{ "Event": { "analysis": "2", "date": "2016-07-11", "extends_uuid": "", "info": "What's in a server name (on APT28/Sofacy) by ThreatConnect", "publish_timestamp": "1498162392", "published": true, "threat_level_id": "2", "timestamp": "1498162327", "uuid": "578399b0-5b4c-4ddd-b1ad-4a2d950d210f", "Orgc": { "name": "CthulhuSPRL.be", "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "OSINT", "relationship_type": "" }, { "colour": "#f1ee1d", "local": false, "name": "Threat:Sofacy/APT28", "relationship_type": "" }, { "colour": "#ffffff", "local": false, "name": "tlp:white", "relationship_type": "" }, { "colour": "#12e000", "local": false, "name": "misp-galaxy:threat-actor=\"Sofacy\"", "relationship_type": "" } ], "Attribute": [ { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1468242375", "to_ids": true, "type": "domain", "uuid": "578399c7-83f4-44a6-a800-aeca950d210f", "value": "misdepatrment.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242624", "to_ids": true, "type": "domain", "uuid": "57839ac0-9fbc-4f20-82c5-8b14950d210f", "value": "militaryobserver.net" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242624", "to_ids": true, "type": "domain", "uuid": "57839ac0-e15c-49fa-97f0-8b14950d210f", "value": "sysprofsvc.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242625", "to_ids": true, "type": "domain", "uuid": "57839ac1-319c-43c7-9b3c-8b14950d210f", "value": "winsyscheck.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242625", "to_ids": true, "type": "ip-dst", "uuid": "57839ac1-36f0-4d31-b72b-8b14950d210f", "value": "69.90.132.194" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242626", "to_ids": true, "type": "domain", "uuid": "57839ac2-0194-4f9f-ba67-8b14950d210f", "value": "euronews24.info" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242626", "to_ids": true, "type": "domain", "uuid": "57839ac2-d554-43fe-98d8-8b14950d210f", "value": "naoasch.com" }, { "category": "Payload delivery", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242626", "to_ids": true, "type": "md5", "uuid": "57839ac2-b5dc-43ec-a7f6-8b14950d210f", "value": "2045efb4da99b3af154814888be43390" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242966", "to_ids": true, "type": "domain", "uuid": "57839c16-876c-403b-b4d5-aec9950d210f", "value": "adobeflashdownload.de" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242967", "to_ids": true, "type": "domain", "uuid": "57839c17-33d0-45d9-8405-aec9950d210f", "value": "adobeflashplayer.me" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242967", "to_ids": true, "type": "domain", "uuid": "57839c17-34b0-43dc-8dc2-aec9950d210f", "value": "adobeupdater.org" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242968", "to_ids": true, "type": "domain", "uuid": "57839c18-b078-4fce-8baf-aec9950d210f", "value": "adobeupdatetechnology.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242969", "to_ids": true, "type": "domain", "uuid": "57839c19-90d8-422b-a076-aec9950d210f", "value": "adoble.net" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242970", "to_ids": true, "type": "domain", "uuid": "57839c1a-7c40-4b49-af38-aec9950d210f", "value": "pdf-online-viewer.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242971", "to_ids": true, "type": "domain", "uuid": "57839c1b-cb68-402a-90c3-aec9950d210f", "value": "akamaitechnologysupport.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242972", "to_ids": true, "type": "domain", "uuid": "57839c1c-988c-4a9e-8555-aec9950d210f", "value": "akamaitechupdate.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242972", "to_ids": true, "type": "domain", "uuid": "57839c1d-bf20-4866-a7f1-aec9950d210f", "value": "helper-akamai.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242973", "to_ids": true, "type": "domain", "uuid": "57839c1d-8dec-46de-9486-aec9950d210f", "value": "cdncloudflare.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242974", "to_ids": true, "type": "domain", "uuid": "57839c1e-b0b8-4ddb-8046-aec9950d210f", "value": "cloudfiare.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242975", "to_ids": true, "type": "domain", "uuid": "57839c1f-a6ec-4ac8-b577-aec9950d210f", "value": "egypressoffice.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242976", "to_ids": true, "type": "domain", "uuid": "57839c20-8bb8-4db2-8055-aec9950d210f", "value": "access-google.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242977", "to_ids": true, "type": "domain", "uuid": "57839c21-eb58-404d-b1fc-aec9950d210f", "value": "cdn-google.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242978", "to_ids": true, "type": "domain", "uuid": "57839c22-4a3c-43af-9f7c-aec9950d210f", "value": "marshmallow-google.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242979", "to_ids": true, "type": "domain", "uuid": "57839c23-fee4-49a3-a594-aec9950d210f", "value": "terms-google.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242980", "to_ids": true, "type": "domain", "uuid": "57839c24-a648-4da5-88ee-aec9950d210f", "value": "honeyvvell.co" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242981", "to_ids": true, "type": "domain", "uuid": "57839c25-ac48-4180-b00a-aec9950d210f", "value": "thehufflngtonpost.