{ "Event": { "analysis": "1", "date": "2026-05-27", "extends_uuid": "", "info": "[Threat Intel] Exposing a Global Smishing Operation Across 19 Countries: Governments, Postal Services, and Telecoms Targeted", "protected": false, "publish_timestamp": "1780522328", "published": true, "threat_level_id": "3", "timestamp": "1780522323", "uuid": "36e75fd8-359f-4f84-8258-5f35cf8ed39b", "Orgc": { "name": "Rectifyq", "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4" }, "Tag": [ { "colour": "#cf6788", "local": false, "name": "misp-galaxy:producer=\"Hunt.io\"", "relationship_type": "" }, { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"none-from-src\"", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"from-OTX\"", "relationship_type": "" }, { "colour": "#3d38fc", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Acquire Infrastructure - T1583\"", "relationship_type": "" }, { "colour": "#47d9d3", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Malicious File - T1204.002\"", "relationship_type": "" }, { "colour": "#c202a1", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Link - T1566.002\"", "relationship_type": "" }, { "colour": "#db2044", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Link - T1598.003\"", "relationship_type": "" }, { "colour": "#5c59c9", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Email Accounts - T1586.002\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Upload Malware - T1608.001\"", "relationship_type": "" }, { "colour": "#82eae0", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Domains - T1583.001\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Archive Collected Data - T1560\"", "relationship_type": "" }, { "colour": "#adf1b0", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Proxy - T1090\"", "relationship_type": "" }, { "colour": "#454726", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Compromise Infrastructure - T1584\"", "relationship_type": "" }, { "colour": "#b206a3", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Compromise Accounts - T1586\"", "relationship_type": "" }, { "colour": "#9e0269", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Web Service - T1102\"", "relationship_type": "" }, { "colour": "#c9dbdd", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Stage Capabilities - T1608\"", "relationship_type": "" }, { "colour": "#4a5d84", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Web Services - T1583.006\"", "relationship_type": "" }, { "colour": "#3780c6", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"User Execution - T1204\"", "relationship_type": "" }, { "colour": "#a9f8b1", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1041\"", "relationship_type": "" }, { "colour": "#1b95cd", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Phishing - T1566\"", "relationship_type": "" }, { "colour": "#59699c", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Valid Accounts - T1078\"", "relationship_type": "" }, { "colour": "#a0d02a", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Phishing for Information - T1598\"", "relationship_type": "" }, { "colour": "#a42e64", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Data from Information Repositories - T1213\"", "relationship_type": "" }, { "colour": "#dedf36", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Domains - T1584.001\"", "relationship_type": "" }, { "colour": "#b8ab01", "local": false, "name": "misp-galaxy:target-information=\"United