{ "Event": { "analysis": "1", "date": "2026-03-26", "extends_uuid": "", "info": "[Threat Intel] Inside Keitaro Abuse Part 2: One Platform, Many Threats", "protected": false, "publish_timestamp": "1775507905", "published": true, "threat_level_id": "3", "timestamp": "1775507904", "uuid": "46fe33a5-1168-4575-961c-d7d7a813ae22", "Orgc": { "name": "Rectifyq", "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"none-from-src\"", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"from-OTX\"", "relationship_type": "" }, { "colour": "#3d38fc", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Acquire Infrastructure - T1583\"", "relationship_type": "" }, { "colour": "#fb3bcd", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Gather Victim Host Information - T1592\"", "relationship_type": "" }, { "colour": "#9feaf0", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Exploit Public-Facing Application - T1190\"", "relationship_type": "" }, { "colour": "#866c0c", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Active Scanning - T1595\"", "relationship_type": "" }, { "colour": "#454726", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Compromise Infrastructure - T1584\"", "relationship_type": "" }, { "colour": "#b206a3", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Compromise Accounts - T1586\"", "relationship_type": "" }, { "colour": "#c9dbdd", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Stage Capabilities - T1608\"", "relationship_type": "" }, { "colour": "#1b95cd", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Phishing - T1566\"", "relationship_type": "" }, { "colour": "#6440db", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Establish Accounts - T1585\"", "relationship_type": "" }, { "colour": "#251b6b", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Obtain Capabilities - T1588\"", "relationship_type": "" }, { "colour": "#49a260", "local": false, "name": "rectifyq:category=\"threat\"", "relationship_type": "" }, { "colour": "#130049", "local": false, "name": "rectifyq:sub-category=\"campaign-analysis\"", "relationship_type": "" }, { "colour": "#f1dfed", "local": false, "name": "rectifyq:TA-category=\"Cybercrime\"", "relationship_type": "" }, { "colour": "#ffd12e", "local": false, "name": "rectifyq:target=\"broad-based\"", "relationship_type": "" }, { "colour": "#55acee", "local": false, "name": "rectifyq:MY-relevancy=\"potentially-relevant\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#3800d9", "local": false, "name": "rectifyq:action-taken=\"VT-comment\"", "relationship_type": "" }, { "colour": "#3d00e9", "local": false, "name": "rectifyq:action-taken=\"telegram\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1774609207", "to_ids": false, "type": "link", "uuid": "1bae874c-e0b3-4c20-9975-29e9eb743f18", "value": "https://www.infoblox.com/blog/threat-intelligence/no-reach-no-risk-the-keitaro-abuse-in-modern-cybercrime-distribution/", "Tag": [ { "colour": "#6b003a", "local": true, "name": "workflow:todo=\"create-missing-misp-galaxy-cluster\"", "relationship_type": "" } ] }, { "category": "Other", "comment": "Description", "deleted": false, "disable_correlation": false, "timestamp": "1774609207", "to_ids": false, "type": "text", "uuid": "fd43186e-06f6-4456-b012-b4c007838559", "value": "This analysis examines how threat actors abuse Keitaro, an advertising performance tracker, for various malicious purposes. The report covers a wide range of threats, including malware delivery, phishing, scams, and illegal content distribution. Key findings include the use of Keitaro for cloaking and traffic distribution in malvertising campaigns, spam operations leveraging Keitaro for cryptocurrency wallet draining, and the abuse of Keitaro in investment scams. The report also highlights specific threat actors and their tactics, such as domain hijacking for adult content delivery and the use of fake arrests as clickbait for investment scams. Overall, the analysis demonstrates how Keitaro's features make it attractive to cybercriminals seeking to maximize their reach with minimal effort." }, { "category": "Other", "comment": "Summary", "deleted": false, "disable_correlation": false, "timestamp": "1774609207", "to_ids": false, "type": "text", "uuid": "c0019353-3a02-449b-8aba-9b8a25290c98", "value": "Name: Inside Keitaro Abuse Part 2: One Platform, Many Threats\nAuthor: AlienVault\nAdversary: \nTags: [\"rustystealer\", \"screenconnect\", \"phishing\", \"keitaro\", \"donutloader\", \"domain hijacking\", \"cloaking\", \"stealc\", \"traffic distribution\"]\nTgtd countries: []\nMlwr families: [\"DonutLoader\", \"StealC\", \"ScreenConnect\", \"RustyStealer\"]\nAttack_ids: [\"T1583\", \"T1592\", \"T1190\", \"T1595\", \"T1584\", \"T1586\", \"T1608\", \"T1566\", \"T1585\", \"T1588\"]\nIndustries: []" }, { "category": "Network activity", "comment": "IOC-description:CC=HK ASN=AS15611 iranian research organization for science & technology", "deleted": false, "disable_correlation": false, "timestamp": "1775494339", "to_ids": true, "type": "ip-dst", "uuid": "26794c17-a887-4e9b-ba62-55e1afa56251", "value": "62.60.178.163", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "IOC-description:CC=GB ASN=AS786 jisc services limited", "deleted": false, "disable_correlation": false, "timestamp": "1775494360", "to_ids": true, "type": "ip-dst", "uuid": "f07bcc5f-cd6e-4e34-bcda-fdc9c0b8a1f1", "value": "158.94.209.29", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "IOC-description:CC=HK ASN=ASNone", "deleted": false, "disable_correlation": false, "timestamp": "1775494381", "to_ids": true, "type": "ip-dst", "uuid": "131c0cc1-872c-4cca-a316-e56c1b6e45c5", "value": "62.60.226.248", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494403", "to_ids": true, "type": "domain", "uuid": "7a7c77de-5b4b-4e57-9136-2217da840cff", "value": "adressinvalidepostescanada-enligne38846.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494424", "to_ids": true, "type": "domain", "uuid": "2470e418-e5a7-43b7-9e5c-5276e136a5ad", "value": "authentifybmo.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494445", "to_ids": true, "type": "domain", "uuid": "6fa5e4ec-efa4-423e-9651-8da3e19a5b7b", "value": "azgrvfra.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494466", "to_ids": true, "type": "domain", "uuid": "889cbca5-e148-47ea-a4f5-51108177f475", "value": "bmosecure-webportal.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494488", "to_ids": true, "type": "domain", "uuid": "93bdaa2e-2924-4607-b0b2-604c3a1bd697", "value": "bnc-websecurity.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494509", "to_ids": true, "type": "domain", "uuid": "f2886524-8084-4e6c-879d-09d5920c469b", "value": "bncloginsecuriter.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494530", "to_ids": true, "type": "domain", "uuid": "291fe844-c1fe-48b1-8ae0-2adcb141c387", "value": "boost-core.today", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494552", "to_ids": true, "type": "domain", "uuid": "22944540-e12f-4166-9052-7a178910fd4c", "value": "burkespitbbq.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494573", "to_ids": true, "type": "domain", "uuid": "566ab1eb-744c-4020-b696-b8d860e592e6", "value": "ca24watch.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494594", "to_ids": true, "type": "domain", "uuid": "61208553-e0c2-471d-9e56-4c30667349f9", "value": "canadapostshipment.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494615", "to_ids": true, "type": "domain", "uuid": "cb388f78-5b9c-4702-b97e-bc06464181f8", "value": "charityvirtue.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494636", "to_ids": true, "type": "domain", "uuid": "de793e6c-9351-42a2-8430-c868e1840db7", "value": "cibc-registration-access-online.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494657", "to_ids": true, "type": "domain", "uuid": "7603a929-053a-4a6a-8149-a97a8178e700", "value": "cibcsecurity2fa.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494679", "to_ids": true, "type": "domain", "uuid": "a3d4a03f-5852-4213-b55f-d382952f069e", "value": "click-link.online", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494700", "to_ids": true, "type": "domain", "uuid": "daf912ab-959d-4f3e-8a52-f36bf3226728", "value": "click-link.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494721", "to_ids": true, "type": "domain", "uuid": "7ac9b0af-81b7-4715-acd5-3cda21058d73", "value": "click-link.store", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494742", "to_ids": true, "type": "domain", "uuid": "afd24ed1-3df7-42ab-a219-e5e7348b9415", "value": "cooldece.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494763", "to_ids": true, "type": "domain", "uuid": "2ebcef54-a883-4695-875c-219498d992fc", "value": "coreflow-news.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494784", "to_ids": true, "type": "domain", "uuid": "05433122-d4b7-4524-8ac8-50f2de7e8875", "value": "costcorebate-groceries2026.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494806", "to_ids": true, "type": "domain", "uuid": "d6e32af4-1f92-46ac-932c-60eb7033f5d8", "value": "cra-signin-partner-id.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494828", "to_ids": true, "type": "domain", "uuid": "6d49e250-7448-4c68-8b27-18a671443120", "value": "curated-nest.pro", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494849", "to_ids": true, "type": "domain", "uuid": "e4566adf-7729-45b4-ac43-20f433b9e22f", "value": "dailycrepoton.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494871", "to_ids": true, "type": "domain", "uuid": "6f1ce1f4-171e-478c-84b0-0f15c60537b7", "value": "dhlmanagemypack0099.