{ "Event": { "analysis": "2", "date": "2014-10-28", "extends_uuid": "", "info": "OSINT Additional indicators relating to Sofacy (APT28) phishing blog post by PWC", "publish_timestamp": "1416386173", "published": true, "threat_level_id": "3", "timestamp": "1416348742", "uuid": "546bbf42-8e2c-412c-8f8d-4b22950d210b", "Orgc": { "name": "CthulhuSPRL.be", "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f" }, "Tag": [ { "colour": "#004646", "local": "0", "name": "type:OSINT", "relationship_type": "" }, { "colour": "#33FF00", "local": "0", "name": "tlp:green", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347482", "to_ids": false, "type": "link", "uuid": "546bbf5a-478c-4a48-9122-f2f5950d210b", "value": "http://pwc.blogs.com/cyber_security_updates/2014/10/additional-indicators-relating-to-sofacy-apt28-phishing.html" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347482", "to_ids": false, "type": "link", "uuid": "546bbf5a-65e0-45ad-8753-f2f5950d210b", "value": "http://pwc.blogs.com/files/tactical-intelligence-bulletin---sofacy-phishing.pdf" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347496", "to_ids": false, "type": "text", "uuid": "546bbf68-0250-4ca4-bbda-45da950d210b", "value": "Sofacy" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347496", "to_ids": false, "type": "text", "uuid": "546bbf68-cea4-4e1f-8713-4ccc950d210b", "value": "APT28" }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347512", "to_ids": false, "type": "comment", "uuid": "546bbf78-6f78-4490-943f-f2ea950d210b", "value": "Data entered by David Andr\u00c3\u00a9" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347870", "to_ids": true, "type": "snort", "uuid": "546bc0de-45cc-4b3f-8dd6-4e0f950d210b", "value": "alert tcp $EXTERNAL_NET $HTTP_PORTS-> $HOME_NET any (msg:\"Potential Sofacy Phishing Redirect\";flow:established,to_client; content:\"\\\"\\\\x6C\\\\x6F\\\\x63\\\\x61\\\\x74\\\\x69\\\\x6F\\\\x6E\\\"\";classtype:trojan-activity;reference:url,http://pwc.blogs.com/cyber_security_updates/2014/10/phresh-phishing-against-government-defence-and-energy.html; rev:1;)" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416347870", "to_ids": true, "type": "snort", "uuid": "546bc0de-f26c-4f0d-8c2f-4be7950d210b", "value": "alert tcp $EXTERNAL_NET $HTTP_PORTS-> $HOME_NET any (msg:\"Potential Sofacy Phishing Redirect\";flow:established,to_client; content:\"\\\"x6Cx6Fx63x61x74x69x6Fx6E\\\"\"; classtype:trojan-activity;reference:url,http://pwc.blogs.com/cyber_security_updates/2014/10/phresh-phishing-against-government-defence-and-energy.html; rev:1;)" }, { "category": "Network activity", "comment": "The following comment occurs in many of the pages we\u00e2\u20ac\u2122ve observed relating to this campaign , but can also appear in some legitimate sites", "deleted": false, "disable_correlation": false, "timestamp": "1416347934", "to_ids": true, "type": "snort", "uuid": "546bc11e-a57c-4122-9b9a-4823950d210b", "value": "alert tcp $EXTERNAL_NET $HTTP_PORTS-> $HOME_NET any (msg:\"Potential Sofacy Phishing Redirect\";flow:established,to_client; content:\"// stop for sometime if needed\"; classtype:trojan-activity;reference:url,http://pwc.blogs.com/cyber_security_updates/2014/10/phresh-phishing-against-government-defence-and-energy.html; rev:1;)" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348264", "to_ids": true, "type": "hostname", "uuid": "546bc269-34ac-403f-bf73-42c0950d210b", "value": "northropgrumman.org.uk" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-5eb8-4712-8787-4799950d210b", "value": "counterterorexpo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-887c-4448-9378-4604950d210b", "value": "nato.nshq.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-afa0-48de-8385-426a950d210b", "value": "bostondynamlcs.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-5994-464c-a396-4d6e950d210b", "value": "natoexhibitionff14.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-6140-497b-a62e-48d1950d210b", "value": "vice-news.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-963c-45be-98f3-451a950d210b", "value": "world-oil-company.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-3490-4280-b454-4fca950d210b", "value": "hushmali.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-f1f0-4cc1-9c36-4c14950d210b", "value": "mfanews.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-bac8-41d8-8953-4b41950d210b", "value": "azureon-line.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-47fc-4e6f-b102-40fe950d210b", "value": "us-mg6mail-service.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-365c-4398-ab6a-4c9d950d210b", "value": "mail.telecharger-01.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-eb18-4376-a46c-4ada950d210b", "value": "ns1.mfanews.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-4978-440a-bf0f-4f2c950d210b", "value": "updatepc.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-ea98-45c3-a152-49d3950d210b", "value": "ya-support.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348265", "to_ids": true, "type": "hostname", "uuid": "546bc269-dcf4-42f8-a0b0-4b53950d210b", "value": "changepassword-hotmail.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-d0c4-46c3-87cd-4655950d210b", "value": "mail.sofexjordanx.