States\"", "relationship_type": "" }, { "colour": "#d9210a", "local": false, "name": "misp-galaxy:target-information=\"Albania\"", "relationship_type": "" }, { "colour": "#0fa7af", "local": false, "name": "misp-galaxy:target-information=\"Armenia\"", "relationship_type": "" }, { "colour": "#6d455d", "local": false, "name": "misp-galaxy:target-information=\"Bulgaria\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:target-information=\"Estonia\"", "relationship_type": "" }, { "colour": "#15ccfd", "local": false, "name": "misp-galaxy:target-information=\"France\"", "relationship_type": "" }, { "colour": "#7d6b1a", "local": false, "name": "misp-galaxy:target-information=\"Georgia\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:target-information=\"Greece\"", "relationship_type": "" }, { "colour": "#4e41fc", "local": false, "name": "misp-galaxy:target-information=\"Ireland\"", "relationship_type": "" }, { "colour": "#bbeedc", "local": false, "name": "misp-galaxy:target-information=\"Kosovo\"", "relationship_type": "" }, { "colour": "#eb5a95", "local": false, "name": "misp-galaxy:target-information=\"Latvia\"", "relationship_type": "" }, { "colour": "#72ab92", "local": false, "name": "misp-galaxy:target-information=\"Lithuania\"", "relationship_type": "" }, { "colour": "#b4dfcd", "local": false, "name": "misp-galaxy:target-information=\"North Macedonia\"", "relationship_type": "" }, { "colour": "#d49f13", "local": false, "name": "misp-galaxy:target-information=\"Montenegro\"", "relationship_type": "" }, { "colour": "#9f5dac", "local": false, "name": "misp-galaxy:target-information=\"Romania\"", "relationship_type": "" }, { "colour": "#c62adc", "local": false, "name": "misp-galaxy:target-information=\"Slovenia\"", "relationship_type": "" }, { "colour": "#f439e5", "local": false, "name": "misp-galaxy:target-information=\"Spain\"", "relationship_type": "" }, { "colour": "#28720c", "local": false, "name": "misp-galaxy:target-information=\"Trinidad and Tobago\"", "relationship_type": "" }, { "colour": "#ce59f1", "local": false, "name": "misp-galaxy:target-information=\"United Kingdom\"", "relationship_type": "" }, { "colour": "#49a260", "local": false, "name": "rectifyq:category=\"threat\"", "relationship_type": "" }, { "colour": "#130049", "local": false, "name": "rectifyq:sub-category=\"campaign-analysis\"", "relationship_type": "" }, { "colour": "#170059", "local": false, "name": "rectifyq:topic=\"mobile-attack\"", "relationship_type": "" }, { "colour": "#ffd12e", "local": false, "name": "rectifyq:target=\"broad-based\"", "relationship_type": "" }, { "colour": "#31373d", "local": false, "name": "rectifyq:MY-relevancy=\"not-relevant\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#3800d9", "local": false, "name": "rectifyq:action-taken=\"VT-comment\"", "relationship_type": "" }, { "colour": "#3d00e9", "local": false, "name": "rectifyq:action-taken=\"telegram\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780023606", "to_ids": false, "type": "link", "uuid": "ef319233-a249-4400-ac4f-4c8e04d19971", "value": "https://hunt.io/blog/massive-smishing-campaign-governments-postal-telecoms" }, { "category": "Other", "comment": "Description", "deleted": false, "disable_correlation": false, "timestamp": "1780023606", "to_ids": false, "type": "text", "uuid": "7f1c5191-f8b9-4228-9a5a-c717cc449ab6", "value": "A coordinated smishing operation spanning 19 countries across Europe, the Americas, and the Caucasus has been exposed, originating from fraudulent SMS messages impersonating Romania's government payment portal Ghi\u0219eul.ro. Investigation revealed 1,628 malicious URLs linked by a single 128-character campaign identifier, targeting government portals, traffic police departments, postal services including DPD and SEUR, tax authorities, and telecommunications providers like T-Mobile and Vodafone. The infrastructure utilizes 32 backend IP addresses distributed across Tencent Cloud, Alibaba Cloud, Cloudflare CDN, and ALEXHOST Moldova. Threat actors employ two distinct phishing templates: a Vue.js single-page application and a Bootstrap-based clone, executing a four-stage credential harvesting process that collects complete payment card details through fabricated traffic fines, toll payments, and delivery notifications." }, { "category": "Other", "comment": "Summary", "deleted": false, "disable_correlation": false, "timestamp": "1780023606", "to_ids": false, "type": "text", "uuid": "6d931607-2341-4583-acc7-45aa38f9d582", "value": "Name: Exposing a Global Smishing Operation Across 