc6cd-e2c1-4c6a-99b6-8558c7e532e1",
        "value": "file-epq.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:07+00:00",
        "timestamp": "1772449207",
        "to_ids": false,
        "type": "url",
        "uuid": "8d47d1ed-70d7-4053-ac5f-f1082058b1d3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/61e7913056e88b80fbc84b47d0bffc451118f1e2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "plugx",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T11:00:07+00:00",
        "timestamp": "1772449208",
        "to_ids": true,
        "type": "domain",
        "uuid": "35b90565-5b95-4cac-b819-cdbe1bb6c57e",
        "value": "doorforum.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:03+00:00",
        "timestamp": "1772452804",
        "to_ids": false,
        "type": "url",
        "uuid": "09614692-f7c9-4f51-91f8-cdd5ac9a39eb",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/da0c211f6520db89224bce3a4987313e99e0cb04",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:04+00:00",
        "timestamp": "1772452805",
        "to_ids": true,
        "type": "domain",
        "uuid": "f60996f0-c510-4827-9a77-f34146677b5b",
        "value": "file436518.host40k.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:05+00:00",
        "timestamp": "1772452805",
        "to_ids": false,
        "type": "url",
        "uuid": "3fca7657-918b-424a-9026-6740573bbc88",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fad4fa56d6a6653e6612ab0fb7647857b6f36f38",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:05+00:00",
        "timestamp": "1772452805",
        "to_ids": false,
        "type": "url",
        "uuid": "9028c3de-d47d-4a3d-9113-257328faca4f",
        "value": "https://x.com/StopMalvertisin/status/2028106023228314097",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:05+00:00",
        "timestamp": "1772452806",
        "to_ids": true,
        "type": "domain",
        "uuid": "b478fbe0-7544-4f26-a626-952c8670cb62",
        "value": "host40k.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:06+00:00",
        "timestamp": "1772452806",
        "to_ids": true,
        "type": "domain",
        "uuid": "dac0bcfd-d33c-4754-bbe8-6e3d9060234a",
        "value": "sharehost13.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:06+00:00",
        "timestamp": "1772452806",
        "to_ids": true,
        "type": "domain",
        "uuid": "983f7b0e-c1f6-4572-b705-02c4a47ca2d0",
        "value": "file782747.host40k.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:06+00:00",
        "timestamp": "1772452806",
        "to_ids": true,
        "type": "domain",
        "uuid": "6bac7f4a-82c7-4aab-a516-ec1939ca66df",
        "value": "node4.sharehost13.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:06+00:00",
        "timestamp": "1772452806",
        "to_ids": false,
        "type": "url",
        "uuid": "08469e33-638c-4042-a8e1-a61ff77d00dd",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/00499fcaee1b0c1c45edb117c83a7cb25b24a774",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "sectoprat",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T12:00:07+00:00",
        "timestamp": "1772452807",
        "to_ids": false,
        "type": "url",
        "uuid": "6a0e84a1-fa52-423f-9d8d-b1437268d7fb",
        "value": "https://tria.ge/260301-qnby2aay9f/behavioral3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T13:00:02+00:00",
        "timestamp": "1772456403",
        "to_ids": false,
        "type": "url",
        "uuid": "95a3d348-e72e-4114-9e00-31964aee95c3",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e28d86299208bad9edab3036e1e87a4070d55491",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T13:00:03+00:00",
        "timestamp": "1772456404",
        "to_ids": true,
        "type": "domain",
        "uuid": "24cabcce-7ebf-4e26-b52c-e9ff77db6907",
        "value": "questionic.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:04+00:00",
        "timestamp": "1772460004",
        "to_ids": false,
        "type": "url",
        "uuid": "59ce6409-ec0a-43a0-8413-6096a3fb3e1a",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/af75795641ec1835bfc028f82e918ec295890987",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:04+00:00",
        "timestamp": "1772460005",
        "to_ids": true,
        "type": "domain",
        "uuid": "5c722bc2-406e-4083-a5cc-9a7c684f87ad",
        "value": "account-calendly.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:05+00:00",
        "timestamp": "1772460005",
        "to_ids": true,
        "type": "domain",
        "uuid": "db8870af-c28b-4fd6-b1a2-fbafb4e7e828",
        "value": "account-captcha-desk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:05+00:00",
        "timestamp": "1772460005",
        "to_ids": true,
        "type": "domain",
        "uuid": "c90bde3c-9114-4584-8438-09e7d632186e",
        "value": "accountmime.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:05+00:00",
        "timestamp": "1772460005",
        "to_ids": true,
        "type": "domain",
        "uuid": "41319bdd-de42-4511-b017-f8128a588738",
        "value": "accounts-help-center.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:05+00:00",
        "timestamp": "1772460005",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7c6e254-7ab6-4da6-b283-a2eb4e9483b4",
        "value": "admin-helpdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:05+00:00",
        "timestamp": "1772460006",
        "to_ids": true,
        "type": "domain",
        "uuid": "67905586-2bf5-4184-9667-37df8fce939f",
        "value": "mail.account-help.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:06+00:00",
        "timestamp": "1772460006",
        "to_ids": true,
        "type": "domain",
        "uuid": "47174119-626a-419c-b138-cf48367ef54c",
        "value": "ns1.account-help.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:06+00:00",
        "timestamp": "1772460006",
        "to_ids": true,
        "type": "domain",
        "uuid": "bcab7ea8-1d42-4206-8484-58967a10c0d5",
        "value": "ns2.account-help.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:06+00:00",
        "timestamp": "1772460006",
        "to_ids": true,
        "type": "domain",
        "uuid": "ec0117c7-d081-4476-a2aa-1e14d10d905f",
        "value": "redirpagesbkng.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:06+00:00",
        "timestamp": "1772460006",
        "to_ids": true,
        "type": "domain",
        "uuid": "d19bf3ae-7bd5-4328-8c81-401eeb95a83b",
        "value": "sign-in-op-token.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:06+00:00",
        "timestamp": "1772460006",
        "to_ids": true,
        "type": "domain",
        "uuid": "4bf65d8c-5a42-49fd-a430-3a845651a6f5",
        "value": "thestayreserve.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:06+00:00",
        "timestamp": "1772460007",
        "to_ids": false,
        "type": "url",
        "uuid": "de6a19e3-fad6-4041-9e58-e065fdebb93c",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/0b2bd1b6536e6aa0d8a2ed1b0031b1c5c7eaaa87",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:07+00:00",
        "timestamp": "1772460007",
        "to_ids": false,
        "type": "url",
        "uuid": "8f9b4959-23de-48ac-a8e4-15854d60d965",
        "value": "https://x.com/JAMESWT_WT/status/2028465380704883183",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:07+00:00",
        "timestamp": "1772460007",
        "to_ids": false,
        "type": "url",
        "uuid": "08fcc1c2-1d06-4a7d-bc69-6580803789a7",
        "value": "https://app.any.run/tasks/6b3e9f2a-e512-43b1-a948-2d12177b8734",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:07+00:00",
        "timestamp": "1772460007",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "17d8a425-4b05-4d85-bbe3-21725865d23e",
        "value": "77.91.65.31",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:07+00:00",
        "timestamp": "1772460007",
        "to_ids": true,
        "type": "domain",
        "uuid": "3a94bed6-358d-43d7-90c8-b33f3c4008e4",
        "value": "bookstablesoon.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:07+00:00",
        "timestamp": "1772460007",
        "to_ids": true,
        "type": "domain",
        "uuid": "596aaeea-029d-48af-9df1-c8d3f0fd3de5",
        "value": "checkpulses.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:07+00:00",