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242982", "to_ids": true, "type": "domain", "uuid": "57839c26-5f30-4868-9eb5-aec9950d210f", "value": "intelintelligence.org" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242983", "to_ids": true, "type": "domain", "uuid": "57839c27-7aac-48f4-99cb-aec9950d210f", "value": "intelsupportcenter.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242984", "to_ids": true, "type": "domain", "uuid": "57839c28-9430-40a6-914f-aec9950d210f", "value": "intelsupportcenter.net" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242985", "to_ids": true, "type": "domain", "uuid": "57839c29-21d8-400b-8fba-aec9950d210f", "value": "micoft.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242985", "to_ids": true, "type": "domain", "uuid": "57839c29-1f9c-4dc3-9414-aec9950d210f", "value": "microsoft-updates.me" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242987", "to_ids": true, "type": "domain", "uuid": "57839c2b-e758-48a6-872e-aec9950d210f", "value": "ms-drivadptrwin.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242987", "to_ids": true, "type": "domain", "uuid": "57839c2b-d3c4-4052-a3d0-aec9950d210f", "value": "ms-sus6.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242988", "to_ids": true, "type": "domain", "uuid": "57839c2c-2d14-4b93-b4b7-aec9950d210f", "value": "ms-updates.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242989", "to_ids": true, "type": "domain", "uuid": "57839c2d-c658-4d32-8a8b-aec9950d210f", "value": "securesystemwin.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242990", "to_ids": true, "type": "domain", "uuid": "57839c2e-bb44-4f3f-a4a9-aec9950d210f", "value": "win-wnigarden.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242991", "to_ids": true, "type": "domain", "uuid": "57839c2f-1784-47a7-b994-aec9950d210f", "value": "wincodec.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242991", "to_ids": true, "type": "domain", "uuid": "57839c2f-84c0-4737-a4f0-aec9950d210f", "value": "windowsnewupdated.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242993", "to_ids": true, "type": "domain", "uuid": "57839c31-b0dc-44ea-93cc-aec9950d210f", "value": "winninggroup-sg.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242994", "to_ids": true, "type": "domain", "uuid": "57839c32-0abc-4ada-8ef4-aec9950d210f", "value": "wm-z.biz" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242995", "to_ids": true, "type": "domain", "uuid": "57839c33-93f4-44e5-9527-aec9950d210f", "value": "wmepadtech.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242996", "to_ids": true, "type": "domain", "uuid": "57839c34-9ce8-49d6-a2fa-aec9950d210f", "value": "nato-org.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242997", "to_ids": true, "type": "domain", "uuid": "57839c35-8b84-416a-b6be-aec9950d210f", "value": "natoadviser.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242998", "to_ids": true, "type": "domain", "uuid": "57839c36-bba8-4ee4-91b1-aec9950d210f", "value": "sec-verified.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468242999", "to_ids": true, "type": "domain", "uuid": "57839c37-11b4-43b0-8645-aec9950d210f", "value": "theguardiannews.org" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243000", "to_ids": true, "type": "domain", "uuid": "57839c38-af4c-4294-a191-aec9950d210f", "value": "theguardianpress.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243694", "to_ids": true, "type": "domain", "uuid": "57839c39-bec8-43af-bac0-aec9950d210f", "value": "services-gov.co.uk" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243002", "to_ids": true, "type": "domain", "uuid": "57839c3a-2030-4043-be56-aec9950d210f", "value": "goaarmy.org" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243003", "to_ids": true, "type": "domain", "uuid": "57839c3b-1df8-4dc5-92db-aec9950d210f", "value": "govsh.net" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243004", "to_ids": true, "type": "domain", "uuid": "57839c3c-ce18-430e-b868-aec9950d210f", "value": "wsjworld.com" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1468243158", "to_ids": false, "type": "link", "uuid": "57839cd6-2fe8-4f04-9c8a-b186950d210f", "value": "https://threatconnect.com/whats-in-a-name-server/" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243683", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee3-a364-4550-9604-8b14950d210f", "value": "j.wang@uymail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243684", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee4-63c8-43ae-9db9-8b14950d210f", "value": "play@xtcmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243684", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee4-ab40-4f1d-a5c1-8b14950d210f", "value": "vrickson@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243685", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee5-5e1c-41ca-9b2e-8b14950d210f", "value": "best.cameron@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243685", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee5-a9e8-412c-9512-8b14950d210f", "value": "surleoborden@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243685", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee5-2d88-4d92-ac16-8b14950d210f", "value": "weronika76@hotmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243686", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee6-b114-4db1-84d4-8b14950d210f", "value": "josiekilbyav@aol.