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-341c-4b36-9e1c-4d73950d210b", "value": "kavkazcentr.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-e29c-4952-9acf-4faf950d210b", "value": "webmail.windows-updater.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-c974-4c39-90fc-4c83950d210b", "value": "abbott-export.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-0604-432b-b4da-472e950d210b", "value": "mfapress.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-c1c4-473e-b0e1-4e34950d210b", "value": "www.eurosatory-2014.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-eda8-4aae-8243-4aac950d210b", "value": "yavuz16.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-c398-4e04-8bf4-48a2950d210b", "value": "mfauz.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-aab0-469a-a9de-4526950d210b", "value": "mrthelp.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-55a0-47a8-8e7e-4c7c950d210b", "value": "egreetingsfrom.us" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-e2bc-4cf4-83d0-4f25950d210b", "value": "kitegacc.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-5b24-43d7-bf92-4017950d210b", "value": "kitegacc.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-83b0-43fd-9f1b-4299950d210b", "value": "mail.rnil.am" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-bc80-45fb-8076-4ba1950d210b", "value": "hothookup.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-2f78-4958-bf76-4b4a950d210b", "value": "netschecker.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-b874-4ff5-aa56-464b950d210b", "value": "webmail-saic.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348266", "to_ids": true, "type": "hostname", "uuid": "546bc26a-51ec-482c-b813-401c950d210b", "value": "intuitstatistics.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-3244-4e26-88ff-4c48950d210b", "value": "flickr-service.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-d594-469a-b791-4429950d210b", "value": "n0vinite.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-fbec-4bd9-b62e-4127950d210b", "value": "assaas.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-1cc0-4433-98cd-4c24950d210b", "value": "rnil.cl" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-1aec-4e94-8794-4525950d210b", "value": "helpfromhome.co" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-62b0-4241-a86d-44fd950d210b", "value": "gdforum.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-f5a8-48e5-a749-4456950d210b", "value": "set121.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-e0a0-4841-874d-4b01950d210b", "value": "academl.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-ae1c-4cb1-9900-48b0950d210b", "value": "changepassword-yahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-a454-405f-a7fb-4d81950d210b", "value": "greetingcardproject.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-7b28-4436-ba2c-43e4950d210b", "value": "adawareblock.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-abc0-4f92-86df-45d5950d210b", "value": "securitypractic.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-90d4-4639-8f2b-42f8950d210b", "value": "rnil.am" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-5ba8-4668-b247-4532950d210b", "value": "ya-login.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-3af8-4c35-885a-467c950d210b", "value": "mx1.g0b.mx" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348267", "to_ids": true, "type": "hostname", "uuid": "546bc26b-d134-44f4-87ec-4a77950d210b", "value": "product-update.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-7b30-41b6-bc01-495b950d210b", "value": "memoinfo.ru" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-cfb0-4200-bbad-4f48950d210b", "value": "privacy-live.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-1f28-4f6a-8054-402e950d210b", "value": "tolonevvs.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-eb94-42d5-ab2a-48dd950d210b", "value": "us-westmail-undeliversystem.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-7d28-4670-9061-4d35950d210b", "value": "test.chmail.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-f944-4251-87d8-497c950d210b", "value": "kakashka.chmail.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-7320-4d19-833e-403d950d210b", "value": "gov.hu.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-38a0-4619-a737-4424950d210b", "value": "us-mg6-transfermail-service.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-6bb0-4ba0-86c9-4d01950d210b", "value": "us-mg6-mailreport.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-da40-4a2b-9314-4b57950d210b", "value": "aadexpo2014.co.za" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-ee28-4aa4-aab9-46ed950d210b", "value": "www.gdforum.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-6470-4f45-a5ac-4c92950d210b", "value": "militaryinf.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-db00-4ee3-aec2-4347950d210b", "value": "valuetable.hk" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-e464-4e92-af76-49e0950d210b", "value": "googlesetting.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-56ac-4f42-a561-494c950d210b", "value": "hotmail-monitor.