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494892", "to_ids": true, "type": "domain", "uuid": "2821351c-822d-4b39-ae8f-438b2e3e6686", "value": "digitalwealth-au.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494913", "to_ids": true, "type": "domain", "uuid": "2ff9cb63-3875-4d9d-a594-bdeadf88caf8", "value": "energy-zone.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494935", "to_ids": true, "type": "domain", "uuid": "2247616b-121f-4982-8103-1edaf0d3a4a1", "value": "estrategicadesenvolvimento.com.br", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494956", "to_ids": true, "type": "domain", "uuid": "43ef338d-2d81-4682-9186-8a617680fa26", "value": "etransfer-auth-cra.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494977", "to_ids": true, "type": "domain", "uuid": "93b76e01-124e-433d-8b35-165a888374c8", "value": "fedexca-orderstatus.link", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775494999", "to_ids": true, "type": "domain", "uuid": "7d9104db-1b8d-4e36-b92e-920c16b8bb78", "value": "fedexdelivery.ca", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495021", "to_ids": true, "type": "domain", "uuid": "4a50a887-453d-407d-837a-d411d3726e80", "value": "fitness-zenew.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495042", "to_ids": true, "type": "domain", "uuid": "88769491-85d3-4182-a58a-8b266fa3f717", "value": "gigadat-claiminterac.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495064", "to_ids": true, "type": "domain", "uuid": "765ab57f-ac18-4aaf-9564-370ba94efc77", "value": "gigadat-interac-0910.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495086", "to_ids": true, "type": "domain", "uuid": "f57604a9-9d95-4f34-8326-4e23d93cffda", "value": "gigadat-interac6302.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495108", "to_ids": true, "type": "domain", "uuid": "02f03d43-9658-478d-8c7b-0293daa6c4d0", "value": "gyruvi.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495129", "to_ids": true, "type": "domain", "uuid": "738c698a-7cd3-441b-8862-53d996f539b4", "value": "holzveredler247.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495150", "to_ids": true, "type": "domain", "uuid": "19d35361-a9cd-49c7-b881-9cf9ad1b4589", "value": "honknft.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495171", "to_ids": true, "type": "domain", "uuid": "f03d55ca-857e-4c2c-82f6-0ab6f60c9311", "value": "hotelbiloxi.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495192", "to_ids": true, "type": "domain", "uuid": "b6aec5ee-da80-4eea-b6b4-06deff9437f6", "value": "hublink1.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495214", "to_ids": true, "type": "domain", "uuid": "df7a3136-5c02-4ad0-9e5d-b8d93fa79818", "value": "hublink2.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495235", "to_ids": true, "type": "domain", "uuid": "7d1b7874-e706-4680-b590-ae1492a78498", "value": "hublink3.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495256", "to_ids": true, "type": "domain", "uuid": "786e662e-8382-4f1b-9475-a9a68fe83bab", "value": "hublink4.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495277", "to_ids": true, "type": "domain", "uuid": "94f01d79-751e-44eb-9607-41062f9f5d06", "value": "interac-gigadat0012.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495299", "to_ids": true, "type": "domain", "uuid": "216f441c-1ca6-479d-9b01-e0d469d95307", "value": "interac-gigadat15.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495320", "to_ids": true, "type": "domain", "uuid": "1d4a66e5-8fbd-45c0-8dd0-c2b22fb5778b", "value": "investarmco.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495341", "to_ids": true, "type": "domain", "uuid": "c1d7d311-d863-4f6b-ba53-401ede1aecb2", "value": "invitationlink.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495362", "to_ids": true, "type": "domain", "uuid": "9926a69c-3ff3-4063-aff9-6e5e36f18cbf", "value": "invitehub.site", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495383", "to_ids": true, "type": "domain", "uuid": "63f33748-9e26-4f50-8c27-eb5f8adb1b9a", "value": "invitezone.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495404", "to_ids": true, "type": "domain", "uuid": "2976fb54-f559-47c6-bbc8-d35a58efe213", "value": "iralfdgs.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495425", "to_ids": true, "type": "domain", "uuid": "8691a962-fdd5-4cad-b3ad-8e96c110c0df", "value": "jaceviu.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495447", "to_ids": true, "type": "domain", "uuid": "2ef73fbf-b340-4ef2-9ad8-c58c115f7cd8", "value": "jexyni.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495468", "to_ids": true, "type": "domain", "uuid": "f08cb44e-25e1-4d41-912d-056680f831f0", "value": "life-booste.