        "timestamp": "1772460007",
        "to_ids": true,
        "type": "domain",
        "uuid": "b4d7ad8c-7065-4215-b3f7-f1399d6f626f",
        "value": "stayonbokablesol.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:08+00:00",
        "timestamp": "1772460008",
        "to_ids": false,
        "type": "url",
        "uuid": "c80e0de7-aa82-4366-a83c-9c4db970e278",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5c1acf5b013197f889e311db54276d202c943acd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:08+00:00",
        "timestamp": "1772460008",
        "to_ids": true,
        "type": "domain",
        "uuid": "7503f0f4-c0a4-42c8-8fc8-6288c96690cf",
        "value": "acconthelpdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:08+00:00",
        "timestamp": "1772460008",
        "to_ids": true,
        "type": "domain",
        "uuid": "90c0307f-36d4-406c-8af3-02cb3271030b",
        "value": "account-help.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:08+00:00",
        "timestamp": "1772460008",
        "to_ids": true,
        "type": "domain",
        "uuid": "47c01fe3-edaa-44ae-b2dd-cf57c68ac694",
        "value": "account-helpdesk.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:08+00:00",
        "timestamp": "1772460008",
        "to_ids": true,
        "type": "domain",
        "uuid": "0cf32a10-8a05-4bd9-ba7a-bc38bf46fc99",
        "value": "account-helpdesk.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:08+00:00",
        "timestamp": "1772460008",
        "to_ids": true,
        "type": "domain",
        "uuid": "93656186-c345-48f6-a070-c0bc75a0dcb4",
        "value": "account-helpdesk.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460009",
        "to_ids": true,
        "type": "domain",
        "uuid": "a454df53-44b9-42d5-9d03-384fa5881357",
        "value": "account-helps-desk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460009",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb005d75-1311-4775-8e8c-4f0510c39ea8",
        "value": "account-updatepulse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460009",
        "to_ids": true,
        "type": "domain",
        "uuid": "b979267f-bd08-4c1d-bf1d-8b9bbb8eb697",
        "value": "accountpulse.help",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460009",
        "to_ids": true,
        "type": "domain",
        "uuid": "b87de7e3-2e1f-4890-92d4-d92867c98c98",
        "value": "admin-activitycheck.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460009",
        "to_ids": true,
        "type": "domain",
        "uuid": "ef894923-d007-4f9d-9494-ba0bae965ce7",
        "value": "admin.boikng.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460009",
        "to_ids": true,
        "type": "domain",
        "uuid": "5e99b8ad-9313-4aa2-aa0c-8bd1c466aed6",
        "value": "backend-dev.cdsuwxs.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:09+00:00",
        "timestamp": "1772460010",
        "to_ids": true,
        "type": "domain",
        "uuid": "a102d4d2-083e-43ac-a0d2-383c4acd3cdb",
        "value": "boikng.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:10+00:00",
        "timestamp": "1772460010",
        "to_ids": true,
        "type": "domain",
        "uuid": "a845d0b2-95f1-481d-b473-55a31ca9bbad",
        "value": "booking.com-hubpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:10+00:00",
        "timestamp": "1772460010",
        "to_ids": true,
        "type": "domain",
        "uuid": "104a8b38-8b47-4df7-863b-366de4014e41",
        "value": "cdsuwxs.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:10+00:00",
        "timestamp": "1772460010",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b3436e4-9c07-41ef-9b63-f7a76b66f035",
        "value": "checkaccountactivity.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:11+00:00",
        "timestamp": "1772460011",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4f2ac79-7e80-44d8-9601-05cfe08b8cc5",
        "value": "checkhelpdesk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:11+00:00",
        "timestamp": "1772460011",
        "to_ids": true,
        "type": "domain",
        "uuid": "82be7619-4ef4-4182-98e3-f3e22561cc20",
        "value": "com-hubpartners.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:11+00:00",
        "timestamp": "1772460011",
        "to_ids": true,
        "type": "domain",
        "uuid": "02d30dc3-5361-4b7d-a95a-2f825f2cca89",
        "value": "czehiavin.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:11+00:00",
        "timestamp": "1772460011",
        "to_ids": true,
        "type": "domain",
        "uuid": "853e3ca6-9b05-4ba0-9797-b544b3324fd4",
        "value": "czvineta.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:11+00:00",
        "timestamp": "1772460011",
        "to_ids": true,
        "type": "domain",
        "uuid": "081b442e-1b34-469c-b62b-ae1cb1806d2d",
        "value": "czzvineta.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:11+00:00",
        "timestamp": "1772460012",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6f53baf-fd38-4689-b54e-8e9511b96ca6",
        "value": "dannyveghs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:12+00:00",
        "timestamp": "1772460012",
        "to_ids": true,
        "type": "domain",
        "uuid": "99cbe77b-cbfd-4dc8-8d5f-c9e2c46ecb09",
        "value": "dev.cdsuwxs.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:12+00:00",
        "timestamp": "1772460012",
        "to_ids": true,
        "type": "domain",
        "uuid": "46df2a26-7146-4425-9620-4cbacd4686fb",
        "value": "edailnice-cz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:12+00:00",
        "timestamp": "1772460012",
        "to_ids": true,
        "type": "domain",
        "uuid": "d10d16be-5b87-4c0a-a09c-bcf4736b4b52",
        "value": "edailnicez.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:12+00:00",
        "timestamp": "1772460012",
        "to_ids": true,
        "type": "domain",
        "uuid": "17da98a5-b063-47b7-aab9-a2e295e85993",
        "value": "edanice-cz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:12+00:00",
        "timestamp": "1772460012",
        "to_ids": true,
        "type": "domain",
        "uuid": "2fe14b95-c3e9-41e6-922b-059b04fa87cf",
        "value": "edanice.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:12+00:00",
        "timestamp": "1772460013",
        "to_ids": true,
        "type": "domain",
        "uuid": "7654b24a-8ba1-4496-a7b2-f1c00119e890",
        "value": "edanicecz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:13+00:00",
        "timestamp": "1772460013",
        "to_ids": true,
        "type": "domain",
        "uuid": "e900ae18-2e73-4a8a-94fe-0dc3423bf6f0",
        "value": "edarsite.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:13+00:00",
        "timestamp": "1772460013",
        "to_ids": true,
        "type": "domain",
        "uuid": "24077e00-c4e9-4c9e-aaae-68d124f36531",
        "value": "edlinice-cz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:13+00:00",
        "timestamp": "1772460013",
        "to_ids": true,
        "type": "domain",
        "uuid": "26723d8e-b01f-460d-95e8-2c22e0ae9138",
        "value": "edlinicecz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:13+00:00",
        "timestamp": "1772460013",
        "to_ids": true,
        "type": "domain",
        "uuid": "321ca3dd-e4e8-46b3-84a6-784e7d1ef4bb",
        "value": "eviinet-si.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:13+00:00",
        "timestamp": "1772460013",
        "to_ids": true,
        "type": "domain",
        "uuid": "52459eed-3ac4-4c4d-9071-cf67bc4397c6",
        "value": "evijetas.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:13+00:00",
        "timestamp": "1772460014",
        "to_ids": true,
        "type": "domain",
        "uuid": "7a094db0-e538-4682-ba4e-c17e41e991ae",
        "value": "evinnet-si.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:14+00:00",
        "timestamp": "1772460014",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f8f6db0-0235-4364-83c3-0bf5f6683088",
        "value": "evinnett-si.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:14+00:00",
        "timestamp": "1772460014",
        "to_ids": true,
        "type": "domain",
        "uuid": "e1c2f590-f97e-486d-9b45-996df6a2ef14",
        "value": "gobooking.cc",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:14+00:00",
