{
  "Event": {
    "analysis": "2",
    "date": "2016-07-28",
    "extends_uuid": "",
    "info": "OSINT - The Mad Max DGA",
    "publish_timestamp": "1469690222",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1469690114",
    "uuid": "5799af90-d8b4-416a-b5fb-49dc950d210f",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#004646",
        "local": "0",
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": "0",
        "name": "tlp:white",
        "relationship_type": ""
      },
      {
        "colour": "#3b7500",
        "local": "0",
        "name": "circl:incident-classification=\"malware\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689754",
        "to_ids": false,
        "type": "link",
        "uuid": "5799af9a-f10c-46ab-b042-4dba950d210f",
        "value": "https://www.arbornetworks.com/blog/asert/mad-max-dga/"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689774",
        "to_ids": false,
        "type": "comment",
        "uuid": "5799afae-6d78-488e-90e5-4574950d210f",
        "value": "This post describes a domain generation algorithm (DGA) used by the \u00e2\u20ac\u0153Mad Max\u00e2\u20ac\u009d malware family. Mad Max is a targeted trojan, and we plan to post a follow-up article that documents our findings regarding the features of the Mad Max malware itself. But for now we will focus on the reversing of its DGA, since we were unable to find any other published research on this topic.\r\n\r\nThe reference sample we focus on has MD5 hash c7d1357f4c4acceb1780db12ad1b4de1. It first came to our attention because it triggered an ETPro signature alert for \u00e2\u20ac\u0153APT.MADMAX\u00e2\u20ac\u009d while passing through our sandboxing automation. We could find very little published research on this threat, other than one analysis report from Sophos [1]."
      },
      {
        "category": "Antivirus detection",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689785",
        "to_ids": false,
        "type": "text",
        "uuid": "5799afb9-5408-4594-a2a6-4f9d950d210f",
        "value": "APT.MADMAX"
      },
      {
        "category": "Payload installation",
        "comment": "The reference sample we focus",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689807",
        "to_ids": true,
        "type": "md5",
        "uuid": "5799afcf-ef34-4c49-9470-4dcc950d210f",
        "value": "c7d1357f4c4acceb1780db12ad1b4de1"
      },
      {
        "category": "Payload installation",
        "comment": "The reference sample we focus - Xchecked via VT: c7d1357f4c4acceb1780db12ad1b4de1",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689857",
        "to_ids": true,
        "type": "sha256",
        "uuid": "5799b001-fc88-4975-8e20-4a4f02de0b81",
        "value": "57976133193b732bb5602345d6aa7ff83555a365f415212dbefae016fc3b57aa"
      },
      {
        "category": "Payload installation",
        "comment": "The reference sample we focus - Xchecked via VT: c7d1357f4c4acceb1780db12ad1b4de1",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689857",
        "to_ids": true,
        "type": "sha1",
        "uuid": "5799b001-ae00-4916-99ce-498202de0b81",
        "value": "693a9936e56d19448cedc9ccda519b4c0f57d7d7"
      },
      {
        "category": "External analysis",
        "comment": "The reference sample we focus - Xchecked via VT: c7d1357f4c4acceb1780db12ad1b4de1",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689858",
        "to_ids": false,
        "type": "link",
        "uuid": "5799b002-c028-4c13-8a66-476302de0b81",
        "value": "https://www.virustotal.com/file/57976133193b732bb5602345d6aa7ff83555a365f415212dbefae016fc3b57aa/analysis/1469617861/"
      },
      {
        "category": "Payload installation",
        "comment": "During the reversing of Mad Max\u00e2\u20ac\u2122s DGA, the dropped DLL that we spent the most time with weighed 1,561,600 bytes",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689895",
        "to_ids": true,
        "type": "md5",
        "uuid": "5799b027-d0e4-4b47-ba7e-4f06950d210f",
        "value": "43538f5fb75003cbea84c9216e12c94a"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689947",
        "to_ids": true,
        "type": "pattern-in-memory",
        "uuid": "5799b05b-f38c-482d-be15-4532950d210f",
        "value": "jfyicbya26h5hvepgq07zfsqmdk4xcet9annmwuw8rok3lzsxlvjpdubog1rit"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469689981",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "5799b07d-d578-4220-9197-4fa0950d210f",
        "value": "23.253.126.58"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690085",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e5-1c84-4db6-aa51-4609950d210f",
        "value": "www.3ipp3xuzn2.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690086",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e6-587c-4883-992d-4b7b950d210f",
        "value": "www.norkfcncep.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690086",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e6-821c-44cb-85bf-4ada950d210f",
        "value": "www.b9koz9cfsv.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690086",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e6-4058-4108-931b-4071950d210f",
        "value": "www.zl4w1ywkcb.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690086",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e6-2998-4608-b782-4587950d210f",
        "value": "www.d0yfmwte92.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690086",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e6-3c34-42ef-9fcc-4560950d210f",
        "value": "www.cqzlyy4r70.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690087",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e7-c724-47f9-abde-4496950d210f",
        "value": "www.w6zwihbwio.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690087",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e7-89ec-4f88-98ca-4cf6950d210f",
        "value": "www.n2cackqdam.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690087",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e7-e040-4c60-9dd4-427b950d210f",
