{
  "Event": {
    "analysis": "1",
    "date": "2026-04-24",
    "extends_uuid": "",
    "info": "[Threat Intel] The AI Frame Campaign Continues",
    "protected": false,
    "publish_timestamp": "1779545678",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1777630158",
    "uuid": "9dbf6f2d-daa6-4a9f-aa9b-d5d65728b937",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#983d3b",
        "local": false,
        "name": "misp-galaxy:producer=\"Domaintools\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-OTX\"",
        "relationship_type": ""
      },
      {
        "colour": "#8ee8d8",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Screen Capture - T1113\"",
        "relationship_type": ""
      },
      {
        "colour": "#e7d48a",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Owner/User Discovery - T1033\"",
        "relationship_type": ""
      },
      {
        "colour": "#ed66f6",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Steal Web Session Cookie - T1539\"",
        "relationship_type": ""
      },
      {
        "colour": "#77a4ec",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Email Collection - T1114\"",
        "relationship_type": ""
      },
      {
        "colour": "#7da4ad",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Match Legitimate Resource Name or Location - T1036.005\"",
        "relationship_type": ""
      },
      {
        "colour": "#47d9d3",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Malicious File - T1204.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#c202a1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Link - T1566.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#9dc839",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Clipboard Data - T1115\"",
        "relationship_type": ""
      },
      {
        "colour": "#7d7034",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Information Discovery - T1082\"",
        "relationship_type": ""
      },
      {
        "colour": "#029dd6",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Software Extensions - T1176\"",
        "relationship_type": ""
      },
      {
        "colour": "#62e1b7",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Browser Session Hijacking - T1185\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Portal Capture - T1056.003\"",
        "relationship_type": ""
      },
      {
        "colour": "#36a9d8",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Account Discovery - T1087\"",
        "relationship_type": ""
      },
      {
        "colour": "#9e0269",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Service - T1102\"",
        "relationship_type": ""
      },
      {
        "colour": "#a9f8b1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1041\"",
        "relationship_type": ""
      },
      {
        "colour": "#f07d7c",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Non-Standard Port - T1571\"",
        "relationship_type": ""
      },
      {
        "colour": "#e08bb2",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Obfuscated Files or Information - T1027\"",
        "relationship_type": ""
      },
      {
        "colour": "#356c41",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Encrypted Channel - T1573\"",
        "relationship_type": ""
      },
      {
        "colour": "#a42e64",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Data from Information Repositories - T1213\"",
        "relationship_type": ""
      },
      {
        "colour": "#92e858",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#130049",
        "local": false,
        "name": "rectifyq:sub-category=\"campaign-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#18005c",
        "local": false,
        "name": "rectifyq:topic=\"ai\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#55acee",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"potentially-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777028435",
        "to_ids": false,
        "type": "link",
        "uuid": "b28491f5-8e1f-4025-ac8e-42be4f11187e",
        "value": "https://dti.domaintools.com/securitysnacks/the-ai-frame-campaign-continues"
      },
      {
        "category": "Other",
        "comment": "Description",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777028435",
        "to_ids": false,
        "type": "text",
        "uuid": "de90bd7d-e454-4da5-864b-d8380d274931",
        "value": "A malicious Chrome extension impersonating Google's Authenticator application has been identified as part of an ongoing campaign active since early 2026. The extension requests excessive permissions and contains dormant infrastructure suggesting a staged deployment model where malicious updates can be delivered without requiring further user approval. This extension is linked to at least six others through a shared developer front, with two already carrying fully operational malicious payloads. These extensions utilize hidden iframes to inject attacker-controlled content, deploy fraudulent paywalls for free services, and maintain bidirectional communication with command and control servers. The infrastructure maps directly to the AiFrame campaign, which has reportedly compromised over 260,000 users from 2025 to present, marking a continued evolution of this threat."