        "timestamp": "1772460014",
        "to_ids": true,
        "type": "domain",
        "uuid": "72557fbe-0fbe-4a7e-8cf6-56b3ca5194f1",
        "value": "help-desk-account.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:14+00:00",
        "timestamp": "1772460014",
        "to_ids": true,
        "type": "domain",
        "uuid": "16d79cd6-6286-46ee-b515-dadd0787f2f3",
        "value": "helpdeskpulse.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:14+00:00",
        "timestamp": "1772460014",
        "to_ids": true,
        "type": "domain",
        "uuid": "cb87636e-e9c3-4163-be00-701c73c20072",
        "value": "hoteltasker.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:14+00:00",
        "timestamp": "1772460015",
        "to_ids": true,
        "type": "domain",
        "uuid": "1b7580aa-9050-4a06-b46b-df62a5af463c",
        "value": "keytel.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:15+00:00",
        "timestamp": "1772460015",
        "to_ids": true,
        "type": "domain",
        "uuid": "37b61661-cac9-4b4f-b732-5ef00d3b546b",
        "value": "learning-script.co.uk",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:15+00:00",
        "timestamp": "1772460015",
        "to_ids": true,
        "type": "domain",
        "uuid": "c891629c-82cc-4519-b3d1-cb31cccf7dc8",
        "value": "lovehun.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:15+00:00",
        "timestamp": "1772460015",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3d35a7e-babf-4b1e-9f7b-48d17b5e2402",
        "value": "marketing-travel-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:15+00:00",
        "timestamp": "1772460015",
        "to_ids": true,
        "type": "domain",
        "uuid": "fcd71d7f-00fe-4395-b354-80b5ced97bce",
        "value": "mulia77menang.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:15+00:00",
        "timestamp": "1772460015",
        "to_ids": true,
        "type": "domain",
        "uuid": "697f91f0-5f7b-4b87-9e59-0e11d40847bb",
        "value": "page-redirector.top",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:15+00:00",
        "timestamp": "1772460016",
        "to_ids": true,
        "type": "domain",
        "uuid": "50807a26-94c6-4ce6-a5af-fe6c32bed650",
        "value": "pre-register-v14.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:16+00:00",
        "timestamp": "1772460016",
        "to_ids": true,
        "type": "domain",
        "uuid": "69694191-7bf6-4a49-a6d7-5dd58d666980",
        "value": "prjbk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:16+00:00",
        "timestamp": "1772460016",
        "to_ids": true,
        "type": "domain",
        "uuid": "37278d3b-008b-4b99-a12e-c0d9890071db",
        "value": "prjbooking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:16+00:00",
        "timestamp": "1772460016",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b2be19e-ffb2-4440-90fa-c956e5ecb7aa",
        "value": "promote-booking.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:16+00:00",
        "timestamp": "1772460016",
        "to_ids": true,
        "type": "domain",
        "uuid": "6229ec14-2651-42d0-9f9e-e5333ce7517a",
        "value": "pulse-help-desk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:16+00:00",
        "timestamp": "1772460016",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5781883-7c51-4168-858f-7fb0f4d99e32",
        "value": "reducaodetaxa.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:16+00:00",
        "timestamp": "1772460017",
        "to_ids": true,
        "type": "domain",
        "uuid": "e44ea56a-cf83-40dc-b5b5-81b29c7c48f1",
        "value": "rtpmulia77play.cfd",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:17+00:00",
        "timestamp": "1772460017",
        "to_ids": true,
        "type": "domain",
        "uuid": "62923de5-650e-4d38-84b8-1cd567f3e5cb",
        "value": "rtpmulia77play.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:17+00:00",
        "timestamp": "1772460017",
        "to_ids": true,
        "type": "domain",
        "uuid": "ff858740-b6a3-4c50-badf-b84e35fa2284",
        "value": "rtpmulia77play.mom",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:17+00:00",
        "timestamp": "1772460017",
        "to_ids": true,
        "type": "domain",
        "uuid": "efd8b17a-3290-4160-8c81-aa62912e20c3",
        "value": "rtpmulia77play.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:17+00:00",
        "timestamp": "1772460017",
        "to_ids": true,
        "type": "domain",
        "uuid": "595caff5-2da6-40aa-8f38-027b6167dce0",
        "value": "rtpmulia77play.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:17+00:00",
        "timestamp": "1772460017",
        "to_ids": true,
        "type": "domain",
        "uuid": "25f5088e-45de-4fa1-8cad-0d2cc78fc864",
        "value": "skyhustler.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:17+00:00",
        "timestamp": "1772460018",
        "to_ids": true,
        "type": "domain",
        "uuid": "08719866-a029-4c52-90a5-061e0913dc20",
        "value": "taxaadmistraviva.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:18+00:00",
        "timestamp": "1772460018",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4d543a2-0b6b-40ca-8947-86488920d3d6",
        "value": "thepulseactivity.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:18+00:00",
        "timestamp": "1772460018",
        "to_ids": true,
        "type": "domain",
        "uuid": "142cf552-77d0-4073-a089-edf9b5e4d5bd",
        "value": "travel-booking.it.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:18+00:00",
        "timestamp": "1772460018",
        "to_ids": true,
        "type": "domain",
        "uuid": "908cf481-b3ee-4f66-bed0-1f45ebce74aa",
        "value": "viguennte.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:18+00:00",
        "timestamp": "1772460018",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa0300ad-6109-4035-aab9-8a631356b46c",
        "value": "viguentes.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:18+00:00",
        "timestamp": "1772460018",
        "to_ids": true,
        "type": "domain",
        "uuid": "99dfd1eb-cda2-4548-92fa-f485fa3ff70b",
        "value": "vincarscz.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:19+00:00",
        "timestamp": "1772460019",
        "to_ids": true,
        "type": "domain",
        "uuid": "9fbeed3e-4571-4270-9a3d-35bc9377a4f4",
        "value": "vinetaczc.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:19+00:00",
        "timestamp": "1772460019",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b903d3e-9a74-45a2-a15c-e47a67b6df91",
        "value": "vinuetis.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:19+00:00",
        "timestamp": "1772460019",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e34c360-c73b-4694-8229-0fa4d53f5366",
        "value": "voucherspider.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ek_clearfake",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:19+00:00",
        "timestamp": "1772460019",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d7c58c3-18da-4d23-8340-5c173a251cf5",
        "value": "woolora.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:19+00:00",
        "timestamp": "1772460019",
        "to_ids": false,
        "type": "url",
        "uuid": "b1f3c5fb-5be0-45de-ac86-b4f2810809c0",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/8d79be0b0d247bc509d96dac3be62a16c364cc64",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:19+00:00",
        "timestamp": "1772460019",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d7b2226-444c-4b0f-8873-a48816ee5313",
        "value": "main-8i4.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460020",
        "to_ids": false,
        "type": "url",
        "uuid": "4dcdf48a-4192-4fb0-b603-d1476a1d5d66",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/5be26c61dea781592822fc4170d45df07e02da0d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460020",
        "to_ids": true,
        "type": "domain",
        "uuid": "0251b4c9-b3bd-4a33-838f-fb087528699b",
        "value": "grace-ayodele.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460020",
        "to_ids": true,
        "type": "domain",
        "uuid": "39f48aa6-0b37-42f8-bb0b-ec00a7cb2f5d",
