{ "Event": { "analysis": "1", "date": "2026-05-27", "extends_uuid": "", "info": "[Threat Intel] The GHOST STADIUM Score: Billions At Stake At The World\u2019s Largest Football Tournament", "protected": false, "publish_timestamp": "1780368415", "published": true, "threat_level_id": "3", "timestamp": "1780368415", "uuid": "e4437cb1-34ec-4e07-b01f-92303168362f", "Orgc": { "name": "Rectifyq", "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4" }, "Tag": [ { "colour": "#0088cc", "local": false, "name": "misp-galaxy:producer=\"Group-IB\"", "relationship_type": "" }, { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"none-from-src\"", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"from-OTX\"", "relationship_type": "" }, { "colour": "#72ee33", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Keylogging - T1056.001\"", "relationship_type": "" }, { "colour": "#ed66f6", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Steal Web Session Cookie - T1539\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Digital Certificates - T1588.004\"", "relationship_type": "" }, { "colour": "#c202a1", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Link - T1566.002\"", "relationship_type": "" }, { "colour": "#db2044", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Link - T1598.003\"", "relationship_type": "" }, { "colour": "#5c59c9", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Email Accounts - T1586.002\"", "relationship_type": "" }, { "colour": "#82eae0", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Domains - T1583.001\"", "relationship_type": "" }, { "colour": "#62e1b7", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Browser Session Hijacking - T1185\"", "relationship_type": "" }, { "colour": "#8ed4a7", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Credentials from Web Browsers - T1555.003\"", "relationship_type": "" }, { "colour": "#07ff3c", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"LSASS Memory - T1003.001\"", "relationship_type": "" }, { "colour": "#9e0269", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Web Service - T1102\"", "relationship_type": "" }, { "colour": "#1b95cd", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Phishing - T1566\"", "relationship_type": "" }, { "colour": "#59699c", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Valid Accounts - T1078\"", "relationship_type": "" }, { "colour": "#efb098", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Social Media Accounts - T1585.001\"", "relationship_type": "" }, { "colour": "#e08bb2", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Obfuscated Files or Information - T1027\"", "relationship_type": "" }, { "colour": "#356c41", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Encrypted Channel - T1573\"", "relationship_type": "" }, { "colour": "#a0d02a", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Phishing for Information - T1598\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Drive-by Compromise - T1189\"", "relationship_type": "" }, { "colour": "#92e858", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"", "relationship_type": "" }, { "colour": "#bac7a9", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Domain Properties - T1590.001\"", "relationship_type": "" }, { "colour": "#b8ab01", "local": false, "name": "misp-galaxy:target-information=\"United States\"", "relationship_type": "" }, { "colour": "#2afb09", "local": false, "name": "misp-galaxy:target-information=\"Argentina\"", "relationship_type": "" }, { "colour": "#c94db5", "local": false, "name": "misp-galaxy:target-information=\"Brazil\"", "relationship_type": "" }, { "colour": "#1faf16", "local": false, "name": "misp-galaxy:target-information=\"Canada\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:target-information=\"Colombia\"", "relationship_type": "" }, { "colour": "#d52b43", "local": false, "name": "misp-galaxy:target-information=\"Mexico\"", "relationship_type": "" }, { "colour": "#49a260", "local": false, "name": "rectifyq:category=\"threat\"", "relationship_type": "" }, { "colour": "#10003d", "local": false, "name": "rectifyq:sub-category=\"TA-profile\"", "relationship_type": "" }, { "colour": "#130049", "local": false, "name": "rectifyq:sub-category=\"campaign-analysis\"", "relationship_type": "" }, { "colour": "#f1dfed", "local": false, "name": "rectifyq:TA-category=\"Cybercrime\"", "relationship_type": "" }, { "colour": "#ffd12e", "local": false, "name": "rectifyq:target=\"broad-based\"", "relationship_type": "" }, { "colour": "#55acee", "local": false, "name": "rectifyq:MY-relevancy=\"potentially-relevant\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#3800d9", "local": false, "name": "rectifyq:action-taken=\"VT-comment\"", "relationship_type": "" }, { "colour": "#3d00e9", "local": false, "name": "rectifyq:action-taken=\"telegram\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1779937207", "to_ids": false, "type": "link", "uuid": "a2d2832a-c435-44e5-87e5-6d6ae39f7dbb", "value": "https://www.group-ib.com/blog/ghost-stadium-football-fraud/" }, { "category": "Other", "comment": "Description", "deleted": false, "disable_correlation": false, "timestamp": "1779937207", "to_ids": false, "type": "text", "uuid": "f862ddcf-5d46-4669-a8df-7c0dfaaafeba", "value": "Researchers uncovered a massive fraud ecosystem targeting the 2026 FIFA World Cup, identifying over 4,300 fraudulent domains impersonating FIFA's official website since August 2025. At the center operates GHOST STADIUM, a Chinese-speaking threat actor running a sophisticated phishing campaign across 300+ domains using a pixel-perfect clone of FIFA's authentication system. The operation harvests credentials, sells fake tickets, and processes payments through five distinct channels including cryptocurrency. Estimated losses from premium ticket fraud alone range from $71 million to $474 million, with total campaign losses potentially reaching billions. Six distinct fraud schemes operate in parallel: credential phishing, fake ticket sales, counterfeit merchandise, fake streaming platforms, fraudulent betting sites, and infostealer-driven credential theft. Over 2,513 FIFA account credentials are already circulating on dark-web markets. The campaign exploits Facebook advertising as its primary distribution chann..." }, { "category": "Other", "comment": "Summary", "deleted": false, "disable_correlation": false, "timestamp": "1779937207", "to_ids": false, "type": "text", "uuid": "188ca468-89ea-4820-83e2-37e5d2dd5979", "value": "Name: The GHOST STADIUM Score: Billions At Stake At The World\u2019s Largest Football Tournament\nAuthor: AlienVault\nAdversary: GHOST STADIUM\nTags: [\"ticket fraud\", \"cryptocurrency fraud\", \"ghost stadium\", \"credential phishing\", \"facebook advertising exploitation\", \"fifa world cup 2026\", \"phishing-as-a-service\"]\nTgtd countries: [\"United States of America\", \"Argentina\", \"Brazil\", \"Canada\", \"Colombia\", \"Mexico\"]\nMlwr families: [\"Vidar\", \"Lumma\"]\nAttack_ids: [\"T1056.001\", \"T1539\", \"T1588.004\", \"T1566.002\", \"T1598.003\", \"T1586.002\", \"T1583.001\", \"T1185\", \"T1555.003\", \"T1003.001\", \"T1102\", \"T1566\", \"T1078\", \"T1585.001\", \"T1027\", \"T1573\", \"T1598\", \"T1189\", \"T1071.001\", \"T1590.001\"]\nIndustries: [\"Hospitality\", \"Media\", \"Finance\"]" }, { "category": "Attribution", "comment": "Adversary", "deleted": false, "disable_correlation": false, "timestamp": "1780197620", "to_ids": false, "type": "threat-actor", "uuid": "857da0be-0416-4d39-b304-ca2315b5ef56", "value": "GHOST STADIUM", "Tag": [ { "colour": "#0088cc", "local": false, "name": "misp-galaxy:producer=\"Group-IB\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298467", "to_ids": true, "type": "domain", "uuid": "24765767-2e87-4033-85bf-95d5236d47c1", "value": "fifa.gold", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298489", "to_ids": true, "type": "domain", "uuid": "ee5f8b89-b501-4b55-a57c-73b56fa45c8e", "value": "fifa.black", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298510", "to_ids": true, "type": "domain", "uuid": "b7f1cd9d-9af9-4a0b-9322-a3731f2e7b83", "value": "fifa.tax", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298532", "to_ids": true, "type": "domain", "uuid": "f66bf9bc-c827-4c43-b3ba-d0542a48108a", "value": "fifaweb.