{
  "Event": {
    "analysis": "2",
    "date": "2015-05-01",
    "extends_uuid": "",
    "info": "OSINT Introducing HATs: Highly Annoying Threats by BlueCoat",
    "publish_timestamp": "1430742900",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1430732207",
    "uuid": "55473cb9-db8c-416e-8b3c-ce99950d210b",
    "Orgc": {
      "name": "CthulhuSPRL.be",
      "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
    },
    "Tag": [
      {
        "colour": "#004646",
        "name": "type:OSINT"
      },
      {
        "colour": "#ffffff",
        "name": "tlp:white"
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430731977",
        "to_ids": false,
        "type": "link",
        "uuid": "55473cc9-3c18-4689-9caa-ce99950d210b",
        "value": "https://www.bluecoat.com/security-blog/2015-05-01/introducing-hats-highly-annoying-threats"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-9b90-434a-9f5b-4bb4950d210b",
        "value": "getseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-0ea4-4a50-904c-4029950d210b",
        "value": "bestseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-27b0-44c4-a179-45f3950d210b",
        "value": "justfastmap.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-9b30-481b-912b-4fd7950d210b",
        "value": "coseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-fefc-41de-8f56-4632950d210b",
        "value": "afastmap.ws"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-6420-40da-901f-457c950d210b",
        "value": "thefastmap.ws"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732128",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d60-700c-4b19-8df6-4551950d210b",
        "value": "nuseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732129",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d61-a554-41e8-b757-46d9950d210b",
        "value": "topseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732129",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d61-754c-421f-b917-45b7950d210b",
        "value": "meseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732129",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d61-df98-473a-822d-4bde950d210b",
        "value": "metafastmap.eu"
      },
      {
        "category": "Network activity",
        "comment": "Fiesta Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732129",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d61-7db4-4916-877a-4819950d210b",
        "value": "eseolist.eu"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732158",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7e-4a90-4082-a4cf-dd36950d210b",
        "value": "rotonexy.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-ace4-4412-b26d-dd36950d210b",
        "value": "symonash.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-ff38-493b-9715-dd36950d210b",
        "value": "atinenom.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-9200-4caa-bc64-dd36950d210b",
        "value": "naraiarm.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-3c14-4c17-a923-dd36950d210b",
        "value": "einseeld.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-bc5c-4314-b5d4-dd36950d210b",
        "value": "holamecs.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-999c-4c54-8485-dd36950d210b",
        "value": "numerarm.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-bb44-42e8-af72-dd36950d210b",
        "value": "hrortict.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732159",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d7f-c764-41d4-b66d-dd36950d210b",
        "value": "indusish.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-81ac-41e3-a08c-dd36950d210b",
        "value": "jadilips.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-336c-4458-9aa2-dd36950d210b",
        "value": "fogelicy.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-a664-4b2c-be64-dd36950d210b",
        "value": "khundalt.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-6e04-453d-b6a0-dd36950d210b",
        "value": "spoeract.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-b4bc-48f0-a85c-dd36950d210b",
        "value": "kroentro.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-6534-4464-b86f-dd36950d210b",
        "value": "xerhardy.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-d484-4e7b-bfdd-dd36950d210b",
        "value": "sixperth.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732160",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d80-ec08-4b5d-b373-dd36950d210b",
        "value": "pilshorm.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-1a58-4d26-8dbb-dd36950d210b",
        "value": "omaidett.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-31c4-4ecd-af1c-dd36950d210b",
        "value": "uglanarc.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-8eec-453e-b7e9-dd36950d210b",
        "value": "sherymex.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-4ce0-48d1-923d-dd36950d210b",
        "value": "nealychy.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-56cc-4818-b25e-dd36950d210b",
        "value": "trobirks.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-1e7c-4a4d-9500-dd36950d210b",
        "value": "sulecass.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-021c-49d9-8767-dd36950d210b",
        "value": "malerror.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732161",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d81-6a90-4dc6-a0cc-dd36950d210b",
        "value": "imetheonhe.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-2fc4-429b-9b8d-dd36950d210b",
        "value": "sidowery.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-f6c8-41d0-8d42-dd36950d210b",
        "value": "mooriarm.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-ccc0-49d8-8752-dd36950d210b",
        "value": "risalerr.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-884c-48b3-822e-dd36950d210b",
        "value": "pirrains.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-4d5c-4549-b163-dd36950d210b",
        "value": "cerinays.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-9c50-4604-a48f-dd36950d210b",
        "value": "malerror.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-803c-4c17-a792-dd36950d210b",
        "value": "pioblern.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732162",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d82-dfe4-4f7c-844d-dd36950d210b",
        "value": "ctelailt.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-5ef4-44db-b489-dd36950d210b",
        "value": "blouneth.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-7db0-4214-87fe-dd36950d210b",
        "value": "muskiert.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-1638-4d92-8c4e-dd36950d210b",
        "value": "aflumery.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-3a64-4e79-b5b0-dd36950d210b",
        "value": "zarbrend.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-0a5c-4d56-9917-dd36950d210b",
        "value": "kroentro.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-2138-4652-a8a3-dd36950d210b",
        "value": "otinaryl.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-b29c-4020-abe5-dd36950d210b",
        "value": "mooriarm.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-8230-480e-82b8-dd36950d210b",
        "value": "trobirks.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732163",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d83-b978-4666-9d1b-dd36950d210b",
        "value": "pokensea.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-7038-48f9-9ed8-dd36950d210b",
        "value": "gotedrap.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-ce50-4c39-9b52-dd36950d210b",
        "value": "clolband.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-792c-474f-895d-dd36950d210b",
        "value": "meditoll.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-6f6c-4620-9fc9-dd36950d210b",
        "value": "psehaism.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-1a48-4527-b82e-dd36950d210b",
        "value": "nonypeck.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-9b5c-4771-8525-dd36950d210b",
        "value": "slulints.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-f5dc-49eb-9481-dd36950d210b",
        "value": "potigole.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732164",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d84-7688-4790-a291-dd36950d210b",
        "value": "mackeilt.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-2d70-4d9c-ad30-dd36950d210b",
        "value": "molporic.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-63d0-4e4b-9386-dd36950d210b",
        "value": "octaneft.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-29ec-4ea7-807a-dd36950d210b",
        "value": "burdiacs.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-2a78-4d73-89b1-dd36950d210b",
        "value": "unitturt.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-bd38-4448-b954-dd36950d210b",
        "value": "pioblern.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-55f0-4094-8505-dd36950d210b",
        "value": "omaidett.com"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-3b68-4785-a676-dd36950d210b",
        "value": "nealychy.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732165",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d85-471c-43c8-bf34-dd36950d210b",
        "value": "cleparcy.org"
      },
      {
        "category": "Network activity",
        "comment": "BizCN",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732166",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473d86-2b24-4ad6-aa6d-dd36950d210b",
        "value": "furarryl.org"
      },
      {
        "category": "Network activity",
        "comment": "Nuclear Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732207",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473daf-c950-4046-b938-c20d950d210b",
        "value": "yellowfrance.info"
      },
      {
        "category": "Network activity",
        "comment": "Nuclear Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732207",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473daf-6990-41b0-b0e1-c20d950d210b",
        "value": "yellowfrance.com"
      },
      {
        "category": "Network activity",
        "comment": "Nuclear Exploit Kit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1430732207",
        "to_ids": true,
        "type": "domain",
        "uuid": "55473daf-9848-47bf-bd3d-c20d950d210b",
        "value": "givemeaudi.com"
      }
    ]
  }
}