        "value": "wild-mud-21fa.grace-ayodele.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_lazarus",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460020",
        "to_ids": true,
        "type": "domain",
        "uuid": "cd71b8e6-81bb-4197-a967-473cfa480f52",
        "value": "shrill-breeze-e0f.grace-ayodele.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460020",
        "to_ids": false,
        "type": "url",
        "uuid": "84de7d12-6845-43db-ba46-6c4ce1704d04",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/14e98ae8c9710dea377a6c82dbd672ec6d4fa0b3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460020",
        "to_ids": true,
        "type": "domain",
        "uuid": "7d95b9e1-3918-4a9f-b461-969e6363e248",
        "value": "a2aautonomous.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:20+00:00",
        "timestamp": "1772460021",
        "to_ids": true,
        "type": "domain",
        "uuid": "3dedbf90-4344-4d50-b6a9-533c19c636c0",
        "value": "a2achatbot.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:21+00:00",
        "timestamp": "1772460021",
        "to_ids": true,
        "type": "domain",
        "uuid": "af97ad0c-0271-4654-8b5a-3ef6d379799e",
        "value": "a2acurrency.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:21+00:00",
        "timestamp": "1772460021",
        "to_ids": true,
        "type": "domain",
        "uuid": "397d5b29-8e81-4412-bc6a-6f2629c05f7e",
        "value": "a2aimpact.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:00:21+00:00",
        "timestamp": "1772460021",
        "to_ids": true,
        "type": "domain",
        "uuid": "85c69022-87df-4a39-8089-ba5437fc4e3d",
        "value": "a2amodeling.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:03+00:00",
        "timestamp": "1772463604",
        "to_ids": false,
        "type": "url",
        "uuid": "878838b0-6154-44d2-8c1c-882e28b12947",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/076b3f1b3eadba3054e7c23e3f0b52749413d3f7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:04+00:00",
        "timestamp": "1772463605",
        "to_ids": false,
        "type": "url",
        "uuid": "1c5ef55c-5740-4b56-be01-a0c5fb253f78",
        "value": "https://x.com/sdcyberresearch/status/2028457016478281931",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:05+00:00",
        "timestamp": "1772463605",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c3c70d1-9a69-47e7-a0b7-a9ea2b1fcd0b",
        "value": "cdn-cloudauth.net",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:05+00:00",
        "timestamp": "1772463605",
        "to_ids": true,
        "type": "domain",
        "uuid": "1bcb47ee-a5d3-4331-9a93-33b68b505ee8",
        "value": "zip-check.online",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_muddywater",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:05+00:00",
        "timestamp": "1772463606",
        "to_ids": false,
        "type": "url",
        "uuid": "1b03f0bb-9cad-4b57-bd94-0f3cd71fefed",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/31b8a46ffd25034696ee4b8ab9e72f77460d6fa8",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_muddywater",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:06+00:00",
        "timestamp": "1772463606",
        "to_ids": false,
        "type": "url",
        "uuid": "552cfb02-a339-4154-b028-c7b7b5a47829",
        "value": "https://x.com/k3yp0d/status/2028466573694890280",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:07+00:00",
        "timestamp": "1772463607",
        "to_ids": false,
        "type": "url",
        "uuid": "bedfee06-4a1c-4a0c-a901-63ddf5f07201",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/7b38a8d5cd6d3237f3f5786e3c0202b7124e0c0c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:07+00:00",
        "timestamp": "1772463607",
        "to_ids": false,
        "type": "url",
        "uuid": "a975fbc6-3b1d-410c-9674-62a2302fc7db",
        "value": "https://x.com/JAMESWT_WT/status/2028467782589796577",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:07+00:00",
        "timestamp": "1772463608",
        "to_ids": false,
        "type": "url",
        "uuid": "59b2ab9d-6741-4281-b237-d4c4bfa9a76c",
        "value": "https://x.com/JAMESWT_WT/status/2028468660696731907",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:08+00:00",
        "timestamp": "1772463608",
        "to_ids": false,
        "type": "url",
        "uuid": "139361ca-9bb4-4428-a0f2-0a3c5ca47990",
        "value": "https://www.virustotal.com/gui/ip-address/62.164.177.230/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:08+00:00",
        "timestamp": "1772463608",
        "to_ids": false,
        "type": "url",
        "uuid": "6e56964b-21e6-4bfa-86ca-bcf73a1a88d5",
        "value": "https://www.virustotal.com/gui/file/ab00b169603439a8dd06a7b8a61d66a4893f33dc5b0b6466e3d5c16222361eb2/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:08+00:00",
        "timestamp": "1772463608",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "87ddbc14-65a6-407a-a3a8-0de31c52c42c",
        "value": "62.164.177.230",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:08+00:00",
        "timestamp": "1772463608",
        "to_ids": true,
        "type": "domain",
        "uuid": "f78f5d2c-5391-4257-9bab-31400bd8befe",
        "value": "becauseineed.live",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:08+00:00",
        "timestamp": "1772463609",
        "to_ids": true,
        "type": "domain",
        "uuid": "205e87ee-4dc2-4df3-af25-0adb3826e028",
        "value": "cloflart.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:09+00:00",
        "timestamp": "1772463609",
        "to_ids": true,
        "type": "domain",
        "uuid": "c31b0fb6-eab5-466e-9ae1-694a76c16eff",
        "value": "futalong.space",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:09+00:00",
        "timestamp": "1772463609",
        "to_ids": true,
        "type": "domain",
        "uuid": "b1d5c053-e07e-4e9b-b1bc-bad27f15b21b",
        "value": "howtofix.rest",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:09+00:00",
        "timestamp": "1772463609",
        "to_ids": true,
        "type": "domain",
        "uuid": "77470367-f6e1-4393-87a0-82b551cea1dd",
        "value": "nobovcs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:09+00:00",
        "timestamp": "1772463609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e312cdd6-7202-42dc-bc7d-1d6a15015a96",
        "value": "quicrob.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:09+00:00",
        "timestamp": "1772463609",
        "to_ids": true,
        "type": "domain",
        "uuid": "12b3497c-920e-41cd-91f9-352e76a56eaf",
        "value": "whovcs.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:09+00:00",
        "timestamp": "1772463610",
        "to_ids": true,
        "type": "domain",
        "uuid": "71d3d537-e61a-47ae-b2b7-795e00e29c42",
        "value": "gologpoint.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:10+00:00",
        "timestamp": "1772463610",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac04c9da-0a81-4f90-8ccd-7ccb846db583",
        "value": "josehpjon.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:10+00:00",
        "timestamp": "1772463610",
        "to_ids": true,
        "type": "domain",
        "uuid": "0f74449a-3ebf-4f01-a793-62ca4c579d82",
        "value": "proposalsantetic.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:10+00:00",
        "timestamp": "1772463610",
        "to_ids": true,
        "type": "domain",
        "uuid": "9d87bfee-13ba-424d-a82c-5742013a57ed",
        "value": "thesolnov.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:10+00:00",
        "timestamp": "1772463610",
        "to_ids": true,
        "type": "domain",
        "uuid": "8e17b412-ab57-41d6-aaa6-0f9ce829a0b7",
        "value": "wheregoesdown.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "netsupport",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T15:00:10+00:00",
        "timestamp": "1772463610",
        "to_ids": true,
        "type": "domain",
        "uuid": "0dfafbd8-76f0-46b5-958f-52eca84f2c8c",
        "value": "whoiamsal.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:03+00:00",
        "timestamp": "1772470805",
        "to_ids": false,
        "type": "url",
        "uuid": "398652f5-ccaf-4bad-9b18-4f980d399320",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/f2ee5005219530357ed2dc24cb3dc878d7f514ea",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:05+00:00",