        "value": "www.6jh8djurlq.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690087",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e7-5b14-4e16-b7b7-4d69950d210f",
        "value": "www.mdfpzugyee.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690088",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e8-e3f0-4d17-8652-42ef950d210f",
        "value": "www.yucunblst3.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690088",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e8-1dc8-48b5-bcca-46d3950d210f",
        "value": "www.ms4qvaqbfj.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690088",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e8-2018-4229-986f-434f950d210f",
        "value": "www.ovkdxfokzv.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690088",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e8-2cd8-4372-baea-4fb8950d210f",
        "value": "www.u6urscrrk6.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690088",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e8-2c48-4c27-8c5f-495f950d210f",
        "value": "www.7wxdv4ko7j.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690089",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e9-41c4-4667-8da4-4fdb950d210f",
        "value": "www.a3wanm9tiu.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690089",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e9-f634-496a-8e27-4c86950d210f",
        "value": "www.8gdgsnvzbk.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690089",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e9-de30-4acc-bf35-4e70950d210f",
        "value": "www.yucb4xun51.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690089",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e9-277c-48af-849f-4bec950d210f",
        "value": "www.5iedn8pao3.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690089",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0e9-576c-4a53-b233-4fe5950d210f",
        "value": "www.n5wzg9nvlf.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690090",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ea-d5a0-4ce1-9e29-4193950d210f",
        "value": "www.gy7h1eunzx.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690090",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ea-fdf8-4dcd-8486-467c950d210f",
        "value": "www.q77mygab2h.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690090",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ea-3b28-4ba0-aa0e-4bb1950d210f",
        "value": "www.x3vr7fujhv.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690090",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ea-495c-4308-919f-438e950d210f",
        "value": "www.k4gs4f0p1d.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690091",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0eb-c740-49b0-89e8-4a09950d210f",
        "value": "www.t8ozdrm7it.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690091",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0eb-8e40-407d-a830-47b6950d210f",
        "value": "www.lwhma1sp3b.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690091",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0eb-569c-4d22-b8fb-4208950d210f",
        "value": "www.jcevu6f8qn.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690091",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0eb-0858-49bd-a641-40d8950d210f",
        "value": "www.wb02o7dcww.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690091",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0eb-cf18-43b1-b38c-4e12950d210f",
        "value": "www.lufwdyiqcl.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690092",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ec-c7a4-4f4d-b5a6-44bd950d210f",
        "value": "www.k4uso1k8gw.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690092",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ec-eaa8-4c0c-a1ef-4c9f950d210f",
        "value": "www.e8ypd5j6cu.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690092",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ec-b370-475a-8a17-494d950d210f",
        "value": "www.sddtlblj6b.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690092",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ec-b928-4f90-9dfb-4674950d210f",
        "value": "www.gxqy0a6cr3.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690092",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ec-33c4-405b-9b00-4ab7950d210f",
        "value": "www.zmxguyaa0d.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690093",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ed-1a14-44ed-b479-4e27950d210f",
        "value": "www.tuagk50g8f.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690093",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ed-f15c-426e-888d-495b950d210f",
        "value": "www.dara03tcod.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690093",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ed-15c4-479f-b20b-4d91950d210f",
        "value": "www.tlw495w9fy.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690093",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ed-e37c-47aa-afef-46f4950d210f",
        "value": "www.q9efocpl9a.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690093",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ed-9d10-49fa-8085-4f6e950d210f",
        "value": "www.h53tk2ckgc.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690094",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ee-5250-4429-a9df-4eb9950d210f",
        "value": "www.84j8ctoyno.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690094",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ee-df30-4ec5-b364-4545950d210f",
        "value": "www.cahxfxwhdl.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690094",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ee-e09c-4b6a-a507-491c950d210f",
        "value": "www.hi6ke3wjg5.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690094",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ee-132c-4f1f-b7b0-4692950d210f",
