{ "Event": { "analysis": "1", "date": "2023-04-14", "extends_uuid": "", "info": "Sweet QuaDreams A First Look at Spyware Vendor QuaDream\u2019s Exploits, Victims, and Customers", "publish_timestamp": "1681496878", "published": true, "threat_level_id": "1", "timestamp": "1681496858", "uuid": "47d6a201-507c-4cb0-904e-2acebcd59a69", "Orgc": { "name": "CUDESO", "uuid": "56c42374-fdb8-4544-a218-41ffc0a8ab16" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:white", "relationship_type": "" } ], "Attribute": [ { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681495593", "to_ids": false, "type": "comment", "uuid": "88528c00-0b54-4474-9e92-a7bb59ad1085", "value": "Based on an analysis of samples shared with us by Microsoft Threat Intelligence, we developed indicators that enabled us to identify at least five civil society victims of QuaDream\u2019s spyware and exploits in North America, Central Asia, Southeast Asia, Europe, and the Middle East. Victims include journalists, political opposition figures, and an NGO worker. We are not naming the victims at this time." }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681495607", "to_ids": false, "type": "comment", "uuid": "a3792b04-8d8e-453c-973d-aab0c53bd247", "value": "We also identify traces of a suspected iOS 14 zero-click exploit used to deploy QuaDream\u2019s spyware. The exploit was deployed as a zero-day against iOS versions 14.4 and 14.4.2, and possibly other versions. The suspected exploit, which we call ENDOFDAYS, appears to make use of invisible iCloud calendar invitations sent from the spyware\u2019s operator to victims." }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681495625", "to_ids": false, "type": "comment", "uuid": "05d2d637-a211-439d-9c58-e821b965c901", "value": "We performed Internet scanning to identify QuaDream servers, and in some cases were able to identify operator locations for QuaDream systems. We detected systems operated from Bulgaria, Czech Republic, Hungary, Ghana, Israel, Mexico, Romania, Singapore, United Arab Emirates (UAE), and Uzbekistan." }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681495639", "to_ids": false, "type": "comment", "uuid": "5993400d-fa3c-49f1-956e-c7125d110cf8", "value": "QuaDream has had a partnership with a Cypriot company called InReach, with whom it is currently embroiled in a legal dispute. Numerous key individuals associated with both companies have prior connections with another surveillance vendor, Verint, as well as Israeli intelligence agencies." }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681495881", "to_ids": false, "type": "comment", "uuid": "29dce324-01b7-489e-8fba-7f3b08e59cd3", "value": "Sample 1 appeared to be a downloader designed to exfiltrate basic device information, and download and execute an additional payload. Sample 2 appeared to be a full featured spyware payload. Nevertheless, both Sample 1 and Sample 2 shared highly distinctive commonalities, including largely identical functions for spawning processes. The functions create (and later remove) a distinctive subfolder within the com.apple.xpc.roleaccountd.staging folder on the phone." }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681495905", "to_ids": false, "type": "filename", "uuid": "e5e3b294-3ecc-451f-b700-2370ffbeb235", "value": "/private/var/db/com.apple.xpc.roleaccountd.staging/PlugIns/fud.appex/" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681496185", "to_ids": false, "type": "comment", "uuid": "240c8906-d9cf-4ca1-a8a6-2654b1f4fd40", "value": "The user\u2019s Calendar.sqlitedb file showed a suspicious event added to the calendar in 2021 organised by a user [REDACTED1]@icloud.com. The summary of the event was \u201cMeeting\u201d, and the description of the event was \u201cNotes\u201d. We obtained an .ics file for this event from their iCloud calendar via CalDAV. The event contained remnants of a possible XML escape, where the CDATA opening and closing tags were embedded in keys in the .ics file (highlighted below)." }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681496408", "to_ids": false, "type": "link", "uuid": "1969f0e8-c5e4-43b2-969b-2dc6eaeb70b3", "value": "https://citizenlab.ca/2023/04/spyware-vendor-quadream-exploits-victims-customers/" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681496422", "to_ids": false, "type": "link", "uuid": "c2d973da-f9ce-4802-a4af-cb035391bae1", "value": "https://www.microsoft.com/en-us/security/blog/2023/04/11/dev-0196-quadreams-kingspawn-malware-used-to-target-civil-society-in-europe-north-america-the-middle-east-and-southeast-asia/" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1681496674", "to_ids": false, "type": "comment", "uuid": "6756b174-7b57-4db1-817c-a92ee83b5298", "value": "They tended to only use a single domain per IP address and domains were very rarely reused across multiple IP addresses. Many of the observed domains were deployed using free Let\u2019s Encrypt SSL certificates, while others used self-signed certificates designed to