19 Countries: Governments, Postal Services, and Telecoms Targeted\nAuthor: AlienVault\nAdversary: \nTags: [\"smishing\", \"government impersonation\", \"credential harvesting\", \"payment card theft\", \"phishing\", \"multi-country campaign\", \"postal service fraud\", \"typosquatting\"]\nTgtd countries: [\"United States of America\", \"Albania\", \"Armenia\", \"Bulgaria\", \"Estonia\", \"France\", \"Georgia\", \"Greece\", \"Ireland\", \"Kosovo\", \"Latvia\", \"Lithuania\", \"North Macedonia\", \"Montenegro\", \"Romania\", \"Slovenia\", \"South Georgia and the South Sandwich Islands\", \"Spain\", \"Trinidad and Tobago\", \"United Kingdom of Great Britain and Northern Ireland\"]\nMlwr families: []\nAttack_ids: [\"T1583\", \"T1204.002\", \"T1566.002\", \"T1598.003\", \"T1586.002\", \"T1608.001\", \"T1583.001\", \"T1560\", \"T1090\", \"T1584\", \"T1586\", \"T1102\", \"T1608\", \"T1583.006\", \"T1204\", \"T1041\", \"T1566\", \"T1078\", \"T1598\", \"T1213\", \"T1584.001\"]\nIndustries: [\"Government\", \"Telecommunications\", \"Retail\", \"Transportation\"]" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301403", "to_ids": true, "type": "domain", "uuid": "a08ea9fb-bdf0-48a7-973f-b32b009a6211", "value": "mvrx.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301424", "to_ids": true, "type": "domain", "uuid": "b30a89e0-5109-4694-b8d5-c0e8cca7e606", "value": "ghiseul.autos", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301445", "to_ids": true, "type": "domain", "uuid": "7d26d7cc-d94e-4ca6-9859-540803c41d55", "value": "mvri.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301471", "to_ids": true, "type": "domain", "uuid": "f3c6d4a8-3b8e-436b-85c8-1e6be57fd89b", "value": "dpde.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301492", "to_ids": true, "type": "hostname", "uuid": "9ff6224d-0b82-4809-98fe-99b15d862071", "value": "e-uprava.gov-si.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301513", "to_ids": true, "type": "domain", "uuid": "41c433c0-2dd7-4c2e-b25e-cc520855e218", "value": "gove.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301534", "to_ids": true, "type": "domain", "uuid": "376b6b93-8dd0-4200-94a0-afe9df238f01", "value": "govh.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301555", "to_ids": true, "type": "domain", "uuid": "7addd876-736c-4382-9760-868980968cff", "value": "govj.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301577", "to_ids": true, "type": "domain", "uuid": "482fa641-5d57-4cbd-a6e1-0afa7bdf587f", "value": "govk.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301598", "to_ids": true, "type": "domain", "uuid": "2814e9b2-84f4-4d99-8761-d1ba13cf93cc", "value": "govl.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:01/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1780298430", "to_ids": true, "type": "md5", "uuid": "f3e874bd-53ac-41a5-9347-b893275940d5", "value": "5756505bc94149dda328a2721561cab6", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301619", "to_ids": true, "type": "url", "uuid": "fa0a222e-565f-406f-8296-5d54bfca7baf", "value": "http://ghisaul.lat/ro", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301641", "to_ids": true, "type": "url", "uuid": "0c75c8ca-03ea-4ab4-ac55-0297de0ea71a", "value": "http://ghiseul-ro.cyou/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301662", "to_ids": true, "type": "url", "uuid": "e87c05bf-6bf0-48f9-8970-d875cd9da181", "value": "http://ghiseul-ro.sbs/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301683", "to_ids": true, "type": "url", "uuid": "69f20ae8-246a-48fd-beda-544672fa0df1", "value": "http://ghiseul-ro.shop/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301704", "to_ids": true, "type": "url", "uuid": "2caa2f31-54ca-4d94-a5fb-49519ae0a833", "value": "http://ghiseul.cfd/pay", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301725", "to_ids": true, "type": "url", "uuid": "e4c2d644-c437-453f-9737-4250192d3e71", "value": "http://ghiseul.eu.cc/pay", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