        "value": "www.win1kzex2h.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690094",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ee-8b58-44dc-a36d-4ade950d210f",
        "value": "www.lkddneksnw.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690095",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ef-b6f4-4edf-a8f3-430c950d210f",
        "value": "www.ovfqt1wjba.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690095",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ef-82e4-46d8-92bd-43a6950d210f",
        "value": "www.aniiz4kdof.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690095",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ef-8ef0-4fd7-a7f2-4ad5950d210f",
        "value": "www.5oh99oqwdd.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690095",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ef-4850-48ef-baeb-4593950d210f",
        "value": "www.d2dpbnmola.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690096",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f0-bd78-47ae-8f5f-4340950d210f",
        "value": "www.8ryede20if.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690096",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f0-70c4-4916-a875-483b950d210f",
        "value": "www.iuj5agqlbr.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690096",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f0-d1e4-4564-af4e-4991950d210f",
        "value": "www.bu0acmfjvq.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690096",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f0-ab54-4a54-ac82-40e3950d210f",
        "value": "www.43apmlncap.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690096",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f0-84e8-4b77-be09-4073950d210f",
        "value": "www.d0m1c7devn.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690097",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f1-5920-46ae-a1e2-4ccd950d210f",
        "value": "www.bdw0gn8ne9.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690097",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f1-3e08-4949-96b2-4c4c950d210f",
        "value": "www.9c8lj4fko5.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690097",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f1-c6c8-4d83-b04e-4491950d210f",
        "value": "www.zti79gweis.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690097",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f1-d640-4500-9d5f-4d64950d210f",
        "value": "www.sc2k3hlvwx.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690097",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f1-2558-4811-88c2-4291950d210f",
        "value": "www.aonbxu3hnd.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690098",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f2-8860-4f2a-882a-4238950d210f",
        "value": "www.oybsgskbne.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690098",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f2-740c-406a-8ecc-455f950d210f",
        "value": "www.ptvrgivuiq.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690098",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f2-3fcc-446c-ba69-42c4950d210f",
        "value": "www.iovljwr3n4.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690098",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f2-df38-43bd-9fc0-43f0950d210f",
        "value": "www.jybiis0pee.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690098",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f2-4420-43f0-b9a6-4f96950d210f",
        "value": "www.oamkjmuhnr.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690098",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f2-379c-489b-ab17-4223950d210f",
        "value": "www.n6jj3oqmzc.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690099",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f3-63bc-4f60-bfdd-48fc950d210f",
        "value": "www.kkgchkblea.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690099",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f3-54c0-4213-b089-44ea950d210f",
        "value": "www.0dljcawhwp.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690099",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f3-0390-4a77-9c98-48ee950d210f",
        "value": "www.auvkhn16f9.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690099",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f3-c42c-45f5-8a0c-4986950d210f",
        "value": "www.fmwglrs6aj.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690099",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f3-ad80-49af-8c13-4289950d210f",
        "value": "www.d5rwfbm8qf.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690100",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f4-bc00-4b3c-9388-4fb7950d210f",
        "value": "www.ecickytlhg.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690100",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f4-a8e0-41a4-99e8-46a4950d210f",
        "value": "www.at7vcefg1a.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690100",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f4-e498-47f6-95e4-46ab950d210f",
        "value": "www.efqkyjaflp.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690100",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f4-87bc-43b0-b8ea-4040950d210f",
        "value": "www.ulitjdfbs1.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690100",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f4-e044-41c1-8c32-41a9950d210f",
        "value": "www.9qnr6oyssk.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690101",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f5-7c18-47ae-baf3-4205950d210f",
        "value": "www.4eabktj4al.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690101",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f5-be78-4a24-b2cd-4b51950d210f",
        "value": "www.9varj35nsb.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690101",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f5-3f28-45df-922e-495c950d210f",