blend in with normal Kubernetes deployments." }, { "category": "Other", "comment": "Host-based indicators", "deleted": false, "disable_correlation": false, "timestamp": "1681496718", "to_ids": false, "type": "comment", "uuid": "56ed8058-a274-4d51-bba4-9eb16b5ce43f", "value": "The file existing, or process activity from, /private/var/db/com.apple.xpc.roleaccountd.staging/subridged" }, { "category": "Other", "comment": "Host-based indicators", "deleted": false, "disable_correlation": false, "timestamp": "1681496718", "to_ids": false, "type": "comment", "uuid": "d8e441af-adbf-4905-a75f-794434189048", "value": "The file existing, or process activity from, com.apple.avcapture" }, { "category": "Other", "comment": "Host-based indicators", "deleted": false, "disable_correlation": false, "timestamp": "1681496718", "to_ids": false, "type": "comment", "uuid": "f955a2ed-e7ff-4644-becb-26dd813a9056", "value": "The folder /private/var/db/com.apple.xpc.roleaccountd.staging/PlugIns/fud.appex/ existing, or having activity detected from the folder." }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "137a1417-a5bf-4e7f-86de-a094452e0f0e", "value": "fosterunch.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "0f34b7d2-db01-4d0c-ace9-548617b39f2a", "value": "womnbling.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "ccbfb8d2-0304-456c-a3cf-5d0c7a00d935", "value": "zebra-arts.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "54e7c6f6-4702-424a-85f6-0234955e2862", "value": "pennywines.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "572ae153-8fb9-46fd-b11d-c5de67ddbac4", "value": "choccoline.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "237fe5cf-0ff1-49e4-ab60-93f2b10306e5", "value": "lateparties.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "9c83ff4b-d26c-44c9-a770-619919f8dcee", "value": "foundurycolletive.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "6b1731eb-5546-45b7-ac4f-9abb0f8ef29b", "value": "jungelfruitime.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "15dfe001-5d8d-4731-ac7e-4d102fda3ead", "value": "gameboysess.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "23dc0f86-cf91-43d5-a1e9-f1316037e633", "value": "healthcovid19.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "23bba160-2538-411a-9941-f9d497517593", "value": "codingstudies.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f14697f1-11bf-420e-acb3-e78d191c2ce8", "value": "hoteluxurysm.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "4945609c-8c75-4ca9-a1fe-e1b5da7fe9a0", "value": "newz-globe.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a8f673ad-f02d-408c-997f-379b4ff25220", "value": "hotalsextra.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "29205e96-e979-48bf-81c7-a4db5cb48e6e", "value": "nordmanetime.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "264499f8-d507-4df7-9ef5-b2c22e3edb7d", "value": "fullaniimal.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "e2a2cf20-8991-4ffc-95a3-9826e1ab04ad", "value": "wikipedoptions.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "37193a8f-5a3b-4809-bd48-c954f69922a5", "value": "redanddred.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "ad69d9bc-047e-4f0c-95ed-a22ef6278676", "value": "whiteandpiink.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "1fc9d972-8144-4c4c-8896-dd0619f3097d", "value": "agronomsdoc.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "33ef9e9e-bbc7-4314-aaed-8a64973d69ec", "value": "nutureheus.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "c014e28f-64af-4e98-b13d-86f90a6916ac", "value": "timeeforsports.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "132067d8-93b4-42ad-9516-659f7c61905e", "value": "treerroots.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a08a8275-b799-43bf-a357-2735146150ab", "value": "unitedyears.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "d4218744-eb5b-4552-aa67-be2d43f4eb66", "value": "eccocredit.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "99cadae4-89d0-43dd-a8d9-0bff42149497", "value": "ecologitics.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "239ddb01-449c-42fb-ae42-7d56a73de846", "value": "climatestews.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "4a1e7ff3-19f7-4d2b-84a8-c1dc123aeb62", "value": "aqualizas.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "5c0767ae-e123-4312-a512-7177c65dbe0f", "value": "bgnews-bg.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "73bf14bd-d59d-48c3-b5d9-7d1ada1d2ba2", "value": "mikontravels.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a6c5022a-8a31-4c41-87f7-895dc69a231a", "value": "e-gaming.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "fdc59ba1-e0d0-4cc0-91eb-57fffce605a0", "value": "transformaition.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "73e7ab1b-a850-4e46-aecc-5b8e3fd9e565", "value": "betterstime.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "712e0171-f2e7-446a-99fe-cb6ec80a65bb", "value": "goshopeerz.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "3c3b827c-a96b-4082-a9a2-f411bbfe97e4", "value": "countshops.