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495489", "to_ids": true, "type": "domain", "uuid": "368c3b50-d097-4f01-b07f-a270085d46c9", "value": "linda-makeup.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495510", "to_ids": true, "type": "domain", "uuid": "0c02c045-8e36-4f4b-b873-992c0d8235c2", "value": "linkhub1.online", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495531", "to_ids": true, "type": "domain", "uuid": "c88eb7b8-1175-4f47-b147-04795e7f04d1", "value": "linkhub2.space", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495553", "to_ids": true, "type": "domain", "uuid": "5137e08f-3063-4736-848d-1b0850825ddd", "value": "meetdatefind.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495576", "to_ids": true, "type": "domain", "uuid": "12cf4cbb-6f09-4d6f-90e3-7fe4b372e69c", "value": "moplih.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495597", "to_ids": true, "type": "domain", "uuid": "2cf9f38f-4bff-48be-82a0-95885092140d", "value": "mydhl725378-order442-online.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495618", "to_ids": true, "type": "domain", "uuid": "300f4243-6045-4135-a15c-edeb5a1233d4", "value": "mygroceries2costco.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495639", "to_ids": true, "type": "domain", "uuid": "198cb688-fc54-4985-9de4-cab964b4c177", "value": "myrbcsecureddevice.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495660", "to_ids": true, "type": "domain", "uuid": "6da1a182-91f7-4556-8e65-bc645f375041", "value": "newtotalca.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495682", "to_ids": true, "type": "domain", "uuid": "3d074b54-4ddd-43b4-91dc-a59f4f00e606", "value": "nywav.life", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495703", "to_ids": true, "type": "domain", "uuid": "ae212809-473a-4f6c-ac7e-a6b3739364d6", "value": "parceltrackdelfedex.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495725", "to_ids": true, "type": "domain", "uuid": "5ec20050-3949-4a8e-9093-e2358a1c362f", "value": "petalsage.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495746", "to_ids": true, "type": "domain", "uuid": "363ea08b-b576-4cc0-a0ba-6198646fcfeb", "value": "pilyf.life", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495767", "to_ids": true, "type": "domain", "uuid": "c203c657-7696-4f75-ae66-c162bb449381", "value": "promoswf.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495788", "to_ids": true, "type": "domain", "uuid": "793db65c-71ff-4c1c-b74d-dd538b734fd8", "value": "promoswh.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495810", "to_ids": true, "type": "domain", "uuid": "a960f23c-5934-48ac-ab35-3656cbc8dc1d", "value": "promoswm.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495831", "to_ids": true, "type": "domain", "uuid": "2fdf4fc4-77a0-4d7c-8fd1-1d5e7664c7bc", "value": "promoswn.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495853", "to_ids": true, "type": "domain", "uuid": "9940eee8-a30f-4ff6-b957-e4b834d57a6e", "value": "promoswu.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495874", "to_ids": true, "type": "domain", "uuid": "69790518-074d-4a89-a981-3ab5230723d1", "value": "qezybu.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495895", "to_ids": true, "type": "domain", "uuid": "03f3b942-9379-4060-b362-a68aafa494e1", "value": "qiqaly.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495916", "to_ids": true, "type": "domain", "uuid": "eb807469-9ef0-4178-bb99-c502d03b8bbc", "value": "quietfostdio.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495937", "to_ids": true, "type": "domain", "uuid": "a570ad81-be3f-49f3-94a1-5f93b699841a", "value": "rbcdevice-login.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495958", "to_ids": true, "type": "domain", "uuid": "a520e290-7d25-451f-86ec-0a39ba9596d0", "value": "rbclogin-digital.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775495980", "to_ids": true, "type": "domain", "uuid": "ccc07384-d4cc-48b7-bb09-93df86fd6ad4", "value": "rbcsecurityservices.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496001", "to_ids": true, "type": "domain", "uuid": "cb5dd1b6-7527-4cca-9243-0135dc288f92", "value": "rujas.biz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496022", "to_ids": true, "type": "domain", "uuid": "d9000ba5-b232-45b1-bfe2-b32297131f47", "value": "someotherbox.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496043", "to_ids": true, "type": "domain", "uuid": "4d2c25bc-5f5a-4734-994c-7091b93c56d3", "value": "strong-tips.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496065", "to_ids": true, "type": "domain", "uuid": "25499fde-6fc3-4336-a543-c1b9e9f23eb6", "value": "suxady.