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348268", "to_ids": true, "type": "hostname", "uuid": "546bc26c-a8d8-4690-9731-4b67950d210b", "value": "junlper.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-fea8-4496-a8c1-4881950d210b", "value": "www.ya-support.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-b8f0-4da2-a4e5-472d950d210b", "value": "g-analytics.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-666c-4726-b45f-4568950d210b", "value": "www.sofexjordanx.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-d17c-4679-b5b0-452b950d210b", "value": "privacy-yahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-ac5c-4868-850d-4767950d210b", "value": "yahoo.chmail.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-2dc8-4bcf-b74c-4096950d210b", "value": "windous.kz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-0600-4f06-b0d3-4515950d210b", "value": "youtubeclip.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-bd14-4023-8841-40ce950d210b", "value": "aa.69.mu" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-a1f8-40e5-b64b-4273950d210b", "value": "qov.hu.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-6268-4ed7-a76c-402b950d210b", "value": "vvorthyhands.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-97a4-4162-b08d-4d04950d210b", "value": "dkvnz.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-8178-42ee-b469-4ff6950d210b", "value": "mail.account-flickr.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-9194-4a15-a9f8-46b7950d210b", "value": "bulletin-center.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-d680-46b7-8922-42c2950d210b", "value": "yovtube.co" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-1f34-4ae0-8a2b-4abd950d210b", "value": "skidkaturag.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348269", "to_ids": true, "type": "hostname", "uuid": "546bc26d-d718-477e-8844-4f9b950d210b", "value": "defenceiq.us" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-42d4-4748-bae4-44e1950d210b", "value": "mail-google.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-a0c8-4f0d-9719-4788950d210b", "value": "soft-storage.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-7d1c-4e27-9a8d-4de5950d210b", "value": "clickchekkker.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-5ebc-4a60-8921-49a4950d210b", "value": "intuitanalys.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-3a00-4630-87ff-4d6b950d210b", "value": "sofexjordanx.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-76a4-4a89-90d0-426c950d210b", "value": "intuitstatistic.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-8c38-470d-b410-4ffa950d210b", "value": "militaryexponews.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-9b28-4b8f-a1cc-43ef950d210b", "value": "caciltd.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-2974-48bb-b8d1-46e0950d210b", "value": "windows-updater.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-9aa0-45db-8e79-49e0950d210b", "value": "mail.securitypractic.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-9674-43ba-bdb4-46f3950d210b", "value": "www.surll.me" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-591c-4f6a-88f0-4bb0950d210b", "value": "heidelberqcement.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-88f0-42b1-bdd7-4dc3950d210b", "value": "armypress.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-1120-4ae9-9234-48a0950d210b", "value": "sweetcherry.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-dd90-4dd1-bebd-4549950d210b", "value": "account-flickr.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348270", "to_ids": true, "type": "hostname", "uuid": "546bc26e-d364-4791-9f34-4aab950d210b", "value": "setnewpass-yahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-232c-4f5b-ac91-4a0c950d210b", "value": "scanmalware.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-cbd4-4cbe-8e77-49b2950d210b", "value": "greetingcardsproject.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-a08c-449e-94f7-45d3950d210b", "value": "q0v.pl" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-6698-471c-ae84-4385950d210b", "value": "link-google.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-6ef8-4ebd-a08a-4472950d210b", "value": "www.forsvaret.co" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-301c-45cd-9ece-450e950d210b", "value": "cubic.com.co" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-79c0-4638-93a5-44ea950d210b", "value": "mail.mrthelp.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-96b8-4d1e-91e1-495e950d210b", "value": "www.us-mg7mail-transferservice.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-b024-442e-a066-4402950d210b", "value": "www.vljaihln.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-a8b4-4b75-839d-4cdd950d210b", "value": "ifcdsc.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-6900-4a38-ae22-4277950d210b", "value": "smigroup-online.co.uk" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-d120-4297-84dd-4d67950d210b", "value": "100plusapps.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-f618-46c2-9c58-48cc950d210b", "value": "pruintco.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-024c-4650-8761-4b35950d210b", "value": "www.yahoo-monitor.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-46f8-4b5a-8e4a-4fb2950d210b", "value": "www.chmail.