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243686", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee6-c990-41fc-ae50-8b14950d210f", "value": "bergers3008@usa.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243687", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee7-e438-4a35-984f-8b14950d210f", "value": "guiromolly@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243687", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee7-0ea4-43b9-a65f-8b14950d210f", "value": "loots@tuta.io" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243687", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee7-c6c0-441a-b1e3-8b14950d210f", "value": "mia.konzet99@ok.de" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243688", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee8-0278-4fee-81da-8b14950d210f", "value": "dana.raphaela@chewiemail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243688", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee8-8c08-4f0a-ab3e-8b14950d210f", "value": "abuse@opticaljungle.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243689", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee9-f7e8-42c8-9184-8b14950d210f", "value": "issacgolden@hmamail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243689", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ee9-4ad4-43a2-a76a-8b14950d210f", "value": "gregorio.oconnor@hmamail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243690", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eea-e328-4f77-a090-8b14950d210f", "value": "artur.klimenkov@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243690", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eea-1834-4eb4-9a8a-8b14950d210f", "value": "pinfiangtw@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243691", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eeb-99d4-4918-be6e-8b14950d210f", "value": "mattew.barnes@aol.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243691", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eeb-340c-4003-8a48-8b14950d210f", "value": "petkrist@myself.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243692", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eec-bb24-40c3-ace6-8b14950d210f", "value": "fisterboks@email.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243692", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eec-08c4-453f-91ca-8b14950d210f", "value": "syst.soul@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243693", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eed-bf74-4b73-9f07-8b14950d210f", "value": "m8r-abrn11@mailinator.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243693", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eed-4bc0-4e40-826b-8b14950d210f", "value": "mr.michoverton@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243694", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eee-2480-4137-9e07-8b14950d210f", "value": "ken.tanaka@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243694", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eee-426c-4f54-89bd-8b14950d210f", "value": "sandra.rafaela@chewiemail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243695", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eef-0c64-4cfd-881d-8b14950d210f", "value": "bkopfer7101@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243695", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eef-e768-4bd2-8722-8b14950d210f", "value": "elfreda.pollie@chewiemail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243695", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eef-e688-44c2-8ce6-8b14950d210f", "value": "ruzeedomeon@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243695", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eef-28ac-4259-804f-8b14950d210f", "value": "agnasirahmedd@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243695", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839eef-0ec4-4728-b446-8b14950d210f", "value": "s.penn.254@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243696", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef0-e4f0-46e0-94d9-8b14950d210f", "value": "j.holmberg@dr.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243696", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef0-c0e0-4c95-afee-8b14950d210f", "value": "shawanda.kirlin37@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243696", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef0-7c88-4c81-b84f-8b14950d210f", "value": "barry.smith2004@yandex.