194 lines
5.4 KiB
JSON
194 lines
5.4 KiB
JSON
|
{
|
||
|
|
"Event": {
|
||
|
|
"analysis": "2",
|
||
|
|
"date": "2018-06-18",
|
||
|
|
"extends_uuid": "",
|
||
|
|
"info": "bank phishing domains",
|
||
|
|
"publish_timestamp": "1529957938",
|
||
|
|
"published": true,
|
||
|
|
"threat_level_id": "2",
|
||
|
|
"timestamp": "1529957908",
|
||
|
|
"uuid": "5b28113a-05b8-4913-8fdb-27410acd0835",
|
||
|
|
"Orgc": {
|
||
|
|
"name": "Synovus Financial",
|
||
|
|
"uuid": "5a68c02d-959c-4c8a-a571-0dcac0a8060a"
|
||
|
|
},
|
||
|
|
"Tag": [
|
||
|
|
{
|
||
|
|
"colour": "#00b2d9",
|
||
|
|
"name": "veris:action:social:variety=\"Phishing\""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#ffffff",
|
||
|
|
"name": "tlp:white"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352708",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281204-013c-48ec-a60e-2cda0acd0835",
|
||
|
|
"value": "homeappleinc.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-f58c-40c0-8e42-16ec0acd0835",
|
||
|
|
"value": "servicesystem-deviceappleid.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-0a80-4b77-9713-16ec0acd0835",
|
||
|
|
"value": "freemobilee-fr.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-0fd4-4fc4-8d6c-16ec0acd0835",
|
||
|
|
"value": "freemobil-fr.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-1398-4b25-bc8c-16ec0acd0835",
|
||
|
|
"value": "fr-freemobil.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-0e60-4261-aacd-16ec0acd0835",
|
||
|
|
"value": "secur-appl.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-06d0-41a9-9eb6-16ec0acd0835",
|
||
|
|
"value": "customregardingasap.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-0cec-466e-82bf-16ec0acd0835",
|
||
|
|
"value": "cipinspectinfoadmin.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-94b8-4b4d-8d01-16ec0acd0835",
|
||
|
|
"value": "1infomsgmanagealert.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-91d8-4835-835b-16ec0acd0835",
|
||
|
|
"value": "securemsgadmincip.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-8854-4e92-8602-16ec0acd0835",
|
||
|
|
"value": "craigslist.systems"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-863c-441c-aea7-16ec0acd0835",
|
||
|
|
"value": "bancorestadoempresas.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-7f10-4099-a190-16ec0acd0835",
|
||
|
|
"value": "bancorestadorempresas.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-89dc-4306-92b8-16ec0acd0835",
|
||
|
|
"value": "comm2mobileauth.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1529352727",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "5b281217-937c-485c-9fa3-16ec0acd0835",
|
||
|
|
"value": "successfull-paypal.com"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|