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348271", "to_ids": true, "type": "hostname", "uuid": "546bc26f-ebc4-4e22-ac13-48a3950d210b", "value": "litu.su" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-e158-4584-bc8b-4096950d210b", "value": "www.dkvnz.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-54e4-4c80-9f29-4e21950d210b", "value": "mail.yahoo-monitor.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-6b90-4cf0-a050-4e83950d210b", "value": "us-mg7mail-transferservice.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-23c8-4721-86c7-4971950d210b", "value": "evrosatory.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-aa88-4ba4-af44-4060950d210b", "value": "wind0ws.kz" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-9bcc-49c0-8ebd-44d3950d210b", "value": "farnboroughair2014.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-5850-44cd-9bbf-4d68950d210b", "value": "mfa-gov.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-cd8c-412d-a329-4249950d210b", "value": "y-privacy.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-7390-48e1-8b9e-4b68950d210b", "value": "login-osce.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-c860-4c9b-9445-4dc3950d210b", "value": "helpmicrosoft.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-38f0-4f12-bb54-4efd950d210b", "value": "sofexjordan2014.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-7568-4b0b-a228-4bd1950d210b", "value": "malwarecheck.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-e8a4-4bcb-9a0f-45b4950d210b", "value": "update-hub.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-7d80-4543-85bc-4c93950d210b", "value": "mx3.set121.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-679c-4428-955c-4291950d210b", "value": "srv-yahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348272", "to_ids": true, "type": "hostname", "uuid": "546bc270-25e0-4398-8090-4aed950d210b", "value": "bostondyn.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-39a8-4f34-9a9d-4002950d210b", "value": "aerospacesystem.us.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-8430-4960-8c02-4e00950d210b", "value": "eurosatary.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-2234-4c13-bd57-4145950d210b", "value": "telecharger-01.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-55c0-46eb-a428-4775950d210b", "value": "chmali.ir" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-99b4-486e-9d0f-4980950d210b", "value": "privacy.google-settings.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-71a4-4f51-8d49-4eb2950d210b", "value": "yandex-site.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-7220-4f66-a51e-4913950d210b", "value": "www.7daysinabudhabi.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-cd84-473e-a86b-456f950d210b", "value": "www.account-flickr.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-cfb4-4c68-8782-4611950d210b", "value": "google-settings.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-14e0-4f27-90cd-4582950d210b", "value": "gcardproject.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-c52c-4cf3-ba25-45fb950d210b", "value": "eurosator.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-0d6c-46e9-81dc-4ab9950d210b", "value": "update-zimbra.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-1470-4e1d-9416-4901950d210b", "value": "asisonlline.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-f284-4515-9943-4a35950d210b", "value": "mfapress.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-afe0-4850-b309-4729950d210b", "value": "stockliquidationgroup.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348273", "to_ids": true, "type": "hostname", "uuid": "546bc271-79f4-49ba-8e5a-4489950d210b", "value": "pasport-yandex.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-24e4-4299-bd80-4ffd950d210b", "value": "konami-game.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-9db0-4341-bb03-472e950d210b", "value": "www.adawareblock.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-a180-4357-a3d3-4e47950d210b", "value": "persa124.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-88b8-4544-bddf-435e950d210b", "value": "eurosatory-2014.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-6454-4eba-93ce-4ba8950d210b", "value": "clickchekker.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-87b4-4356-a702-44e0950d210b", "value": "al-wayi.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-08a4-4762-b105-4419950d210b", "value": "molodirect.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-3718-4358-98e5-43a6950d210b", "value": "com-0cd.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-49e0-4da8-a548-4f51950d210b", "value": "us-mg6mailyahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-7f24-4ec5-b19a-4e6c950d210b", "value": "finance-reports.everyday.com-w13.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-fcec-4d6d-aa8f-4a7f950d210b", "value": "apple-iclouds.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-3dc0-4f7c-92a5-4c95950d210b", "value": "unizg.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-09c8-4eea-8ccd-40af950d210b", "value": "mfanews.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-21f4-4a6e-822b-4868950d210b", "value": "mail.ya-support.