        "timestamp": "1772470805",
        "to_ids": false,
        "type": "url",
        "uuid": "b4418cfa-da6a-4056-b82d-be63589a13a3",
        "value": "https://www.virustotal.com/gui/ip-address/150.241.203.71/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:05+00:00",
        "timestamp": "1772470805",
        "to_ids": true,
        "type": "domain",
        "uuid": "fabdcfa0-505d-469a-9a37-2f3fe636ec6c",
        "value": "woocommerce.ink",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:06+00:00",
        "timestamp": "1772470806",
        "to_ids": false,
        "type": "url",
        "uuid": "c7158044-c8e2-4410-b0d6-02b64daa9cb6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/067db5b63c9107bd1f617148f8cb00724d64ff53",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:06+00:00",
        "timestamp": "1772470806",
        "to_ids": false,
        "type": "url",
        "uuid": "7e1ca220-0f0c-4337-92ac-9da631d75aba",
        "value": "https://www.virustotal.com/gui/ip-address/2.59.218.161/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:06+00:00",
        "timestamp": "1772470806",
        "to_ids": true,
        "type": "domain",
        "uuid": "49528c20-3cdc-4a25-b953-253cd22aed37",
        "value": "seotagmanager.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:06+00:00",
        "timestamp": "1772470806",
        "to_ids": false,
        "type": "url",
        "uuid": "8f1d83a6-a9bd-4b99-bdef-30b835f63d90",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/ab51a4c71b9ab0e56992be7403a60d4f9d6d022d",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "wp_inject",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:06+00:00",
        "timestamp": "1772470806",
        "to_ids": true,
        "type": "domain",
        "uuid": "49e55b0b-4ffa-4a32-84f0-0dcaa22c864e",
        "value": "staticimagedelivery.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:06+00:00",
        "timestamp": "1772470807",
        "to_ids": false,
        "type": "url",
        "uuid": "38f37733-088b-4722-b6b9-759bfdc36d53",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/e8b879a88c5297abaf144b4f9aa5f342a348d13b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:07+00:00",
        "timestamp": "1772470807",
        "to_ids": false,
        "type": "url",
        "uuid": "0e4daafb-7312-4c9b-8b93-bda411344121",
        "value": "https://www.virustotal.com/gui/ip-address/158.94.208.223/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "magentocore",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T17:00:07+00:00",
        "timestamp": "1772470807",
        "to_ids": true,
        "type": "domain",
        "uuid": "1e31971e-15e0-40cf-aa83-2623047c5ffc",
        "value": "woostaticcdn.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T19:00:02+00:00",
        "timestamp": "1772478002",
        "to_ids": false,
        "type": "url",
        "uuid": "02a20ca8-9361-4de7-a297-ec60623a81b9",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/be34bb2218b4fa05415439a352eb35281baf7376",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T19:00:02+00:00",
        "timestamp": "1772478002",
        "to_ids": false,
        "type": "url",
        "uuid": "8e7e29a7-f7f4-4933-8f15-2e3d46297ac4",
        "value": "https://x.com/Ghostyak/status/2028365739762323777",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T19:00:02+00:00",
        "timestamp": "1772478003",
        "to_ids": false,
        "type": "url",
        "uuid": "ae62fcdc-5136-4877-983b-76409d830552",
        "value": "https://www.virustotal.com/gui/ip-address/101.36.114.231/relations",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_kimsuky",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T19:00:03+00:00",
        "timestamp": "1772478004",
        "to_ids": true,
        "type": "domain",
        "uuid": "c5ed34a6-c745-4478-a940-2dfd716406f9",
        "value": "ndocpass.dns.army",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:03+00:00",
        "timestamp": "1772481605",
        "to_ids": false,
        "type": "url",
        "uuid": "27e6becc-662c-4870-b36b-46c1576ee8ae",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b7219f34f2f4c2fd5e4e67debd3b5ce3402782c3",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:05+00:00",
        "timestamp": "1772481605",
        "to_ids": false,
        "type": "url",
        "uuid": "4e2bb804-e444-4dd0-88e4-50164aeef377",
        "value": "https://x.com/smica83/status/2028550728633958406",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:05+00:00",
        "timestamp": "1772481606",
        "to_ids": true,
        "type": "domain",
        "uuid": "eca12788-88f8-4945-a293-64b013dbb2f6",
        "value": "jacket-travelling-respond-lawyer.trycloudflare.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:06+00:00",
        "timestamp": "1772481606",
        "to_ids": false,
        "type": "url",
        "uuid": "e566530a-e71a-4118-9247-4d8aa6fd1673",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/b1746197022348b4cbbdacbc3271f1620f737d0b",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:06+00:00",
        "timestamp": "1772481606",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f5a7552-9166-4297-837a-fc727eaee52c",
        "value": "207-e-walter.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:06+00:00",
        "timestamp": "1772481606",
        "to_ids": true,
        "type": "domain",
        "uuid": "ce32073d-01ce-4bd2-9b1b-a318cea1a257",
        "value": "anythingshere.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:06+00:00",
        "timestamp": "1772481607",
        "to_ids": true,
        "type": "domain",
        "uuid": "d11cc79b-2648-4c41-860d-e209d39abd1e",
        "value": "cside.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:07+00:00",
        "timestamp": "1772481607",
        "to_ids": true,
        "type": "domain",
        "uuid": "26cccdcb-214a-48ef-8f33-a8240cd0c6d1",
        "value": "cywofio2.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:07+00:00",
        "timestamp": "1772481607",
        "to_ids": true,
        "type": "domain",
        "uuid": "4b478962-6917-423d-94d0-0a84ddaaeb24",
        "value": "digitaleconomy.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:07+00:00",
        "timestamp": "1772481607",
        "to_ids": true,
        "type": "domain",
        "uuid": "3c40ac08-df63-4be0-8162-f32595915c05",
        "value": "digitallcomunity.xyz",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:07+00:00",
        "timestamp": "1772481607",
        "to_ids": true,
        "type": "domain",
        "uuid": "0b3a6c26-84d2-4323-9fc7-bc6c177cddb6",
        "value": "fashionmodels.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:07+00:00",
        "timestamp": "1772481607",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f13cd4d-09ca-4f41-8bb6-388005ef3768",
        "value": "findbesthotels.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:07+00:00",
        "timestamp": "1772481608",
        "to_ids": true,
        "type": "domain",
        "uuid": "1f8dfb89-ad9d-4de4-bb2f-13db4a108f51",
        "value": "footballclub.sbs",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:08+00:00",
        "timestamp": "1772481608",
        "to_ids": true,
        "type": "domain",
        "uuid": "822f55a2-864f-484f-b22d-7f7b1314d923",
        "value": "footballfans.asia",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:08+00:00",
        "timestamp": "1772481608",
        "to_ids": true,
        "type": "domain",
        "uuid": "60ce02be-f0b5-4e06-ac11-5a499c7471f4",
        "value": "formacja.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:08+00:00",
        "timestamp": "1772481608",
        "to_ids": true,
        "type": "domain",
        "uuid": "663052d1-f8b0-4412-b629-773c2dc21f81",
        "value": "garbagecollector.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:08+00:00",
        "timestamp": "1772481608",
        "to_ids": true,
        "type": "domain",
        "uuid": "38706aa7-e008-497f-8a15-fc6a6d6afbab",
        "value": "justweb.click",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:08+00:00",
        "timestamp": "1772481608",
        "to_ids": true,
        "type": "domain",
        "uuid": "2619b441-a73e-417e-83bd-32f5b2b95849",