      },
      {
        "category": "Other",
        "comment": "Summary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777028435",
        "to_ids": false,
        "type": "text",
        "uuid": "a4dc44ad-1af5-4b31-b9aa-f992bd666074",
        "value": "Name: The AI Frame Campaign Continues\nAuthor: AlienVault\nAdversary: \nTags: [\"two-factor authentication\", \"browser security\", \"chrome extension\", \"fraudulent paywall\", \"credential theft\", \"aiframe campaign\", \"iframe injection\"]\nTgtd countries: []\nMlwr families: []\nAttack_ids: [\"T1113\", \"T1033\", \"T1539\", \"T1114\", \"T1036.005\", \"T1204.002\", \"T1566.002\", \"T1115\", \"T1082\", \"T1176\", \"T1185\", \"T1056.003\", \"T1087\", \"T1102\", \"T1041\", \"T1571\", \"T1027\", \"T1573\", \"T1213\", \"T1071.001\"]\nIndustries: []"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628444",
        "to_ids": true,
        "type": "domain",
        "uuid": "264aa486-c275-4041-8897-0e6fb3e7aa7b",
        "value": "tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628465",
        "to_ids": true,
        "type": "hostname",
        "uuid": "ef3ad9e4-d081-4080-a01f-be5c21cbba79",
        "value": "asking-chat-gpt.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628486",
        "to_ids": true,
        "type": "hostname",
        "uuid": "a7b271d0-0289-4c3d-a4f6-6a9435693b0d",
        "value": "chat-gbt.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628507",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c802c367-1eb0-4332-973e-13d63d674cd3",
        "value": "chat-with-gemini.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628528",
        "to_ids": true,
        "type": "domain",
        "uuid": "e659e219-d14e-47f9-b0ae-79b853eaa765",
        "value": "airnetic.space",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628549",
        "to_ids": true,
        "type": "hostname",
        "uuid": "39bedd09-67f9-44e5-95d8-8a623ff0b061",
        "value": "claude.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628571",
        "to_ids": true,
        "type": "domain",
        "uuid": "4509a95a-705a-4db5-9a3a-14dfc6a159ed",
        "value": "ai-chat-to-pdf.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628592",
        "to_ids": true,
        "type": "domain",
        "uuid": "c12303a5-15fc-4f90-9228-45c2833d3e1d",
        "value": "heic-to-jpg.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628613",
        "to_ids": true,
        "type": "domain",
        "uuid": "301bb2cf-2acc-46cd-a87f-1a0d6777f59a",
        "value": "onlineapp.live",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628634",
        "to_ids": true,
        "type": "domain",
        "uuid": "4d5ede8c-0dbb-4238-8b1a-ea50075396ac",
        "value": "sidenox.stream",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628655",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe5af239-7f63-4bbc-8e88-b9321a14943b",
        "value": "softnetica.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628676",
        "to_ids": true,
        "type": "domain",
        "uuid": "38602ab8-c67c-4127-b478-1099d2532c1c",
        "value": "whitelab.studio",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628697",
        "to_ids": true,
        "type": "hostname",
        "uuid": "4274cc0c-025d-40e4-ad55-b58f63877633",
        "value": "api.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628719",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f45a60a4-29d5-46d7-a256-e630065fba5c",
        "value": "ask-gemini.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628740",
        "to_ids": true,
        "type": "hostname",
        "uuid": "893203e6-e393-4e3c-8f49-ec40224f32c5",
        "value": "authenticator.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628762",
        "to_ids": true,
        "type": "hostname",
        "uuid": "eca6ce32-0cce-49be-8eee-e953ffe4e6ca",
        "value": "authenticator.whitelab.studio",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628783",
        "to_ids": true,
        "type": "hostname",
        "uuid": "b0e19b8e-9b70-4dd5-ad72-826e90fd0d7c",
        "value": "bard.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628804",
        "to_ids": true,
        "type": "hostname",
        "uuid": "dce6acb1-0c57-44d9-a481-bbeb5dfdc0c4",
        "value": "chat-ai.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628825",
        "to_ids": true,
        "type": "hostname",
        "uuid": "9e294f7b-5dac-4725-97fa-0bf614c5e016",
        "value": "chat-bot-gpt.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628846",
        "to_ids": true,
        "type": "hostname",
        "uuid": "dd9f73fb-5f2c-495f-8f36-8f7ec572d030",
        "value": "chatgbt.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628867",