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243696", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef0-58bc-424c-abca-8b14950d210f", "value": "leo.link@email.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243696", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef0-6b18-4afe-a302-8b14950d210f", "value": "cjgr8hm@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243697", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef1-bf14-4468-ab8c-8b14950d210f", "value": "idolbreaker@mail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243697", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef1-4e14-46ac-931f-8b14950d210f", "value": "paulbecker@cock.li" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243697", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef1-4bbc-46f8-a200-8b14950d210f", "value": "saira.samosa@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243697", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef1-07dc-4c81-b1f2-8b14950d210f", "value": "owen@kehoe.org" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243697", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef1-cce0-46e8-9a8b-8b14950d210f", "value": "noshare1024@gmail.com" }, { "category": "Attribution", "comment": "SOA email", "deleted": false, "disable_correlation": false, "timestamp": "1468243698", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839ef2-b0cc-49f5-bf83-8b14950d210f", "value": "mishel_corp@mail.com" }, { "category": "Attribution", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1468243739", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839f1b-a1d8-41fb-a191-421d950d210f", "value": "8yhi4xqycpzm@mail.ru" }, { "category": "Attribution", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1468243739", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839f1b-63fc-4c5b-ad71-4436950d210f", "value": "v9sa2cml@instancemail.net" }, { "category": "Attribution", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1468243740", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839f1c-031c-4582-aa4c-4009950d210f", "value": "contacts@up57893.in" }, { "category": "Attribution", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1468243740", "to_ids": false, "type": "whois-registrant-email", "uuid": "57839f1c-342c-436b-be17-42b2950d210f", "value": "admin@wm-z.biz" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243856", "to_ids": true, "type": "ip-dst", "uuid": "57839f90-f914-4427-9b0b-c1f5950d210f", "value": "5.135.183.154" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243856", "to_ids": true, "type": "ip-dst", "uuid": "57839f90-7ad0-4667-99fc-c1f5950d210f", "value": "45.32.129.185" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243917", "to_ids": true, "type": "domain", "uuid": "57839fcd-55c4-4920-9a6a-c1f3950d210f", "value": "vice-news.com" }, { "category": "Network activity", "comment": "Nameserver", "deleted": false, "disable_correlation": false, "timestamp": "1468243917", "to_ids": false, "type": "domain", "uuid": "57839fcd-083c-4bc9-85a2-c1f3950d210f", "value": "xtraorbit.com" }, { "category": "Network activity", "comment": "Nameserver", "deleted": false, "disable_correlation": false, "timestamp": "1468243918", "to_ids": false, "type": "hostname", "uuid": "57839fce-c338-440f-9ec6-c1f3950d210f", "value": "xo.earth.orderbox-dns.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243918", "to_ids": true, "type": "domain", "uuid": "57839fce-4568-4c45-a556-c1f3950d210f", "value": "eurosatory2014.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243919", "to_ids": true, "type": "domain", "uuid": "57839fcf-e7d8-4f36-934a-c1f3950d210f", "value": "webmail-saic.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243919", "to_ids": true, "type": "domain", "uuid": "57839fcf-8704-44a1-8383-c1f3950d210f", "value": "natoexhibitionff14.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243920", "to_ids": true, "type": "domain", "uuid": "57839fd0-9d34-4d45-8d3b-c1f3950d210f", "value": "tolonevvs.com" }, { "category": "Network activity", "comment": "Nameserver", "deleted": false, "disable_correlation": false, "timestamp": "1468243920", "to_ids": false, "type": "domain", "uuid": "57839fd0-65c8-4304-a029-c1f3950d210f", "value": "carbon2u.com" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243920", "to_ids": true, "type": "hostname", "uuid": "57839fd0-85ec-4a92-8c4b-c1f3950d210f", "value": "mail.hm.qov.hu" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243921", "to_ids": true, "type": "domain", "uuid": "57839fd1-988c-42c1-9a57-c1f3950d210f", "value": "log-in-osce.org" }, { "category": "Network activity", "comment": "Imported via the Freetext Import Tool", "deleted": false, "disable_correlation": false, "timestamp": "1468243921", "to_ids": true, "type": "domain", "uuid": "57839fd1-f574-43ee-947a-c1f3950d210f", "value": "academl.com" }, { "category": "Network activity", "comment": "Nameserver", "deleted": false, "disable_correlation": false, "timestamp": "1468243922", "to_ids": false, "type": "domain", "uuid": "57839fd2-3ad0-4b53-aa5d-c1f3950d210f", "value": "trademarkarea.com" } ] } }