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298553", "to_ids": true, "type": "domain", "uuid": "f76bfa57-d56f-4b7e-8066-86ae57334f11", "value": "fifa.red", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298575", "to_ids": true, "type": "domain", "uuid": "8fa30645-ac28-445b-830e-7d816d1cc326", "value": "fifa.fund", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298596", "to_ids": true, "type": "ip-dst", "uuid": "ba3f907b-5e0c-4e67-9cb0-42c1e62065d9", "value": "148.178.22.16", "Tag": [ { "colour": "#3146a1", "local": false, "name": "asn:asn=\"54801\"", "relationship_type": "" }, { "colour": "#17b1d0", "local": false, "name": "asn:as-owner=\"ZILLION-NETWORK\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298617", "to_ids": true, "type": "domain", "uuid": "65e0d594-db16-4538-81c8-32842020eaa6", "value": "fifa-com.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298639", "to_ids": true, "type": "domain", "uuid": "0121ef39-a1e3-4df5-a3c7-d63c007d6576", "value": "fifa-com.site", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298660", "to_ids": true, "type": "domain", "uuid": "5f990f7d-5369-4ef6-be3b-805bf5da85f0", "value": "fifa-com.store", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298681", "to_ids": true, "type": "domain", "uuid": "1e353564-ee91-4249-8343-12c430674ab6", "value": "fifa-com.website", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298702", "to_ids": true, "type": "domain", "uuid": "ed29edaa-fea3-4ac5-a67a-fd90296191d0", "value": "fifa.city", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:01/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1780298381", "to_ids": true, "type": "sha1", "uuid": "332b61ea-b558-41fd-8bfb-aadd31c44b5b", "value": "3b8bb7631b39f455d31544b55ba97b49ab1888c1", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298723", "to_ids": true, "type": "ip-dst", "uuid": "9dae8ede-ba8d-43c3-8a42-4e47d5934439", "value": "148.178.16.48", "Tag": [ { "colour": "#3146a1", "local": false, "name": "asn:asn=\"54801\"", "relationship_type": "" }, { "colour": "#17b1d0", "local": false, "name": "asn:as-owner=\"ZILLION-NETWORK\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298744", "to_ids": true, "type": "ip-dst", "uuid": "98d50176-f870-4055-98a5-a169a0c08dab", "value": "154.86.0.33", "Tag": [ { "colour": "#715635", "local": false, "name": "asn:asn=\"139646\"", "relationship_type": "" }, { "colour": "#ea0a1a", "local": false, "name": "asn:as-owner=\"HKMTC-AS-AP HONG KONG Megalayer Technology Co.,Limited\"", "relationship_type": "" }, { "colour": "#fbf8fb", "local": false, "name": "asn:as-country=\"HK\"", "relationship_type": "" }, { "colour": "#daa28c", "local": false, "name": "misp-galaxy:country=\"hong kong\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298765", "to_ids": true, "type": "domain", "uuid": "3b2d17fd-6c86-4594-adef-db7ea7c8124a", "value": "fifa-com.vip", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:01/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1780298382", "to_ids": true, "type": "sha1", "uuid": "e4f1032b-b9ec-49cb-960f-9c019919e85c", "value": "84ecdca915f1af822ccc8a04479f5179104f353c", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:01/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1780298383", "to_ids": true, "type": "sha1", "uuid": "10eff989-c750-46d7-a101-e208117b6616", "value": "9bd164dd3f50d196c7dff4f6c1b0f1345ac96d9a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298787", "to_ids": true, "type": "ip-dst", "uuid": "171bf397-91ae-4b28-ad1c-8054eb717845", "value": "137.220.224.67", "Tag": [ { "colour": "#dd0399", "local": false, "name": "asn:asn=\"152194\"", "relationship_type": "" }, { "colour": "#8c0628", "local": false, "name": "asn:as-owner=\"CTGSERVERLIMITED-AS-AP CTG Server