        "value": "luckywavez.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:08+00:00",
        "timestamp": "1772481609",
        "to_ids": true,
        "type": "domain",
        "uuid": "cc664f85-cbae-4035-8b0b-baf31b2c7951",
        "value": "mancpr.icu",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:09+00:00",
        "timestamp": "1772481609",
        "to_ids": true,
        "type": "domain",
        "uuid": "b37f5085-6974-4097-8d8e-79e5900cc16f",
        "value": "menclub.lt",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:09+00:00",
        "timestamp": "1772481609",
        "to_ids": true,
        "type": "domain",
        "uuid": "adab2fad-0a11-45ee-88cd-e08728a71671",
        "value": "musiclivetrack.website",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:09+00:00",
        "timestamp": "1772481609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e3a81d8b-3745-42ac-b191-d2061da3e721",
        "value": "ntcx.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:09+00:00",
        "timestamp": "1772481609",
        "to_ids": true,
        "type": "domain",
        "uuid": "e0f6c03e-5c78-4872-bdb8-21320f794fcb",
        "value": "phoneaccessory.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:09+00:00",
        "timestamp": "1772481609",
        "to_ids": true,
        "type": "domain",
        "uuid": "f80017e2-b3f1-4461-b6e7-ecdd395bde49",
        "value": "programmingcourse.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:10+00:00",
        "timestamp": "1772481610",
        "to_ids": true,
        "type": "domain",
        "uuid": "8576c78e-a197-47e1-91ce-2fc83567eba7",
        "value": "retseptik.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:10+00:00",
        "timestamp": "1772481610",
        "to_ids": true,
        "type": "domain",
        "uuid": "9a9c92a5-10a8-4276-bdc4-34c445fcf908",
        "value": "sportscarshop.lol",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:10+00:00",
        "timestamp": "1772481610",
        "to_ids": true,
        "type": "domain",
        "uuid": "eab9e04c-1d96-471b-9091-35e2c69ca3bb",
        "value": "steelweight.mobi",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:10+00:00",
        "timestamp": "1772481610",
        "to_ids": true,
        "type": "domain",
        "uuid": "05a03765-df5a-40dc-b4ea-66bbe8e624aa",
        "value": "stone110.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:10+00:00",
        "timestamp": "1772481610",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f87c081-cb73-4f9e-8163-ebbf4cc02bb8",
        "value": "testold.tender.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:10+00:00",
        "timestamp": "1772481611",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf016c74-fdc9-45cb-bc10-636697fd43eb",
        "value": "wehakaa2.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:11+00:00",
        "timestamp": "1772481611",
        "to_ids": false,
        "type": "url",
        "uuid": "d6d67c09-882e-454b-9a44-e83be95952ba",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/2ee6eab8cf32082b5914e92f79a8fc8b3ca64b51",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:11+00:00",
        "timestamp": "1772481611",
        "to_ids": false,
        "type": "url",
        "uuid": "fa1a1ce3-34b8-4bf1-bb59-81b89ad008a4",
        "value": "https://www.zscaler.com/blogs/security-research/dust-specter-apt-targets-government-officials-iraq",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:11+00:00",
        "timestamp": "1772481611",
        "to_ids": true,
        "type": "domain",
        "uuid": "94ec6ccf-6b02-4aa6-91e7-628eb9f1b44d",
        "value": "afterworld.store",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:11+00:00",
        "timestamp": "1772481611",
        "to_ids": true,
        "type": "domain",
        "uuid": "f8a78652-bb2a-487d-af92-092d212e3293",
        "value": "girlsbags.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:11+00:00",
        "timestamp": "1772481611",
        "to_ids": true,
        "type": "domain",
        "uuid": "594d4dc0-aab2-43be-9076-c51a8902a0f2",
        "value": "lecturegenieltd.pro",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:11+00:00",
        "timestamp": "1772481612",
        "to_ids": true,
        "type": "domain",
        "uuid": "ebe419e5-ba2d-494d-a07b-f90bc0bc2e72",
        "value": "meetingapp.site",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:12+00:00",
        "timestamp": "1772481612",
        "to_ids": true,
        "type": "domain",
        "uuid": "a3881faa-b537-4e76-bad4-19743f1d1fda",
        "value": "onlinepettools.shop",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:12+00:00",
        "timestamp": "1772481612",
        "to_ids": true,
        "type": "domain",
        "uuid": "c89c7d63-9618-46c2-b93e-b07539db1da4",
        "value": "web14.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_dustspecter",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:12+00:00",
        "timestamp": "1772481612",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f465771-bf37-46d1-b956-6de1ce8ea007",
        "value": "web27.info",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:12+00:00",
        "timestamp": "1772481612",
        "to_ids": false,
        "type": "url",
        "uuid": "19f1ca8d-c91d-4511-863e-febd4b1c21f4",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/47d8664cd60577a6a6fa99d060144052693b38a6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:12+00:00",
        "timestamp": "1772481612",
        "to_ids": false,
        "type": "url",
        "uuid": "3b78b96a-72cd-40dc-a4b0-585344332eaa",
        "value": "https://gi7w0rm.medium.com/amos-stealer-malext-variant-spread-in-a-global-malvertising-campaign-using-free-text-sharing-4d240e11d7e2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:12+00:00",
        "timestamp": "1772481612",
        "to_ids": false,
        "type": "url",
        "uuid": "7423e847-c608-4426-9fc2-fa8d8b8917b6",
        "value": "https://github.com/Gi7w0rm/Blogposts/blob/main/AMOSStealerMalext/IoC_AMOSCampaign.txt",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:13+00:00",
        "timestamp": "1772481613",
        "to_ids": true,
        "type": "domain",
        "uuid": "a578e8bf-261a-450b-be57-339c9216dfae",
        "value": "vagturk.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:13+00:00",
        "timestamp": "1772481613",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d013ed3-52f3-4a07-bbc9-51c3c05f9040",
        "value": "alfred-5-app-for-macos.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:13+00:00",
        "timestamp": "1772481613",
        "to_ids": true,
        "type": "domain",
        "uuid": "aeda68f5-7305-4a16-a648-539053921612",
        "value": "alfred-5-for-macos.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:13+00:00",
        "timestamp": "1772481613",
        "to_ids": true,
        "type": "domain",
        "uuid": "ba33c0a3-1826-45a6-b8f6-839451599ed4",
        "value": "apple-mac-hidden-file.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:13+00:00",
        "timestamp": "1772481613",
        "to_ids": true,
        "type": "domain",
        "uuid": "7c64fd03-040d-44c2-99da-00e042671305",
        "value": "apple-mac-hidden-issues-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:13+00:00",
        "timestamp": "1772481613",
        "to_ids": true,
        "type": "domain",
        "uuid": "1844abbe-8b54-4494-aea1-69a5bbc9eb2e",
        "value": "apple-mac-hidden-space-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:14+00:00",
        "timestamp": "1772481614",
        "to_ids": true,
        "type": "domain",
        "uuid": "b535d74f-553e-4917-b787-6c2364cde81d",
        "value": "apple-mac-storage-base.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:14+00:00",
        "timestamp": "1772481614",
        "to_ids": true,
        "type": "domain",
        "uuid": "64c052fa-2cbe-4d33-8a80-9b9cb2263f13",
        "value": "apple-mac-storage-issues-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:14+00:00",
        "timestamp": "1772481614",
        "to_ids": true,
        "type": "domain",
        "uuid": "7e5510ce-3022-461e-a637-2a9910b95fa6",
        "value": "apple-mac-system-hidden.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:14+00:00",
        "timestamp": "1772481614",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d505bef-5edd-4be2-9a4c-aea4a15863f5",