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "e8dbaa2e-ceab-4ad2-90e2-9f81e52e36ab", "value": "inneture.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "680d0ac6-3f3c-49ff-986d-8fe660775808", "value": "shoppingeos.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "8d6a1164-c195-4761-bf1a-0387359b4e65", "value": "mwww.ro" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "160e8ff7-b801-4010-8d19-42d3d8df34d8", "value": "rentalproct.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "96b92f85-2e0c-482c-8a1c-81e4b29adf61", "value": "bcarental.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "4015e001-bf29-4978-9070-7b8fa22225b0", "value": "kikocruize.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "fbba5c97-eb88-4318-be60-a6cbf4069f7b", "value": "elvacream.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a4aa10d2-f606-42b2-9bef-e32b0a9c1851", "value": "pachadesert.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "b789c9ae-1c3c-4c1f-81d8-13729cb66e9b", "value": "razzodev.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a1954221-8c48-460f-97d7-9e36eeb8f1ff", "value": "wombatcash.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "0e3ae5ca-7d8f-4cfe-a74d-c3662784f5c4", "value": "globepayinfo.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "40ae8f65-c113-47c5-ab07-2ca3f4595dbc", "value": "job4uhunt.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "48c7a3a6-d25c-40fb-b327-d1a300a60ebf", "value": "ctbgameson.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "18596e82-2c96-49c3-8876-ac9ebaf016ea", "value": "adeptary.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "92e46f9d-488a-418a-9191-2ae283035d75", "value": "hinterfy.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "84921ed2-0adc-4aee-a5e7-297538471e95", "value": "biznomex.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "96bb69cb-142b-4a04-91c4-19cb51bff97a", "value": "careerhub4u.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "27d4b06b-da1e-4967-a499-51f691a0e713", "value": "furiamoc.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a6f75020-5025-4ff8-acdf-5ca4b6e38c6e", "value": "motorgamings.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "80fc443d-d649-4e36-885f-39daf7d30402", "value": "aniarchit.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "ca030146-6352-479d-8eec-2da50fc588ee", "value": "skyphotogreen.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "aa3d0229-60c5-44e0-afb6-3d9abf5c3538", "value": "datacentertime.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f51b7c2f-fdd6-4c3a-8902-04a21787187e", "value": "stylelifees.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "812cd765-666d-40c9-a9c2-e7c1ec398233", "value": "kidzlande.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "231f6a57-7d2f-42ea-a79e-b3d04fbec9de", "value": "homelosite.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "3083ee2c-4220-4bdb-ab7e-c6b06fb40710", "value": "zooloow.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "7e8629ae-ae54-49fc-8cbe-1c44d55141e6", "value": "studiesutshifts.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "c7108256-f73e-4630-abec-821ccb1051ac", "value": "londonistory.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "96b3ea60-3e09-424e-a661-3a7bf83bbce1", "value": "bestteamlife.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f29d97f1-b30f-4d4f-8e2e-8ea465090e7d", "value": "newsandlocalupdates.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a3d4a3cf-92a0-489a-a9cb-d4faa8aa251f", "value": "youristores.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "0c0e83c6-a745-4105-8a3b-44af82bf3057", "value": "gardenearthis.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "58def54b-de66-4b4b-98d9-196b2f07b58f", "value": "fullstorelife.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "2c1ce939-ef6a-4cc0-81cd-d2da4b5a4068", "value": "incollegely.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "9550b6d6-0c33-4122-9e35-d27f4cf53b74", "value": "shoplifys.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "c17d4a99-66fb-44a2-98c7-63a29877a182", "value": "thetimespress.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "43d28150-f9ef-4579-9c7b-be36150c7ccb", "value": "studyshifts.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "fc7498ed-f50e-4167-991f-8d9be629f4c8", "value": "codinerom.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "b89de6a4-e222-4036-9976-76488d6ea15e", "value": "gamingcolonys.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "951b304f-c25e-4961-af1f-951c535147dc", "value": "kidzalnd.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "29d34d31-2ade-47e2-8051-0c5861601afd", "value": "wildhour.store" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "c4366373-af5f-48a3-b6f2-4ac00cac53bd", "value": "wilddog.site" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "7793d60e-3fd1-4883-a034-a5eaabd6435e", "value": "garilc.