301746", "to_ids": true, "type": "url", "uuid": "f8842e8f-1aeb-4e54-be14-fec7964b5831", "value": "http://www.ghiseul.ro/ghiseul/public/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301768", "to_ids": true, "type": "url", "uuid": "987feff1-3f77-4b93-b858-2f49b95f340c", "value": "http://www.ghiseul.ro/ghiseul/public/css/bootstrap-theme.css", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301790", "to_ids": true, "type": "url", "uuid": "03dc4c11-7340-4c69-bc7b-f544a6a7d757", "value": "http://www.ghiseul.ro/ghiseul/public/css/bootstrap.min.css", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301811", "to_ids": true, "type": "url", "uuid": "338f189c-bf66-46e2-92fe-7670781db897", "value": "http://www.ghiseul.ro/ghiseul/public/css/font-awesome.min.css", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301832", "to_ids": true, "type": "url", "uuid": "37f4f3f7-c27c-4d50-9cf9-259f3d07126d", "value": "http://www.ghiseul.ro/ghiseul/public/css/jquery-ui.structure.min.css", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301853", "to_ids": true, "type": "url", "uuid": "1e60abaf-d97b-4463-bb14-608cb6918cf3", "value": "http://www.ghiseul.ro/ghiseul/public/css/simple-line-icons.css", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301875", "to_ids": true, "type": "url", "uuid": "c53801e4-1075-42d6-b95a-1a68c2b615e8", "value": "https://ghiseal.lat/ro/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522323", "to_ids": true, "type": "url", "uuid": "70a92cc0-485a-4e62-805f-b7ad3e30df42", "value": "https://ghiseal.lat/ro/#/index" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301917", "to_ids": true, "type": "url", "uuid": "1d066808-54d1-4191-830c-921da629f2f9", "value": "https://ghiseul.autos/ro/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301939", "to_ids": true, "type": "url", "uuid": "2ea9d201-3a39-4f00-99e3-4ef9180ab653", "value": "https://ghiseul.cyou/pay", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301960", "to_ids": true, "type": "url", "uuid": "63ef381b-77ae-43e5-8e4f-078674599c9f", "value": "https://ghisiul.lat/ro/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780301981", "to_ids": true, "type": "url", "uuid": "45799e0b-53f6-4d33-ac0f-d1bfd0c688ec", "value": "https://ghizeul.lat/ro/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302002", "to_ids": true, "type": "url", "uuid": "6f7d1cec-eddc-4f73-aa46-f26351b23dd9", "value": "https://www.ghiseul-ro.bond/ghiseul/public/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302023", "to_ids": true, "type": "url", "uuid": "31f3519f-c234-42e0-ae44-da669d09ec97", "value": "https://www.ghiseul-ro.cfd/ghiseul/public/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302045", "to_ids": true, "type": "url", "uuid": "c244e0c6-0ed1-43fb-a9ba-e32948d22c29", "value": "https://www.ghiseul.govro.one/ghiseul/public/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302066", "to_ids": true, "type": "url", "uuid": "bee5592b-2f0f-4ee3-83b1-4af8271bc5c1", "value": "https://www.ghiseul.ro/ghiseul/public/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302088", "to_ids": true, "type": "url", "uuid": "5643d2ce-791d-4414-9c3a-bad71b5f3140", "value": "https://www.ghiseulro.cyou/ro/", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302109", "to_ids": true, "type": "domain", "uuid": "bf0f7e1a-3c1a-45c9-930c-52285bfe2dfc", "value": "dpd-lv.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302130", "to_ids": true, "type": "domain", "uuid": "5678571c-982f-4502-8c12-bb273dd00116", "value": "dpdlv.bond", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302151", "to_ids": true, "type": "domain", "uuid": "6bbc897e-b88b-455a-90f1-8673321f72e9", "value": "dsvag.sbs", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302173", "to_ids": true, "type": "domain", "uuid": "bd8eefe7-3bf9-43bb-8459-5caf8f89fe30", "value": "dsvav.cfd", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302194", "to_ids": true, "type": "domain", "uuid": "4fa666ee-d620-4aa9-9c6c-0cac29bd7f65", "value": "dsvcv.cfd", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302215", "to_ids": true, "type": "domain", "uuid": "7b905526-a07b-448f-bf56-91691a02c73c", "value": "dsvxk.