        "to_ids": true,
        "type": "hostname",
        "uuid": "0a0871c4-fe11-4e59-8431-57dc408c4045",
        "value": "chatgpt.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628889",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f70a1295-d341-4dca-bddc-7bb6e785d4a6",
        "value": "deepseek-to-pdf.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628910",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c404a20e-285f-4d2a-b24b-39de80a62bc6",
        "value": "deepseek.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628931",
        "to_ids": true,
        "type": "hostname",
        "uuid": "1578af15-6d14-43d2-9814-b963bbfb55a5",
        "value": "gemini.google.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628953",
        "to_ids": true,
        "type": "hostname",
        "uuid": "3719071b-6eb6-4ada-9d86-d395f848f628",
        "value": "gemini.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628974",
        "to_ids": true,
        "type": "hostname",
        "uuid": "3a23c9c7-b200-4a6e-82d7-205f0120b0f5",
        "value": "grok-chatbot.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777628995",
        "to_ids": true,
        "type": "hostname",
        "uuid": "abbffe43-1793-4741-817b-2ecbabdd992c",
        "value": "grok.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629016",
        "to_ids": true,
        "type": "hostname",
        "uuid": "10217d2f-3d0d-4eb5-abbd-901efef88bf4",
        "value": "llama.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629038",
        "to_ids": true,
        "type": "hostname",
        "uuid": "e114401b-22b8-4358-abe4-ff8dea1aa9f0",
        "value": "www.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629059",
        "to_ids": true,
        "type": "hostname",
        "uuid": "c7f50a92-9cc0-40e4-9d13-238987540f3c",
        "value": "xai.tapnetic.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629080",
        "to_ids": true,
        "type": "domain",
        "uuid": "350665e3-1bbc-4ccd-9071-690cf8d08316",
        "value": "appbox.space",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629101",
        "to_ids": true,
        "type": "domain",
        "uuid": "405a4863-ed44-46d4-a2ad-ad4d1ceb7f09",
        "value": "authenticator.sh",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629123",
        "to_ids": true,
        "type": "domain",
        "uuid": "a83f256b-53ac-4b91-98a7-fece80ee0efa",
        "value": "onlineapp.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629145",
        "to_ids": true,
        "type": "domain",
        "uuid": "07b28dba-4a28-4d0a-8bdf-f6d56b6acc86",
        "value": "sidentica.app",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629166",
        "to_ids": true,
        "type": "url",
        "uuid": "ba1130e9-d7ad-4ac9-950e-b97d4a332a6f",
        "value": "https://chromewebstore.google.com/detail/ai-chat-to-pdf/nlfkaldinolmacagmiddfpnfaeclfibn?hl=en",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629187",
        "to_ids": true,
        "type": "url",
        "uuid": "26337b9a-e353-4467-a57b-7c1e22943977",
        "value": "https://chromewebstore.google.com/detail/convert-heic-to-jpg/nmijijenojhiaohkfedfgchgbmjnfcpp?hl=en",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629209",
        "to_ids": true,
        "type": "url",
        "uuid": "367bd77a-6e46-4a83-ba01-6b6bbc421aed",
        "value": "https://chromewebstore.google.com/detail/ai-agent/fdlagfnfaheppaigholhoojabfaapnhb?hl=en",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629230",
        "to_ids": true,
        "type": "url",
        "uuid": "46f15108-9e05-4a55-bd73-4eb84a9f0419",
        "value": "https://chromewebstore.google.com/detail/deepseek-to-pdf/fplgihadlmhndfcccdojmblkdilfgkad?hl=en",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629251",
        "to_ids": true,
        "type": "url",
        "uuid": "7a40f379-efef-4b09-95ac-b3fab696eef8",
        "value": "https://chromewebstore.google.com/detail/convert-jpg-to-pdf/mgceiehcajpibpoeiddepnnmfkgiipdd",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629272",
        "to_ids": true,
        "type": "url",
        "uuid": "8280776c-d40b-4403-9f1c-8e4e23b714f7",
        "value": "https://chromewebstore.google.com/detail/2fa/ebhcbenbgjmaebpgbldimndmfomjmphd?hl=en",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777629293",
        "to_ids": true,
        "type": "url",
        "uuid": "0f8ab2fa-bdfb-4760-b7cd-ab7c4012fb4c",
        "value": "https://chromewebstore.google.com/detail/mp4-to-mp3-converter/bnongocfekaonhomdobnhlgieoelaakf?hl=en",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#f08989",
            "local": false,
            "name": "NotFoundError",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}