        "value": "apple-macos-disk-space-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:14+00:00",
        "timestamp": "1772481615",
        "to_ids": true,
        "type": "domain",
        "uuid": "7b8ca408-86cf-431b-889a-5994650a2ae1",
        "value": "apple-page-186.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:15+00:00",
        "timestamp": "1772481615",
        "to_ids": true,
        "type": "domain",
        "uuid": "45794417-e68e-4ff4-9d8b-4277787d103d",
        "value": "apple-page-6366.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:15+00:00",
        "timestamp": "1772481615",
        "to_ids": true,
        "type": "domain",
        "uuid": "9c4d80cb-0eea-4fad-9b42-0dbb1a80c0e9",
        "value": "apple-page-773.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:15+00:00",
        "timestamp": "1772481615",
        "to_ids": true,
        "type": "domain",
        "uuid": "739d72dc-0bcb-46d6-ba68-4c2ff55dbfa6",
        "value": "apple-showhidden-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:15+00:00",
        "timestamp": "1772481615",
        "to_ids": true,
        "type": "domain",
        "uuid": "810e3c8f-1128-4f8d-8af2-89f75cd45638",
        "value": "apple-storage-guide.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:15+00:00",
        "timestamp": "1772481615",
        "to_ids": true,
        "type": "domain",
        "uuid": "043de968-5cb9-4357-9af0-7b12f81f14ee",
        "value": "apple-usb-guide-macos.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:15+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "97c2e681-adda-49d0-93cc-47d3baa26276",
        "value": "apple-usb-tips-142136.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:16+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "b462aba9-274d-4ba1-8206-005749983184",
        "value": "chatgpt-atlas.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:16+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "cf1d3534-36cc-415d-97b5-da7b1004c579",
        "value": "claude-code-for-mac.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:16+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "51e8d0e3-f866-42e4-bef3-89230096d6d4",
        "value": "claude-code-page.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:16+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "4338bb1a-4001-4800-b7d8-666166bdf940",
        "value": "files-mac.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:16+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "7aca20a0-20d5-4ee9-b9f2-0d94e5af1eaa",
        "value": "google-notebooklm.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:16+00:00",
        "timestamp": "1772481616",
        "to_ids": true,
        "type": "domain",
        "uuid": "e5cf22c3-a432-4c9f-b9d8-1bc4d7cccd50",
        "value": "help-page.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:17+00:00",
        "timestamp": "1772481617",
        "to_ids": true,
        "type": "domain",
        "uuid": "828f9ee4-9286-4acc-91be-6e561b38b2bb",
        "value": "iina-player-app-for-mac.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:17+00:00",
        "timestamp": "1772481617",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a2484d6-0ed1-445d-8f10-ecb041dbc722",
        "value": "mac-disk-full-helper.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:17+00:00",
        "timestamp": "1772481617",
        "to_ids": true,
        "type": "domain",
        "uuid": "196df25c-ed42-4536-983c-9945e04db751",
        "value": "mac-hidden-files-fix.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:17+00:00",
        "timestamp": "1772481617",
        "to_ids": true,
        "type": "domain",
        "uuid": "bd48135d-f8fe-4512-98a8-f58b7e796553",
        "value": "mac-low-storage-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:17+00:00",
        "timestamp": "1772481617",
        "to_ids": true,
        "type": "domain",
        "uuid": "b36da126-e8a7-474e-9fe9-93e53b1f479f",
        "value": "mac-storage-full-fix.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:17+00:00",
        "timestamp": "1772481618",
        "to_ids": true,
        "type": "domain",
        "uuid": "877e5b2b-39f0-4c14-9376-f84ea81fa44b",
        "value": "mac-support-hidden.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:18+00:00",
        "timestamp": "1772481618",
        "to_ids": true,
        "type": "domain",
        "uuid": "88ddf8ea-8e1b-4450-b60c-9b6135f3f983",
        "value": "mac-support-storage-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:18+00:00",
        "timestamp": "1772481618",
        "to_ids": true,
        "type": "domain",
        "uuid": "d67fd1c7-076e-4d8e-b69e-14a5672b765c",
        "value": "mac-usb-upgrade-161425.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:18+00:00",
        "timestamp": "1772481618",
        "to_ids": true,
        "type": "domain",
        "uuid": "37432cee-c300-45fc-83d1-9c1ce0b2a26b",
        "value": "macos-disk-space-tips.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:18+00:00",
        "timestamp": "1772481618",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d892f00-b4c0-4fc9-b4b7-feb9b8a81ed0",
        "value": "macos-slow-help.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:18+00:00",
        "timestamp": "1772481618",
        "to_ids": true,
        "type": "domain",
        "uuid": "91d72c89-a6db-46c0-8abe-24b85596e043",
        "value": "macos-storage-fixed.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:18+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "b23d6a40-d0e2-4b3d-8943-e21cb5e45d26",
        "value": "macos-storage-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:19+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "53945aee-f5ad-4323-9a2f-a27221eab0ed",
        "value": "macos-system-usb.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:19+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "de1edc3d-bc3a-494e-979d-c419f0dd9da2",
        "value": "macos-usb-fix-guide.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:19+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "adaaee5e-f1cb-4504-a333-6b9d9bb63733",
        "value": "noteapp-d01.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:19+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "36d53773-479e-406d-ad1a-c03d5d402938",
        "value": "notebooklm-app-on-macbook.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:19+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "4688d7b0-dbc0-42cc-a290-2cf01abd7df1",
        "value": "notebooklm-google-app.pages.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:19+00:00",
        "timestamp": "1772481619",
        "to_ids": true,
        "type": "domain",
        "uuid": "0bf9ef15-89d9-46de-a7b8-8207db5dee4e",
        "value": "smart-disk-space-fix.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481620",
        "to_ids": true,
        "type": "domain",
        "uuid": "9db8383d-99ac-486b-9bb1-3cc601f74768",
        "value": "storage-guide-macos.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481620",
        "to_ids": true,
        "type": "domain",
        "uuid": "86c67a43-a1ca-4dea-892f-aa8bbff56e6d",
        "value": "support-apple-boost-up.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481620",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdc3552e-c02d-49c2-b447-65b1ca9552fb",
        "value": "support-apple-com-en-hidden.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481620",
        "to_ids": true,
        "type": "domain",
        "uuid": "665778ba-c1fd-4403-b0ef-680f6f104fe0",
        "value": "support-apple-com-slow-mac.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481620",
        "to_ids": true,
        "type": "domain",
        "uuid": "d654dbba-ce05-446e-be10-81df0d3adebd",
        "value": "support-apple-com-usb-mac.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481620",
        "to_ids": true,
        "type": "domain",
        "uuid": "84caf643-5be7-443b-9e8a-ef037088d77d",
        "value": "support-apple-en-freeupspace.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:20+00:00",
        "timestamp": "1772481621",
        "to_ids": true,
        "type": "domain",
        "uuid": "b7bac8e4-a461-4f5a-826d-bddbc8628d50",
        "value": "support-apple-files-help.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:21+00:00",