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-bdc4-40f9-a07a-4cea950d210b", "value": "checkmalware.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348274", "to_ids": true, "type": "hostname", "uuid": "546bc272-e5b0-4c80-ab7e-4cbc950d210b", "value": "geaviations.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-78d8-4904-bfd8-41f9950d210b", "value": "flashsecurity.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-2ac0-4822-9986-4ea0950d210b", "value": "imperialc0nsult.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-9b28-4654-aa3b-4368950d210b", "value": "cublc.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-f42c-4d3a-bca7-48a5950d210b", "value": "evronaval.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-d7dc-4b99-9991-42fb950d210b", "value": "xuetue2013.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-a1a0-49ff-86e4-4a87950d210b", "value": "www.valuetable.hk" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-5548-4a44-821b-4016950d210b", "value": "mail.chmail.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-725c-4465-bdba-4d01950d210b", "value": "nshq.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-6bc8-40a9-946b-4193950d210b", "value": "forsvaret.co" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-764c-44e1-a500-4101950d210b", "value": "in-eternal-memory-of.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-1364-4576-88b4-419c950d210b", "value": "www.us-westmail-undeliversystem.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-49ac-4bf3-b8dc-4564950d210b", "value": "gdforum.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-b788-4263-97ce-46e6950d210b", "value": "sex-toy-shop.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-6a88-4965-b624-4f28950d210b", "value": "novinitie.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-9d18-4e1c-bd2a-4431950d210b", "value": "yahoo-monitor.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348275", "to_ids": true, "type": "hostname", "uuid": "546bc273-55fc-49be-9d26-4536950d210b", "value": "standartnevvs.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-2300-467e-bd22-4584950d210b", "value": "pornforyou.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-2678-483b-a13b-4f20950d210b", "value": "mail.q0v.pl" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-0ffc-4547-a3c2-4827950d210b", "value": "mail.windows-updater.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-f778-4071-81dd-4ac7950d210b", "value": "allcashin.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-cd04-4e1a-9fd1-4b62950d210b", "value": "arnf.bg" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-4ed4-4529-b809-4db2950d210b", "value": "gpwpl.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-dc48-4d78-868b-47df950d210b", "value": "updateapi.longmusic.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-1178-496c-a358-4a35950d210b", "value": "chmail.in" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-c430-41d3-bae8-44a4950d210b", "value": "brokersads.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-d174-4311-a726-44d8950d210b", "value": "testservice24.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-834c-4cb2-add0-41e7950d210b", "value": "kavkazjlhad.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-72a4-4bb7-aea9-4880950d210b", "value": "livemicrosoft.net" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-6da0-415c-a101-4ba0950d210b", "value": "surll.me" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-86bc-4305-9825-4d9d950d210b", "value": "accesd-de-desjardins.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-ef84-4b35-b1f0-4c3b950d210b", "value": "mail.hushmali.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348276", "to_ids": true, "type": "hostname", "uuid": "546bc274-4644-4e27-839b-4056950d210b", "value": "sunmicrosystem.info" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-3884-46bd-805c-41e2950d210b", "value": "bytly.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-c3b0-4133-ad55-408d950d210b", "value": "mx.rnil.cl" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-92d8-426c-a0c0-48d7950d210b", "value": "poczta.mon.q0v.pl" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-12c8-4a66-98c2-47bd950d210b", "value": "ns.mfanews.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-edc0-4d60-b0cb-4bff950d210b", "value": "7daysinabudhabi.org" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-b8a8-4ca2-94eb-46ae950d210b", "value": "privacy-hotmail.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-e580-4aa5-a3d3-4863950d210b", "value": "ns1.al-wayi.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-3cb4-4efc-a97a-4f20950d210b", "value": "ecards-yahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-7518-46ea-a40c-48f5950d210b", "value": "eurosatory2014.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-d7d0-49a5-88e7-49be950d210b", "value": "yahoo-analytics.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-b458-4cce-9709-4b0d950d210b", "value": "www.srv-yahoo.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1416348277", "to_ids": true, "type": "hostname", "uuid": "546bc275-19b0-4dc8-984e-4c03950d210b", "value": "set133.com" } ] } }