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302236", "to_ids": true, "type": "domain", "uuid": "b46940d3-0d25-41c5-bba0-17561378f038", "value": "e-csddlv.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302257", "to_ids": true, "type": "domain", "uuid": "c43c8428-9d6a-45c4-9bea-c6217887514a", "value": "fanveris.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302279", "to_ids": true, "type": "domain", "uuid": "0b445043-7a21-4f50-a131-dd96f1bbc06a", "value": "ghisaul.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302300", "to_ids": true, "type": "domain", "uuid": "c1b99ae0-c960-4bd7-a99d-de6d1259d9ef", "value": "ghiseal.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302321", "to_ids": true, "type": "domain", "uuid": "0d6b1e3d-cba2-4f29-8d8d-6c3caf0c84a0", "value": "ghiseul-ro.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302343", "to_ids": true, "type": "domain", "uuid": "966e31b5-782a-46f4-ab72-e40f53b97422", "value": "ghiseul-ro.sbs", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302364", "to_ids": true, "type": "domain", "uuid": "1c8809c3-9b74-472d-8931-ab2c8058d0bb", "value": "ghiseul-ro.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302385", "to_ids": true, "type": "domain", "uuid": "0b9dab19-c44d-499f-a1ac-86918a5ed79a", "value": "ghiseul.cfd", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302406", "to_ids": true, "type": "domain", "uuid": "1422678f-21f9-4533-8320-dcf2dd6e16c5", "value": "ghiseul.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302427", "to_ids": true, "type": "domain", "uuid": "34b1093f-579c-4baf-9ca8-aab8bff599de", "value": "ghisiul.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302449", "to_ids": true, "type": "domain", "uuid": "227ecc0c-8240-4eb6-ae06-c41f1e3d8cb4", "value": "ghizeul.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302471", "to_ids": true, "type": "domain", "uuid": "1794bb86-4f87-46f7-a7e4-3073ba35d2e1", "value": "gobal-store-hub.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302492", "to_ids": true, "type": "domain", "uuid": "4fa3825e-5021-4e33-a298-36601b1e8e6c", "value": "gov-si.cam", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302514", "to_ids": true, "type": "domain", "uuid": "7c79ea4e-8829-497a-8aa5-8b43fc2fc6ad", "value": "gov-si.qpon", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302535", "to_ids": true, "type": "domain", "uuid": "5bf62b5b-bf74-409c-8594-2905479cb3c8", "value": "gov-si.sbs", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302556", "to_ids": true, "type": "domain", "uuid": "bf089218-3ed0-4988-86a4-dd043b81ac9f", "value": "gov-si.xin", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302577", "to_ids": true, "type": "domain", "uuid": "a5f5c379-a254-4f1c-947a-f1129f7a6f9c", "value": "govo.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302598", "to_ids": true, "type": "domain", "uuid": "c573b901-1704-4624-bdf8-b3e2132047c5", "value": "govsi.bar", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302619", "to_ids": true, "type": "domain", "uuid": "059684d9-f50f-483d-9a85-83a80b9efe05", "value": "mvr-gov-mk.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302640", "to_ids": true, "type": "domain", "uuid": "b4753b39-60ae-4d06-9a95-0874abd866e7", "value": "mvrbg.ink", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302662", "to_ids": true, "type": "domain", "uuid": "ade8f88e-e17c-49ad-ae35-1b8adfe5bc30", "value": "mvrbg.life", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302683", "to_ids": true, "type": "domain", "uuid": "16b5453e-c75a-43ba-a7b7-906df289215e", "value": "mvrbg.sbs", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302704", "to_ids": true, "type": "domain", "uuid": "e3a5c518-7d6c-4851-a6e9-60726ccb2121", "value": "mvrcc.