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "b556a3ce-bc0f-4685-ace1-ac4ebfbc35b4", "value": "runningandbeyond.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "e14c1d80-98fb-49b8-81a1-0053e600989c", "value": "fullmoongreyparty.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "3a818fca-0dd1-4f10-beac-71d0b97d5f45", "value": "greenrunners.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "4dbecca7-bec7-45c4-ab5f-af0a2a4257b2", "value": "sunsandlights.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "47eae8d9-7a88-4665-a8d7-3cecddf504bf", "value": "techpowerlight.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f695455b-37f9-4873-b47f-f3c5c70dba8a", "value": "gamezess.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "8141b3bc-269c-43bc-b99b-c790cceb78ac", "value": "planningly.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "a058803d-1266-4480-98b0-5161827e01d2", "value": "luxario.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "64244ef5-cd18-4e34-ad47-99fb7cbedd25", "value": "vinoneros.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "449fb2ec-62a9-428b-a133-50df559d1edb", "value": "i-reality.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "8fa09b3f-d9b4-45a4-8b8d-a47514172f32", "value": "styleanature.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "05aa7844-65a9-4004-9d77-7681a4e3ba67", "value": "planetosgame.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "73ca72e1-70bf-4e32-b73d-53b36bef4166", "value": "kidsfunland.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "2dbb1d58-c31d-4360-942c-aefbd565b5d3", "value": "localtallk.store" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f591eac1-0e85-469d-a7db-481bd827897f", "value": "allplaces.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f2218514-946a-4088-a278-ad50dafc2041", "value": "sunclub.site" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "716762ce-4ce7-41cc-bed6-ba1f08fa04d5", "value": "thenewsfill.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "e722208f-ff16-46cf-bfaa-5d3d2cfd990e", "value": "wellnessjane.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "0ff0089a-e241-4036-8835-2a402a3ffad2", "value": "meehealth.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "5c85eda2-d767-4811-a64d-d6c8ce692289", "value": "gameizes.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "fd87932f-3dbb-47b6-ae59-b2b64023a9b6", "value": "playozas.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "e2de6d9c-46ff-4cec-92cd-23e5657337ee", "value": "foodyplates.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "0b8b6493-43ce-48d8-b8ff-a36676ac0477", "value": "designaroo.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "48eb1520-de8e-4674-b83e-70981a89cacb", "value": "designspacing.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "1eb872ad-1191-4465-8805-72d98ea52186", "value": "stockstiming.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "320e37e6-6948-4e9c-821c-11cb9a7593f6", "value": "hoteliqo.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "25109e58-8840-40ec-9272-28239bea014b", "value": "projectoid.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "6ea2b695-c54e-4619-b21a-703b95432183", "value": "study-search.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f5e3e083-58ad-402a-b493-e4bef806aaad", "value": "tokenberries.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "16a60af4-9f95-4947-97c1-7a73cae1da08", "value": "recovery-plan.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "f1411d55-b987-41c7-8331-bd0abba15a70", "value": "deliverystorz.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "5ec857e2-5df2-491d-a231-99926ac26ad2", "value": "forestaaa.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496787", "to_ids": true, "type": "domain", "uuid": "8d5e28ff-6642-4d33-be07-e28aeb0ba969", "value": "addictmetui.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "d67f289f-9b2d-4136-a969-0789326a6327", "value": "earthyouwantiis.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "b8afd528-05c3-4101-8706-d82ab26b647f", "value": "zedforme.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "4679b9a1-1433-42e9-83b8-0e3e232a9032", "value": "navadatime.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "ca48fb77-132f-4472-98f6-9c45763e8668", "value": "careers4ad.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "e44adb28-f4e8-486f-bb56-dc18127dbf08", "value": "studyreaserch.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "5f4e572e-2920-48df-a3c8-cf08b1aa62fe", "value": "novinite.biz" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "d63b5149-8487-438a-be48-f42811cdb788", "value": "dressuse.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "18c08117-c917-42df-88b8-b150f8352f66", "value": "iwoodstor.xyz" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "a8d498ec-c7ab-4007-a47f-14d9fe5f5e0b", "value": "teachlearning.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "f73f7a9d-e95d-4bdc-9f26-fce6a3bbd0ae", "value": "subcloud.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "e8e9da53-ad6c-421a-b85b-29d5beb8cf98", "value": "monvesting.