Limited\"", "relationship_type": "" }, { "colour": "#fbf8fb", "local": false, "name": "asn:as-country=\"HK\"", "relationship_type": "" }, { "colour": "#daa28c", "local": false, "name": "misp-galaxy:country=\"hong kong\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298808", "to_ids": true, "type": "ip-dst", "uuid": "78d335d3-93b5-4007-97c1-6bc0bdb0fe92", "value": "148.178.16.5", "Tag": [ { "colour": "#3146a1", "local": false, "name": "asn:asn=\"54801\"", "relationship_type": "" }, { "colour": "#17b1d0", "local": false, "name": "asn:as-owner=\"ZILLION-NETWORK\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298829", "to_ids": true, "type": "ip-dst", "uuid": "58d9dae8-05fa-4af7-96a0-a63b46db3680", "value": "148.178.18.23", "Tag": [ { "colour": "#3146a1", "local": false, "name": "asn:asn=\"54801\"", "relationship_type": "" }, { "colour": "#17b1d0", "local": false, "name": "asn:as-owner=\"ZILLION-NETWORK\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298850", "to_ids": true, "type": "ip-dst", "uuid": "3b8314c3-c221-43ff-b020-571f245ec866", "value": "148.178.18.60", "Tag": [ { "colour": "#3146a1", "local": false, "name": "asn:asn=\"54801\"", "relationship_type": "" }, { "colour": "#17b1d0", "local": false, "name": "asn:as-owner=\"ZILLION-NETWORK\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298871", "to_ids": true, "type": "ip-dst", "uuid": "df462607-edad-4eef-845c-44356814ce06", "value": "207.56.1.93", "Tag": [ { "colour": "#3146a1", "local": false, "name": "asn:asn=\"54801\"", "relationship_type": "" }, { "colour": "#17b1d0", "local": false, "name": "asn:as-owner=\"ZILLION-NETWORK\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298892", "to_ids": true, "type": "ip-dst", "uuid": "55d21e24-ef96-46b2-940a-c40c10ed3dd3", "value": "85.121.242.41", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298913", "to_ids": true, "type": "url", "uuid": "a9843cdb-bc36-43db-99c4-40112ac0d6a3", "value": "http://fifa-tickets.vip/authorize.html", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298934", "to_ids": true, "type": "url", "uuid": "6e852fbc-5cd6-431b-a4b3-5661b20bed23", "value": "http://fifa-tickets.vip/pay/FWC20260418A3230F12AC", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298956", "to_ids": true, "type": "url", "uuid": "f84110c2-125d-4a1d-a6e9-6251497be96c", "value": "http://fifa-tickets.vip/tickets_shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298977", "to_ids": true, "type": "url", "uuid": "e8e1044d-5706-4998-9a48-c16ee44e8e12", "value": "http://www.billplz.com/bills/6e88393d1b82ede9", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780298998", "to_ids": true, "type": "domain", "uuid": "b79fdfe1-27c9-4fa2-b0d6-ed45630db90a", "value": "fifa-26-worldcup.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299019", "to_ids": true, "type": "domain", "uuid": "64e5d900-8cae-45d1-ba7a-65eb5cd0bb5d", "value": "fifa-com.co", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299040", "to_ids": true, "type": "domain", "uuid": "13685c03-da59-40aa-b394-9aa5aae4c014", "value": "fifa-com.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299061", "to_ids": true, "type": "domain", "uuid": "43500654-d7df-4677-a75a-9fa6e37996cc", "value": "fifa-com.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299082", "to_ids": true, "type": "domain", "uuid": "a72cdd37-7d89-43a8-b6bb-266ff2678958", "value": "fifa-com.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299104", "to_ids": true, "type": "domain", "uuid": "8d22f430-3481-4213-ac4e-a5942ee8eeaf", "value": "fifa-tickets.vip", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299125", "to_ids": true, "type": "domain", "uuid": "9bf0efbb-3c12-45d6-8e81-68f651185284", "value": "fifa-web.co", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299146", "to_ids": true, "type": "domain", "uuid": "98eebe15-0e37-475b-a1f4-0150c1706da1", "value": "fifa.bio", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299167", "to_ids": true, "type": "domain", "uuid": "27b49643-c884-4cc6-a520-62ceccc82ee7", "value": "fifa.cash", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299188", "to_ids": true, "type": "domain