{
  "Event": {
    "analysis": "1",
    "date": "2026-06-18",
    "extends_uuid": "",
    "info": "[Threat Intel] GitBait: Phishing targeting the Mexican financial sector",
    "protected": false,
    "publish_timestamp": "1782364298",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1782364298",
    "uuid": "10458e7b-10eb-4cde-8201-cf2cab6aef88",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:producer=\"Group-IB\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-OTX\"",
        "relationship_type": ""
      },
      {
        "colour": "#d52b43",
        "local": false,
        "name": "misp-galaxy:target-information=\"Mexico\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"Bank\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#130049",
        "local": false,
        "name": "rectifyq:sub-category=\"campaign-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#31373d",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"not-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1781838027",
        "to_ids": false,
        "type": "link",
        "uuid": "8192a718-8639-44d4-b6ff-1aaa5e2da51c",
        "value": "https://www.group-ib.com/blog/gitbait-phishing-mexico-banking-finance-es/"
      },
      {
        "category": "Other",
        "comment": "Description",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1781838027",
        "to_ids": false,
        "type": "text",
        "uuid": "61581aee-f685-40d1-af43-5c7f57f02e17",
        "value": "A sophisticated, modular phishing infrastructure has been identified targeting at least 12 Mexican financial institutions over a three-year period. The operation leverages GitHub Pages for hosting and SheetBest API for credential exfiltration, eliminating the need for dedicated backend infrastructure. Attackers employ obfuscated JavaScript, randomized paths, and dynamic brand selection panels to impersonate legitimate banking portals. Over 100 associated domains were identified, each hosting multiple phishing pages across different paths. Credentials are collected through multi-stage forms mimicking authentic banking authentication flows and exfiltrated in real-time to attacker-controlled Google Sheets. An alternative exfiltration method via Telegram bot was also observed. The campaign demonstrates operational persistence with multiple operator accounts maintaining the infrastructure through continuous commits and updates."
      },
      {
        "category": "Other",
        "comment": "Summary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1781838027",
        "to_ids": false,
        "type": "text",
        "uuid": "a581ca93-fa94-4c97-844d-50e19802d5a4",
        "value": "Name: GitBait: Phishing targeting the Mexican financial sector\nAuthor: AlienVault\nAdversary: \nTags: [\"credential harvesting\", \"sheetbest api\", \"financial fraud\", \"phishing kit\", \"github pages abuse\", \"serverless infrastructure\", \"mexican banking\", \"gitbait\"]\nTgtd countries: [\"Mexico\"]\nMlwr families: []\nAttack_ids: []\nIndustries: [\"Finance\"]"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782356480",
        "to_ids": true,
        "type": "url",
        "uuid": "1627d9e8-fb37-4ecd-892a-d2bf203c2f6f",
        "value": "https://api.sheetbest.com/sheets/0e2a1336-e971-496f-9eb2-cd8dcd25565c",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782356501",
        "to_ids": true,
        "type": "url",
        "uuid": "cb3fb782-4083-4787-8549-fec0d913bd08",
        "value": "https://api.sheetbest.com/sheets/47edba58-31f7-41e6-af18-31c77046dee1",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357080",
        "to_ids": true,
        "type": "url",
        "uuid": "98c3f694-dc25-4936-a2d0-828f93f8ee2f",
        "value": "https://api.sheetbest.com/sheets/578ad828-fc67-4447-9182-197f92c1f302",
        "Tag": [
          {
            "colour": "#669ae5",
            "local": false,
            "name": "AlreadyExistsError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357101",
        "to_ids": true,
        "type": "url",
        "uuid": "338bb0bb-3884-4921-85e8-f35f80d6e1a2",
        "value": "https://api.sheetbest.com/sheets/db4a7782-bc66-4a99-875b-ede99744f3fe",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357123",
        "to_ids": true,
        "type": "url",
        "uuid": "94f37eee-4772-4144-9443-d9b5253fb763",
        "value": "https://api.sheetbest.com/sheets/f2958fbe-cdd7-4796-a4e4-19539d759a9f",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357144",
        "to_ids": true,
        "type": "url",
        "uuid": "a0a65a28-ecc9-45ef-b586-78bc8fb4be62",
        "value": "https://api.sheetbest.com/sheets/fe9f1e2d-16c9-4d92-9bdf-8425921ac073",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357165",
        "to_ids": true,
        "type": "hostname",
        "uuid": "893d9e8f-6350-4d51-94cb-74e3c2ec09df",
        "value": "support-index25.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357186",
        "to_ids": true,
        "type": "hostname",
        "uuid": "4049afad-3b80-4dce-9202-b5138a535430",
        "value": "support-index09.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357207",
        "to_ids": true,
        "type": "hostname",
        "uuid": "37df59b5-493d-41b2-838a-7107c39315a5",
        "value": "sntdr-soporte25.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357228",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f3881519-ab49-43e0-ae32-88f6fc334a14",
        "value": "07-soporte.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357250",
        "to_ids": true,
        "type": "hostname",
        "uuid": "625eb289-fd1d-4db5-9d1e-715b82ba4bd3",
        "value": "soporte2507.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357270",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c05a7234-7cbe-4789-9871-c9e8bfc818e6",
        "value": "support160625.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357291",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5189dd7f-9c1f-42db-9511-0670ba531509",