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "92e18ba4-cc17-4d26-b561-7bfef146b140", "value": "elektrozi.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "64d42835-d1e6-48ff-a2bc-189cfe62154a", "value": "hopsite.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "e9a59760-4f34-4a32-a59e-48702b7e96e3", "value": "bikersrental.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "7b9eb6a9-0753-4d76-8e90-5ae3fc8f5ac3", "value": "takestox.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "361056b3-8270-4246-8abe-668098593494", "value": "sidelot.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "14baeadc-ab0e-4b71-909c-1781a54641bb", "value": "powercodings.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "940f52b2-6231-4993-9167-205c0ce3efd6", "value": "naturemeter.org" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "6758f823-06c9-4f41-8555-9f4063461436", "value": "takebreak.io" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "8ad6bde7-26d3-411d-b1e0-5956ef018971", "value": "noraplant.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "be68ee55-ebe4-4c5e-b47e-6814590de526", "value": "goodsforuw.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "5c6d7368-0f90-4aa8-aa98-88608f5b8430", "value": "stayle.co" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "72004b1d-d523-4b3c-b4bd-2873a8c9c532", "value": "eedloversra.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "3c417208-cbd6-43ad-bafb-2f20b5d31b28", "value": "sevensdfe.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "8fce50b0-8c5d-47b8-bbfb-4d161e439a6f", "value": "dsudro.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "dd769db6-2e2a-4037-b18b-ff393ac8a476", "value": "sseamb.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "687094ba-b934-44ab-9ed6-2ae8ec87ddfa", "value": "recover-your-body.xyz" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "990e522d-3a87-437f-af42-78954e546145", "value": "reloadyourbrowser.info" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "eefb21c5-c4cf-4438-bee9-86f68515f816", "value": "comeandpet.me" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "a9d605d4-1e91-4016-8195-41bd787a28d8", "value": "brushyourteeth.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "99c093a1-791c-4c8d-9b50-2ecc93b3599d", "value": "digital-mar.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "c0352821-9da2-4158-a7da-c7e7c9020f6b", "value": "retailmark.net" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "86d314a6-6fe5-49a6-8960-9f14a5233961", "value": "studysliii.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "3eb6c477-d179-47d0-9cff-c262ac96c105", "value": "homeigardens.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "f0bf44cf-b922-4a85-adaf-0cc1502dd365", "value": "koraliowe.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "38c4ed49-e21b-4278-a45a-c4de2d8316b3", "value": "topuprr.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "bc90a0e2-9944-4080-852f-9fab1c8edc4d", "value": "zeebefg.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "9ad48038-2577-4adf-b108-2ed04f42033c", "value": "newsbuiltin.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "c3650a7d-e6e8-41ff-ac7c-0a963de326ae", "value": "jyfa.xyz" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "05d85214-8a01-4e09-9cb1-f0636b0403c3", "value": "thepila.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "6c43cb08-4013-4813-b278-90fcfb30f284", "value": "thegreenlight.xyz" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "4b684b37-a5d6-49e5-8be1-a7f7a7a79bf5", "value": "gosport24.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "8b387111-598c-4762-973e-00e4fa0d8e6d", "value": "classiccolor.live" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "c5146cdb-2330-46e4-b9a6-cd5059c3b672", "value": "shoeszise.xyz" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "f8c5869c-d3a3-4eae-993a-da3a2056904c", "value": "cleanitgo.info" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "2f0d6f74-1bbe-45b0-9a38-c14aa1a5c2cc", "value": "setclass.live" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "0fb1048a-9ab4-4ec4-a87b-c00c87128b34", "value": "white-rhino.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "bf842521-6d69-498a-912e-5d4becf9f4ad", "value": "space-moon.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "f9ceafbe-c613-42a7-878a-8779e660c694", "value": "enrollering.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "2bb69091-12fa-4f3f-8c67-766eaf982f71", "value": "newslocalupdates.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "3e5b6b4d-c4a7-46dc-8555-c4de951d7f11", "value": "beendos.com" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "3aa13155-2ab9-4c7e-822b-6eeeb311bea3", "value": "linestrip.online" }, { "category": "Network activity", "comment": "DEV-0196 activity", "deleted": false, "disable_correlation": false, "timestamp": "1681496788", "to_ids": true, "type": "domain", "uuid": "4c583d08-2a4c-418e-bfee-b8efe666660e", "value": "sunnyweek.site" } ] } }