", "uuid": "713fdc50-db01-43a0-8a36-3f4ca533b5ca", "value": "fifa.center", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299209", "to_ids": true, "type": "domain", "uuid": "7b83a455-108f-4a4d-85a0-ba34778c084d", "value": "fifa.market", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299230", "to_ids": true, "type": "domain", "uuid": "616b3c9f-c012-474a-8f37-d03869eb2c41", "value": "fifa.party", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299251", "to_ids": true, "type": "domain", "uuid": "d74fa2d6-0673-47e1-bdb3-84f6c4127163", "value": "fifa.sale", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299272", "to_ids": true, "type": "domain", "uuid": "ec07372d-4bd7-4057-a60c-a19528fe9a3c", "value": "fifa.shopping", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299293", "to_ids": true, "type": "domain", "uuid": "b2ec371c-0eb6-49fe-8687-5090b6498726", "value": "fifa.show", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299314", "to_ids": true, "type": "domain", "uuid": "bf95e246-7732-4b1d-9f1f-39d721dc3fa5", "value": "fifa.ski", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299335", "to_ids": true, "type": "domain", "uuid": "9cbaf84f-7bb2-45b7-b241-9ec04f5e8e53", "value": "fifa2026tickets-streamlive.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299356", "to_ids": true, "type": "domain", "uuid": "50ef9e19-7910-460d-8e79-435abc916a8d", "value": "football-game.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299377", "to_ids": true, "type": "domain", "uuid": "d0df894c-2ca3-4a54-b94a-2a6facd06880", "value": "football-ticket.shop", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299399", "to_ids": true, "type": "domain", "uuid": "c2230281-eb26-4e00-92ce-932c057c0a6b", "value": "football-ticket.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299420", "to_ids": true, "type": "domain", "uuid": "b359b636-9109-42f3-a4a2-2fe0e10940d1", "value": "football-tickets.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299441", "to_ids": true, "type": "domain", "uuid": "79deba73-e46d-4fc8-a037-635c8828bdc5", "value": "mm-fifa.top", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299463", "to_ids": true, "type": "domain", "uuid": "11f337b2-da9e-41b5-9135-033bd8871a71", "value": "unitycup2026.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299484", "to_ids": true, "type": "domain", "uuid": "964e219e-d551-431c-8c27-91a8527037af", "value": "wc26-fifa.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299506", "to_ids": true, "type": "domain", "uuid": "8264a685-158c-4fce-9b02-ab17b9808fa3", "value": "www-fifa.co", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299527", "to_ids": true, "type": "domain", "uuid": "90eae4cd-d05c-47a2-9c18-c0b4d2effc1f", "value": "www-fifa.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299548", "to_ids": true, "type": "domain", "uuid": "87633f56-1313-45c3-a112-33b2be40627a", "value": "www-fifa.com.co", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299569", "to_ids": true, "type": "domain", "uuid": "05a8a232-b15f-4229-b395-149f4af70606", "value": "www-fifa.me", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299590", "to_ids": true, "type": "domain", "uuid": "402cae68-f6c8-4ff7-9280-4914375f361d", "value": "www-fifaworldcup.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299611", "to_ids": true, "type": "hostname", "uuid": "746a814d-dd7b-46c3-9192-4d3967bf10b4", "value": "pay.zfxupi.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299632", "to_ids": true, "type": "hostname", "uuid": "a73271a9-1540-4ac6-b7e8-ad9f77e9ff52", "value": "testnet.chainugo.