        "value": "www.s82r4luxrw.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690101",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f5-975c-4819-af0f-4119950d210f",
        "value": "www.avuhtrgawe.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690101",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f5-82c8-4e2d-8414-429a950d210f",
        "value": "www.v4begpio9s.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690102",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f6-dc88-4469-9364-4ae5950d210f",
        "value": "www.qkqlh7fkuz.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690102",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f6-55f8-413c-9cd3-45ed950d210f",
        "value": "www.sozlflvrdn.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690102",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f6-9c5c-46d9-97b4-4ed8950d210f",
        "value": "www.4buzxug5wz.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690102",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f6-1ab0-4809-b42d-4b31950d210f",
        "value": "www.pipo6fidim.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690102",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f6-f580-4779-b910-435b950d210f",
        "value": "www.oavgocbqyd.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690102",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f6-78d4-4185-8d68-4a3a950d210f",
        "value": "www.dxhgzvc5bn.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690103",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f7-8aa0-46c2-94f4-453f950d210f",
        "value": "www.1nxkak8yvo.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690103",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f7-747c-44a0-ac93-414c950d210f",
        "value": "www.ikssxlzftv.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690103",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f7-5434-4b4f-a661-491c950d210f",
        "value": "www.6yena7muyi.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690103",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f7-87d4-417a-8d94-45f5950d210f",
        "value": "www.5mswkfpzq5.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690103",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f7-5b98-4325-b0a2-4eaa950d210f",
        "value": "www.dbajiezq61.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690104",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f8-78c4-42fd-99b4-4df9950d210f",
        "value": "www.ebxevvp7lz.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690104",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f8-bce0-4382-9ace-4629950d210f",
        "value": "www.qy3qn7ccl4.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690104",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f8-238c-4721-aedc-4031950d210f",
        "value": "www.qnrpkzdr24.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690104",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f8-1d94-47b5-ba6a-44e2950d210f",
        "value": "www.wbk5mt3tmu.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690104",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f8-a370-41d3-8603-4bb1950d210f",
        "value": "www.ummoejaz44.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690105",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f9-8430-424b-979c-4f8f950d210f",
        "value": "www.xmuo30ddhw.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690105",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f9-32cc-4128-9dde-4314950d210f",
        "value": "www.ml219cyxyp.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690105",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f9-73a4-426a-9059-45e0950d210f",
        "value": "www.p4e8ev61mg.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690105",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f9-588c-4b16-a731-4d5d950d210f",
        "value": "www.9r2nlncjqm.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690105",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0f9-9e90-4ae3-a256-44e5950d210f",
        "value": "www.vdnjax5lmw.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690106",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fa-284c-4354-95b2-46f6950d210f",
        "value": "www.lleafj9q6y.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690106",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fa-cbf4-4cac-8dd9-4a88950d210f",
        "value": "www.bgyeydxsu7.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690106",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fa-e700-44d5-b9e1-4757950d210f",
        "value": "www.m6u8pqstmz.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690106",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fa-87dc-4f05-b383-4d6f950d210f",
        "value": "www.15fe6ouzhm.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690106",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fa-7c84-4fc2-b70b-4ee6950d210f",
        "value": "www.efvdz4a52w.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690106",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fa-3fdc-4986-9ddf-4aca950d210f",
        "value": "www.5shtguwy5y.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690107",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fb-edc4-44d2-ae4f-4b1a950d210f",
        "value": "www.muwiyn4lvd.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690107",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fb-81cc-4e6e-8cd5-4ef3950d210f",
        "value": "www.ganuj7lstm.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690107",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fb-224c-4e12-b3b2-4a1b950d210f",
        "value": "www.wyiywtizcw.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690107",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fb-18c4-4491-a1c4-4f5f950d210f",
        "value": "www.sb3ydum9tt.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690107",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fb-1bac-4e89-95e4-4f91950d210f",