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302725", "to_ids": true, "type": "domain", "uuid": "d68cb25d-9073-49b1-8ce8-7524eabab8b1", "value": "roadpolice-am.icu", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302747", "to_ids": true, "type": "domain", "uuid": "0a207658-c204-4e30-88e3-4e037caede4f", "value": "roadpolice-am.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302768", "to_ids": true, "type": "domain", "uuid": "23e2faa2-39b4-4181-bc6a-24cfeb909959", "value": "roadspolice.lat", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302789", "to_ids": true, "type": "domain", "uuid": "39cf0e92-a1d4-42e2-9bab-942e928b9b2b", "value": "seur-bcdef.cc", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302810", "to_ids": true, "type": "domain", "uuid": "9063ca95-bee0-4bbb-a6aa-572235997b1a", "value": "seur-cztwp.club", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302831", "to_ids": true, "type": "domain", "uuid": "a34822dd-c4b4-4f53-913d-58cd4271a590", "value": "seur-fghij.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302852", "to_ids": true, "type": "domain", "uuid": "69cdc452-6c9d-4c36-80a2-8156ac537d54", "value": "seur-fqlap.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302873", "to_ids": true, "type": "domain", "uuid": "69742e69-368e-4032-91c3-a4a3449adae0", "value": "seur-hijkl.cc", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302894", "to_ids": true, "type": "domain", "uuid": "14c0eed0-ef2e-4969-b9f1-4037c3362a4e", "value": "seur-hxrz.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302916", "to_ids": true, "type": "domain", "uuid": "154e768a-7817-4b63-853e-aaab4be63502", "value": "seur-jwqec.link", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302937", "to_ids": true, "type": "domain", "uuid": "01857679-acb4-4aa9-9f82-157bcfd2dd5e", "value": "seur-rmvxq.club", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780302959", "to_ids": true, "type": "domain", "uuid": "eb1cee9a-6d2d-4ba8-b1f5-e4a0a418081c", "value": "seur-rxkmd.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "domain", "uuid": "9b55250d-54f1-4fad-8d44-e192d683e340", "value": "seur-yzabc.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "domain", "uuid": "0c7543c4-6634-4655-b2ce-401c4292c178", "value": "seur-zkryw.cloud", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "domain", "uuid": "42e31a16-2642-4889-8bf0-a6df809622f1", "value": "tesco-redeem-check.bond", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "domain", "uuid": "c89cffdf-962d-4cfb-860a-33ea8f7443fb", "value": "vodafaone.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "domain", "uuid": "c0553c6d-2f50-4acf-aa59-138fbf84630a", "value": "worldmartonline.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "76aa53cd-7d21-458a-be74-8aca811cc8d1", "value": "dpd.ie-com.vip", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "9dcf5f74-b9f1-4b46-b496-8fd3a2c11bae", "value": "e.csdd.govlv.cam", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "db3afa32-c50a-4c78-9c48-cea6cad04fca", "value": "hoiatustrahv.politsei.gov-ee.bond", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "ca64eb4b-b274-40e4-babf-c74bd599f450", "value": "mvr.govmk.cam", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "d19d0eec-d240-46fb-bfce-9b5c5b622f8f", "value": "mvr.govmk.one", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "47b442f6-4749-433f-99a7-b7d823dc5777", "value": "sumin.lrv-lt.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "972c0222-d974-4c96-8dd8-c8b9ca3e54a2", "value": "www.ghiseul-ro.bond", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "018d9c09-0676-4e64-8c8e-cb48f047b01b", "value": "www.ghiseul-ro.cfd", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "5ca67b31-7867-4cf0-b303-64b29cdbc78d", "value": "www.ghiseul.govro.one", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780522228", "to_ids": true, "type": "hostname", "uuid": "bffeb915-8379-4e51-90c0-c1495f126643", "value": "www.ghiseulro.cyou", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] } ] } }