        "value": "soporte250324.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357313",
        "to_ids": true,
        "type": "hostname",
        "uuid": "b550b331-87fe-43b6-a868-45b5f3bfbd72",
        "value": "soporte74.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357334",
        "to_ids": true,
        "type": "hostname",
        "uuid": "a87fb604-6390-4bb3-8b81-6c43fe8571e4",
        "value": "support-bm1.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357355",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5f5593fd-c2cc-4d9f-96f9-0755d5501466",
        "value": "soporte-r5.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357376",
        "to_ids": true,
        "type": "hostname",
        "uuid": "355449fb-fb91-4dec-8e02-7862801bfae3",
        "value": "api.sheetbest.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357397",
        "to_ids": true,
        "type": "hostname",
        "uuid": "b8c2952d-5407-4892-9f2a-451df6573836",
        "value": "soporte0625.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357418",
        "to_ids": true,
        "type": "hostname",
        "uuid": "d1e2b7e8-0cb9-4608-8a0e-25ea0344764d",
        "value": "soporte200525.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357440",
        "to_ids": true,
        "type": "hostname",
        "uuid": "d3c67eac-c27a-4ac7-9af7-ee6fae3c4b85",
        "value": "soporte2650.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357461",
        "to_ids": true,
        "type": "hostname",
        "uuid": "98de9df3-10b1-4b75-bfd2-60090b13dcd7",
        "value": "soporte-bn1.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357483",
        "to_ids": true,
        "type": "hostname",
        "uuid": "97d04f9c-8d14-48b9-a567-0d7f330eeb25",
        "value": "fldsmdfr-94.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357504",
        "to_ids": true,
        "type": "hostname",
        "uuid": "608091a7-4fbd-470a-9b8c-3020c9f2af68",
        "value": "soporte-b2.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357525",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5444c560-e9f2-481e-8692-ed35664e924d",
        "value": "support-index.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357546",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5d66d7e2-931b-4af7-84ff-ed53b3f8e6fc",
        "value": "soporte-c1.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357567",
        "to_ids": true,
        "type": "hostname",
        "uuid": "44718cd7-f150-4e53-9e8d-69a7d90ce99f",
        "value": "support-b4.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357588",
        "to_ids": true,
        "type": "hostname",
        "uuid": "99ee93ca-450f-4349-b2c4-f078ebf91c9c",
        "value": "sntndr25-soporte.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357609",
        "to_ids": true,
        "type": "hostname",
        "uuid": "1c595ca2-1919-40b4-aee0-a2c89f80f735",
        "value": "sntndr-soporte0825.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357630",
        "to_ids": true,
        "type": "hostname",
        "uuid": "6d519544-2d99-4dd0-bbfb-4ea7d6a9297a",
        "value": "0825-soporte.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357651",
        "to_ids": true,
        "type": "hostname",
        "uuid": "921d3da4-8324-44ce-8d49-162a2fd139c1",
        "value": "soporte-07-25.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357673",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c1a6fcf5-395c-4b3c-b5d4-116869f9c4d2",
        "value": "soporte-0725.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357694",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f62f4d92-a3c5-4c5e-829a-62484a77da92",
        "value": "soporteyatencionf.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357715",
        "to_ids": true,
        "type": "hostname",
        "uuid": "d6de60a4-f3f3-461c-b4a9-bd045e773147",
        "value": "0725soporte.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357736",
        "to_ids": true,
        "type": "hostname",
        "uuid": "874a7a09-4e29-40f7-8c00-f9deb3c0dc26",
        "value": "0725-soporte.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357757",
        "to_ids": true,
        "type": "hostname",
        "uuid": "222b11e9-252e-4003-b46a-a0d4789726e3",
        "value": "soporter03.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357778",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c1b5ada0-971e-47f5-b6de-94011601762b",
        "value": "support-and-attention.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357799",
        "to_ids": true,
        "type": "hostname",
        "uuid": "263a6830-ecf7-4634-99bf-5b14358d22f9",
        "value": "support-b1.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357821",
        "to_ids": true,
        "type": "hostname",
        "uuid": "0049bd23-bf84-4e92-a4fb-5de136c5459e",
        "value": "support94.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357842",
        "to_ids": true,
        "type": "hostname",
        "uuid": "314ec60e-3e4c-4d83-9a18-9375316a206d",
        "value": "support-index05.github.io",
        "Tag": [
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357863",
        "to_ids": true,
        "type": "hostname",
        "uuid": "61984254-4c22-4016-b73f-5d3619f1884a",
        "value": "soporte0725-3.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357884",
        "to_ids": true,
        "type": "hostname",
        "uuid": "37e80418-c702-4b15-8107-0865da1c2e6a",
        "value": "soporte0725.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782357906",
        "to_ids": true,
        "type": "hostname",
        "uuid": "4ed5280f-b806-469b-a98e-b6cd490dcf7d",
        "value": "support-vh.github.io",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 443",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782345236",
        "to_ids": true,
        "type": "ip-dst|port",
        "uuid": "a0ce23d8-8b6b-4f54-948b-7beac2e4ed51",
        "value": "159.89.254.93|443"
      }
    ]
  }
}