        "value": "www.cuqndqykyn.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690108",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fc-ffec-4a10-a43d-415e950d210f",
        "value": "www.36dfnss0ay.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690108",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fc-388c-4e7a-a4c9-4036950d210f",
        "value": "www.aqe4c5zj3k.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690108",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fc-3630-4aba-92e7-4fab950d210f",
        "value": "www.qasygeakes.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690108",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fc-a134-4c01-b433-4a59950d210f",
        "value": "www.yz3fnfbqqa.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690108",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fc-f820-4304-b286-4321950d210f",
        "value": "www.muwenvpb9h.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690108",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fc-7d6c-48d4-9ba5-46a3950d210f",
        "value": "www.whvr841hjs.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690109",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fd-b780-43c1-b07f-479f950d210f",
        "value": "www.pg0tndvnuq.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690109",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fd-eb28-4ef7-b50a-4316950d210f",
        "value": "www.cdmcowgsw0.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690109",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fd-e41c-400f-b828-470f950d210f",
        "value": "www.akxnea6j2k.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690109",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fd-0c5c-413f-9d20-440a950d210f",
        "value": "www.pykrlt96ci.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690109",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fd-9c28-4ae3-a35c-4ff0950d210f",
        "value": "www.dtitoebznc.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690109",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fd-51b4-4824-98c0-47ec950d210f",
        "value": "www.iqm0ncmlty.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690110",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fe-70b0-40a4-9f5f-4bf5950d210f",
        "value": "www.59kneir7td.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690110",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fe-cec8-412c-ad3d-4ea5950d210f",
        "value": "www.wmi7swjzxh.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690110",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fe-9568-4257-b88b-45fd950d210f",
        "value": "www.jbagepu54e.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690110",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fe-4604-4dea-ba24-4df7950d210f",
        "value": "www.eftjllp0k9.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690110",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0fe-da0c-474c-a1a3-423c950d210f",
        "value": "www.qbnrsypzap.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690111",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ff-d09c-4cf1-9f30-49b6950d210f",
        "value": "www.6asglp09sf.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690111",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ff-7bf8-47c9-a11f-481f950d210f",
        "value": "www.b2igkosvy7.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690111",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ff-7e8c-47b3-a989-4e45950d210f",
        "value": "www.4bpifpk85d.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690111",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ff-daac-4df7-86a5-43e5950d210f",
        "value": "www.hnipgwg00w.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690111",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b0ff-d17c-44a0-8c7a-42f3950d210f",
        "value": "www.r3ngsciwxs.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690112",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b100-fcd8-4db5-87a4-4ee1950d210f",
        "value": "www.ib3cdbcoe1.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690112",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b100-e054-4e5d-9f3c-483f950d210f",
        "value": "www.alqkjj0lpa.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690112",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b100-d33c-48e9-932c-4068950d210f",
        "value": "www.yp9bd1yuio.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690112",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b100-a644-4aaa-afa9-4d1d950d210f",
        "value": "www.pkxcla4lqj.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690112",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b100-e730-4495-93f7-4e67950d210f",
        "value": "www.xjnf8aswtj.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690113",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b101-c7a8-4fe7-ae5a-4187950d210f",
        "value": "www.shbpagdfgg.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690113",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b101-554c-4520-be12-49ca950d210f",
        "value": "www.qksibgsbkb.net"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690113",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b101-96bc-4f1e-873a-4079950d210f",
        "value": "www.mwtetcdhcp.com"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690113",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b101-712c-4c54-b7d2-4560950d210f",
        "value": "www.nazqb1dulk.org"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690113",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b101-ba7c-4009-999d-437d950d210f",
        "value": "www.gpsh39jabf.info"
      },
      {
        "category": "Network activity",
        "comment": "Mad Max Domains for 2015 through 2017",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1469690114",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5799b102-80a8-4081-a961-4964950d210f",
        "value": "www.87uaj1f4cp.net"
      }
    ]
  }
}