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299653", "to_ids": true, "type": "hostname", "uuid": "1649a973-9ef1-477d-981a-b7108ce83628", "value": "www.fifa.show", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299674", "to_ids": true, "type": "domain", "uuid": "4edb8a4d-45c1-4eab-a907-95a63f211bbe", "value": "fifa.cafe", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299695", "to_ids": true, "type": "domain", "uuid": "c4943623-45f8-46af-9027-cd18bcaf700d", "value": "fifa.house", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299716", "to_ids": true, "type": "ip-dst", "uuid": "065a5ed2-3c0e-4859-91a0-90226f4502b3", "value": "66.112.212.25", "Tag": [ { "colour": "#bf982b", "local": false, "name": "asn:asn=\"25820\"", "relationship_type": "" }, { "colour": "#4a30c9", "local": false, "name": "asn:as-owner=\"IT7NET\"", "relationship_type": "" }, { "colour": "#1273fb", "local": false, "name": "asn:as-country=\"CA\"", "relationship_type": "" }, { "colour": "#813aa0", "local": false, "name": "misp-galaxy:country=\"canada\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299738", "to_ids": true, "type": "ip-dst", "uuid": "5ef93533-9e32-4881-9dce-18f4d799d083", "value": "104.225.235.49", "Tag": [ { "colour": "#bf982b", "local": false, "name": "asn:asn=\"25820\"", "relationship_type": "" }, { "colour": "#4a30c9", "local": false, "name": "asn:as-owner=\"IT7NET\"", "relationship_type": "" }, { "colour": "#1273fb", "local": false, "name": "asn:as-country=\"CA\"", "relationship_type": "" }, { "colour": "#813aa0", "local": false, "name": "misp-galaxy:country=\"canada\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299759", "to_ids": true, "type": "ip-dst", "uuid": "86277a5b-0362-402a-b927-205614f51b2a", "value": "89.208.250.38", "Tag": [ { "colour": "#bf982b", "local": false, "name": "asn:asn=\"25820\"", "relationship_type": "" }, { "colour": "#4a30c9", "local": false, "name": "asn:as-owner=\"IT7NET\"", "relationship_type": "" }, { "colour": "#1273fb", "local": false, "name": "asn:as-country=\"CA\"", "relationship_type": "" }, { "colour": "#813aa0", "local": false, "name": "misp-galaxy:country=\"canada\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299780", "to_ids": true, "type": "ip-dst", "uuid": "534d5066-8bb6-407f-9a54-4944b4011863", "value": "65.49.223.138", "Tag": [ { "colour": "#bf982b", "local": false, "name": "asn:asn=\"25820\"", "relationship_type": "" }, { "colour": "#4a30c9", "local": false, "name": "asn:as-owner=\"IT7NET\"", "relationship_type": "" }, { "colour": "#1273fb", "local": false, "name": "asn:as-country=\"CA\"", "relationship_type": "" }, { "colour": "#813aa0", "local": false, "name": "misp-galaxy:country=\"canada\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299801", "to_ids": true, "type": "ip-dst", "uuid": "7b444a54-dfae-4d96-9708-027d32d6b2a2", "value": "216.189.149.193", "Tag": [ { "colour": "#cd98c4", "local": false, "name": "asn:asn=\"7489\"", "relationship_type": "" }, { "colour": "#0f0390", "local": false, "name": "asn:as-owner=\"HOSTUS-GLOBAL-AS HostUS\"", "relationship_type": "" }, { "colour": "#fbf8fb", "local": false, "name": "asn:as-country=\"HK\"", "relationship_type": "" }, { "colour": "#daa28c", "local": false, "name": "misp-galaxy:country=\"hong kong\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299822", "to_ids": true, "type": "url", "uuid": "acf6d8a8-0d59-406d-8fd3-174f4d33ce26", "value": "fifa-tickets.vip/tickets_shop", "Tag": [ { "colour": "#f08989", "local": false, "name": "NotFoundError", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299843", "to_ids": true, "type": "url", "uuid": "fcf37265-e460-42cc-9383-782c045f94cd", "value": "fifa-tickets.vip/authorize.html", "Tag": [ { "colour": "#f08989", "local": false, "name": "NotFoundError", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299864", "to_ids": true, "type": "url", "uuid": "77653e7e-f778-4fd4-9c1b-13b3228238d9", "value": "fifa-tickets.vip/pay/FWC20260418A3230F12AC", "Tag": [ { "colour": "#f08989", "local": false, "name": "NotFoundError", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299885", "to_ids": true, "type": "domain", "uuid": "8772689d-8cd8-43bd-b308-02d02bb258ec", "value": "billplz.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1780299906", "to_ids": true, "type": "url", "uuid": "dfb98c78-348a-4ce8-9731-7f26d929ebb5", "value": "www.billplz.com/bills/6e88393d1b82ede9", "Tag": [ { "colour": "#f08989", "local": false, "name": "NotFoundError", "relationship_type": "" } ] } ] } }