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496086", "to_ids": true, "type": "domain", "uuid": "dffcb0c9-2a07-4e31-be97-c17846174e4e", "value": "talagram.online", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496107", "to_ids": true, "type": "domain", "uuid": "3e74154e-a746-48ee-b742-dca37d7658f4", "value": "talagram.store", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496128", "to_ids": true, "type": "domain", "uuid": "fdc82fcc-6732-4354-9d91-dd318ae944ff", "value": "tdcommercial-securedlogins.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496149", "to_ids": true, "type": "domain", "uuid": "bffee3f2-9398-4a13-853d-a9236464cc4d", "value": "tdonlineverif.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496170", "to_ids": true, "type": "domain", "uuid": "20161bff-d242-4542-8f28-2be52055abfa", "value": "terrainane.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496191", "to_ids": true, "type": "domain", "uuid": "5603d7ae-0d68-4cfb-a584-405b99408f8a", "value": "the-social-spot.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496212", "to_ids": true, "type": "domain", "uuid": "81a40652-89d7-493b-98a0-f88cf12716b3", "value": "tipboost-info.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496234", "to_ids": true, "type": "domain", "uuid": "3ba9131f-5ce3-4d6f-84e1-5d18f5855541", "value": "top9mediatrk.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496255", "to_ids": true, "type": "domain", "uuid": "1f9756e4-7c03-4a3d-b995-ce675dbd7c83", "value": "trending-now.today", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496276", "to_ids": true, "type": "domain", "uuid": "bde99a48-5f92-4718-bfdb-3e8c1265a28d", "value": "ucaboodle.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496297", "to_ids": true, "type": "domain", "uuid": "ea345a32-8ad9-499e-918a-1ab2ab7bccdb", "value": "uzelart.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496318", "to_ids": true, "type": "domain", "uuid": "0e849ad9-59bc-4a41-a394-0b5f257b4dd8", "value": "yellowusheart.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496339", "to_ids": true, "type": "domain", "uuid": "b2bb615b-fd98-488b-bae5-b6ab1bcf132d", "value": "your-link.online", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496360", "to_ids": true, "type": "domain", "uuid": "bf0e35a1-de3e-44fe-a9ef-d802787d7d35", "value": "your-lnk.online", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496382", "to_ids": true, "type": "domain", "uuid": "3931ddab-34b6-4434-972c-be56ad488699", "value": "yourlnk.online", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496403", "to_ids": true, "type": "domain", "uuid": "ad48e6d0-3841-4359-ae92-8cc3b8309efb", "value": "ziqiwui.click", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496424", "to_ids": true, "type": "hostname", "uuid": "6fb7d8cf-1bbd-4c9c-b924-1c6d3b2242a7", "value": "health.tenerium.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496445", "to_ids": true, "type": "hostname", "uuid": "59974d0c-e668-4ee4-9404-249c1059c015", "value": "leadshub.trk-links.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496466", "to_ids": true, "type": "hostname", "uuid": "8f787031-7629-4b76-8a0d-b2530ad0552b", "value": "membros.mtcreatingimages.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496488", "to_ids": true, "type": "hostname", "uuid": "c58c8e98-8335-4112-a5e0-b86617cd5f3a", "value": "object.brovanti.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496509", "to_ids": true, "type": "hostname", "uuid": "a06d109d-c311-4844-ab8c-87331d1a0754", "value": "tds.favbet.partners", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496530", "to_ids": true, "type": "url", "uuid": "127a9d10-18eb-47d0-81d5-ae36ad5ba454", "value": "http://62.60.178.163/ce369e7324834845.php", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496552", "to_ids": true, "type": "url", "uuid": "ab2ca541-cd88-44a1-8c41-b868e00704a9", "value": "https://membros.mtcreatingimages.com/spotify", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496574", "to_ids": true, "type": "url", "uuid": "038eb042-b27f-4496-bb9d-2c19344102fd", "value": "https://estrategicadesenvolvimento.com.br/Webmail/web", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496595", "to_ids": true, "type": "hostname", "uuid": "ab2bd964-398e-43ac-a928-912e1025b24a", "value": "estrategicadesenvolvimento.com.br", "Tag": [ { "colour": "#669ae5", "local": false, "name": "AlreadyExistsError", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496616", "to_ids": true, "type": "domain", "uuid": "54e0f242-a79e-44e0-9921-a13efa7d2913", "value": "bmosecure-portal.app", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1775496637", "to_ids": true, "type": "url", "uuid": "1c332735-ca8a-45bc-b352-dabdcd66747d", "value": "https://honknft.com/connect/rh7_1a7r72zi-kk4k4z?b=1", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] } ] } }