        "timestamp": "1772481621",
        "to_ids": true,
        "type": "domain",
        "uuid": "ae0bee68-2e51-4eb4-ab55-b76253115d09",
        "value": "support-apple-for-macos.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:21+00:00",
        "timestamp": "1772481621",
        "to_ids": true,
        "type": "domain",
        "uuid": "fdb7d4b0-55dd-4145-8838-0c6c5b4881bf",
        "value": "support-apple-help-files.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:21+00:00",
        "timestamp": "1772481621",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a16203-26e8-4c4f-946a-d291bb1d344b",
        "value": "support-apple-hid-files.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:21+00:00",
        "timestamp": "1772481621",
        "to_ids": true,
        "type": "domain",
        "uuid": "47ffaae1-87e4-4774-8633-152579b44a87",
        "value": "support-apple-hidden-fix.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:21+00:00",
        "timestamp": "1772481621",
        "to_ids": true,
        "type": "domain",
        "uuid": "152b98c8-e54a-48cd-86b0-3c9bcf0ef4f3",
        "value": "support-apple-hidden-update.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:21+00:00",
        "timestamp": "1772481622",
        "to_ids": true,
        "type": "domain",
        "uuid": "7cb0ba59-c162-45d9-9331-969e63d56e81",
        "value": "support-apple-optimize-mac-os.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:22+00:00",
        "timestamp": "1772481622",
        "to_ids": true,
        "type": "domain",
        "uuid": "03345e9f-332c-4da6-846c-1b67ae82ea85",
        "value": "support-apple-page-162.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:22+00:00",
        "timestamp": "1772481622",
        "to_ids": true,
        "type": "domain",
        "uuid": "410108f9-1e7a-488b-b191-63413aa5f46d",
        "value": "support-apple-page-548.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:22+00:00",
        "timestamp": "1772481622",
        "to_ids": true,
        "type": "domain",
        "uuid": "72220ef4-67d9-4f37-b063-5eaddad72812",
        "value": "support-apple-page-549.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:22+00:00",
        "timestamp": "1772481622",
        "to_ids": true,
        "type": "domain",
        "uuid": "283faaa6-bece-4462-bcf6-0a0d1a30239a",
        "value": "support-apple-page-550.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:22+00:00",
        "timestamp": "1772481622",
        "to_ids": true,
        "type": "domain",
        "uuid": "34a8db8d-0a8a-4364-90eb-158b309cd4d7",
        "value": "support-apple-page-964.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:23+00:00",
        "timestamp": "1772481623",
        "to_ids": true,
        "type": "domain",
        "uuid": "74df2065-93d7-48be-a4bb-777009638561",
        "value": "support-apple-storage-mac.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:23+00:00",
        "timestamp": "1772481623",
        "to_ids": true,
        "type": "domain",
        "uuid": "d806b8e8-4c64-483a-8b4f-b7288762e02f",
        "value": "support-apple.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:23+00:00",
        "timestamp": "1772481623",
        "to_ids": true,
        "type": "domain",
        "uuid": "7935e887-3042-405e-bfb9-1dccd6ecf7ec",
        "value": "support-mac-storage.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:23+00:00",
        "timestamp": "1772481623",
        "to_ids": true,
        "type": "domain",
        "uuid": "b101acb0-c4b5-4bdd-96f9-c9ac318f758a",
        "value": "usb-help-macos.mssg.me",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:23+00:00",
        "timestamp": "1772481623",
        "to_ids": true,
        "type": "domain",
        "uuid": "581d2e4e-9da1-46a1-ac56-5fdc3d561168",
        "value": "vic-media-player-app-for-mac.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "osx_atomic",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T20:00:23+00:00",
        "timestamp": "1772481623",
        "to_ids": true,
        "type": "domain",
        "uuid": "29e06582-4c7b-4149-8c03-3859e658bb08",
        "value": "vlc-media-player-app-for-mac.medium.com",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:03+00:00",
        "timestamp": "1772485204",
        "to_ids": false,
        "type": "url",
        "uuid": "d53157a7-9b77-43db-90bb-73a265646d6d",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/549513cd08982986663bf40931ad37f634ae5923",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:04+00:00",
        "timestamp": "1772485205",
        "to_ids": false,
        "type": "url",
        "uuid": "3b7c63e6-631d-44bd-baec-8145da8e393e",
        "value": "https://x.com/Jane_0sint/status/1991874303667929120",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:05+00:00",
        "timestamp": "1772485205",
        "to_ids": false,
        "type": "url",
        "uuid": "08598420-9c96-4aa2-9494-405f12f13204",
        "value": "https://www.virustotal.com/gui/file/5a5f9e8a423c7e5df0b00c0cb7996d2a75bff85ca376c2a585ab5368471f8f53/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "banload",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:05+00:00",
        "timestamp": "1772485206",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "bd922306-cde3-4eac-a43b-b0f32e007f0a",
        "value": "198.199.75.154",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:06+00:00",
        "timestamp": "1772485206",
        "to_ids": false,
        "type": "url",
        "uuid": "27df3cc9-437c-49eb-8fd0-2ca71f6bc0b6",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/87659dba877a35d1dc586ff508b5a05a91aa5375",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:06+00:00",
        "timestamp": "1772485206",
        "to_ids": false,
        "type": "url",
        "uuid": "8593549f-e5b6-49f9-a73d-dc191062bddd",
        "value": "https://arcticwolf.com/resources/blog/sloppylemming-deploys-burrowshell-and-rust-based-rat-to-target-pakistan-and-bangladesh",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:06+00:00",
        "timestamp": "1772485207",
        "to_ids": true,
        "type": "domain",
        "uuid": "71033c70-8113-49b8-88ef-3179da490731",
        "value": "bangladesh-islamic-baank.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:07+00:00",
        "timestamp": "1772485207",
        "to_ids": true,
        "type": "domain",
        "uuid": "247d18fd-ec1f-4a75-afb2-0bd77f7f5f0c",
        "value": "ov-pk.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "apt_sidewinder",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T21:00:07+00:00",
        "timestamp": "1772485207",
        "to_ids": true,
        "type": "domain",
        "uuid": "7360c057-9f45-4dd3-8c0d-3b06384a42e3",
        "value": "info.bangladesh-islamic-baank.workers.dev",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic_stealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T22:00:02+00:00",
        "timestamp": "1772488803",
        "to_ids": false,
        "type": "url",
        "uuid": "2cc3cf2e-b159-4f66-99a4-0c0dd8b8eff7",
        "value": "https://api.github.com/repos/stamparm/maltrail/commits/fa45fb53afb2cdecdbc4e43e87802c3c7b23c3fe",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic_stealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T22:00:03+00:00",
        "timestamp": "1772488804",
        "to_ids": false,
        "type": "url",
        "uuid": "3d04bd94-af9a-42dd-a28f-e542c8c233b5",
        "value": "https://x.com/smica83/status/2028535803614298125",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "generic_stealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T22:00:04+00:00",
        "timestamp": "1772488805",
        "to_ids": false,
        "type": "url",
        "uuid": "3e8cf719-e6c4-441d-bb2d-6d00ca6c21c9",
        "value": "https://www.virustotal.com/gui/file/57f16721ff682422cdf359dfa21b2168e4ebc0c03974a9cfb6460861accb4e4f/detection",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "generic_stealer",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T22:00:05+00:00",
        "timestamp": "1772488806",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "748c8435-9f1d-409f-99a5-0c89d66a8626",
        "value": "172.205.172.243",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#004646",
            "local": false,
            "name": "type:OSINT",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}