{ "Event": { "analysis": "2", "date": "2015-07-14", "extends_uuid": "", "info": "OSINT Exploring .XYZ (Another Shady TLD Report) by Blue Coat", "publish_timestamp": "1438331611", "published": true, "threat_level_id": "3", "timestamp": "1438331478", "uuid": "55bb31a3-dcf4-4731-acdd-4851950d210b", "Orgc": { "name": "CthulhuSPRL.be", "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f" }, "Tag": [ { "colour": "#004646", "local": "0", "name": "type:OSINT", "relationship_type": "" }, { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331312", "to_ids": false, "type": "link", "uuid": "55bb31b0-3aac-4e22-9cd1-4289950d210b", "value": "https://www.bluecoat.com/security-blog/2015-07-14/exploring-xyz-another-shady-tld-report" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331455", "to_ids": true, "type": "domain", "uuid": "55bb323f-d06c-47f7-b553-4e77950d210b", "value": "mtmiss.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331455", "to_ids": true, "type": "domain", "uuid": "55bb323f-5220-4664-8196-41a6950d210b", "value": "mineex.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331455", "to_ids": true, "type": "domain", "uuid": "55bb323f-e878-406a-94eb-43b3950d210b", "value": "useesp.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331455", "to_ids": true, "type": "domain", "uuid": "55bb323f-e87c-4450-8f2f-4917950d210b", "value": "rudead.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331455", "to_ids": true, "type": "domain", "uuid": "55bb323f-f2cc-42f5-8588-4866950d210b", "value": "ineats.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331455", "to_ids": true, "type": "domain", "uuid": "55bb323f-4390-4b2f-9ede-45d1950d210b", "value": "scrami.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-4ff8-4dd6-a62c-4b88950d210b", "value": "indianews.com-40rxk6itwdk71bdcb6xlq9cst3upsp.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-c074-489e-b5ff-498a950d210b", "value": "amazingdeals.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-6ec4-418e-b686-40f8950d210b", "value": "areaairports.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-a6f8-4f59-94e7-4fa4950d210b", "value": "shiftingsmokers.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-8e34-4240-af51-44ae950d210b", "value": "theyrefriends.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-45d8-425d-a11e-48bd950d210b", "value": "retirementspacecraft.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331456", "to_ids": true, "type": "domain", "uuid": "55bb3240-ddf4-476a-a419-4b06950d210b", "value": "findville.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-49ac-436e-97a6-44b4950d210b", "value": "levelstate.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-07ac-4091-be00-4e66950d210b", "value": "providerstore.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-9794-485d-af22-4893950d210b", "value": "overjoyedst.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-a6f0-458c-80df-4bfe950d210b", "value": "possessedaa.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-5bf4-4d26-b798-4e43950d210b", "value": "unfortunatest.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-7c88-48c8-9c4e-4728950d210b", "value": "publishedux.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331457", "to_ids": true, "type": "domain", "uuid": "55bb3241-f118-4f3f-93fc-4f47950d210b", "value": "naturalistsky.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-0314-4f96-938b-4341950d210b", "value": "flowerbeder.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-25dc-4703-9f39-4bcc950d210b", "value": "fireworksht.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-0e94-49ef-a53e-40b1950d210b", "value": "cultivatedci.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-9e7c-4099-8f59-4d86950d210b", "value": "magazinesdj.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-7838-4b52-95dc-4ce4950d210b", "value": "throbbingiv.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-2d34-416a-997a-483d950d210b", "value": "intellectualme.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331458", "to_ids": true, "type": "domain", "uuid": "55bb3242-9a58-4ae8-8d12-4838950d210b", "value": "proceedingsxu.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-9464-49c2-8b2d-4311950d210b", "value": "ownershipep.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-500c-45ec-8c7b-4c0e950d210b", "value": "agreeablefw.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-bab4-42f2-ac6b-4ed6950d210b", "value": "intimidatens.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-8b2c-4f6f-b23e-465d950d210b", "value": "unanimouslyxy.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-2114-4e2c-9452-43a1950d210b", "value": "wildernessax.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-1a98-45d7-b63f-449f950d210b", "value": "hypothesisbx.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331459", "to_ids": true, "type": "domain", "uuid": "55bb3243-eb58-4648-a37e-48fb950d210b", "value": "likelihoodkp.xyz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331478", "to_ids": true, "type": "ip-dst", "uuid": "55bb3256-9ae0-4ad9-86d1-400e950d210b", "value": "5.1.82.185" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331478", "to_ids": true, "type": "ip-dst", "uuid": "55bb3256-3318-4904-8b07-4c09950d210b", "value": "5.1.82.184" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331478", "to_ids": true, "type": "ip-dst", "uuid": "55bb3256-e364-40ce-b7c3-4c12950d210b", "value": "5.1.82.178" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1438331479", "to_ids": true, "type": "ip-dst", "uuid": "55bb3257-0d7c-41aa-b749-4edf950d210b", "value": "5.1.82.103" } ] } }