KasperskyLab-TinyCheck/assets/iocs.json

{"iocs": [{"id": 1, "type": "domain", "tag": "tracker", "tlp": "white", "value": "8balwalz1i.execute-api.us-east-2.amazonaws.com"}, {"id": 2, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.smartechmetrics.com"}, {"id": 3, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ck-running-apps-700f1.firebaseio.com"}, {"id": 4, "type": "domain", "tag": "tracker", "tlp": "white", "value": "udata.elephantdata.net"}, {"id": 5, "type": "domain", "tag": "tracker", "tlp": "white", "value": "alb.bearclod.com"}, {"id": 6, "type": "domain", "tag": "tracker", "tlp": "white", "value": "pie.wirelessregistry.com"}, {"id": 7, "type": "domain", "tag": "tracker", "tlp": "white", "value": "bin5y4muil.execute-api.us-east-1.amazonaws.com"}, {"id": 8, "type": "domain", "tag": "tracker", "tlp": "white", "value": "atb.bearclod.com"}, {"id": 9, "type": "domain", "tag": "tracker", "tlp": "white", "value": "setting.rayjump.com"}, {"id": 10, "type": "domain", "tag": "tracker", "tlp": "white", "value": "aly.bearclod.com"}, {"id": 11, "type": "domain", "tag": "tracker", "tlp": "white", "value": "bivitis.bearclod.com"}, {"id": 12, "type": "domain", "tag": "tracker", "tlp": "white", "value": "brul.bearclod.com"}, {"id": 13, "type": "domain", "tag": "tracker", "tlp": "white", "value": "alz.bearclod.com"}, {"id": 14, "type": "domain", "tag": "tracker", "tlp": "white", "value": "hkn01.bearclod.com"}, {"id": 15, "type": "domain", "tag": "tracker", "tlp": "white", "value": "brt.bearclod.com"}, {"id": 16, "type": "domain", "tag": "tracker", "tlp": "white", "value": "hfstat.bearclod.com"}, {"id": 17, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-4.wzrkt.com"}, {"id": 18, "type": "domain", "tag": "tracker", "tlp": "white", "value": "zoo.bearclod.com"}, {"id": 19, "type": "domain", "tag": "tracker", "tlp": "white", "value": "settings.crashlytics.com"}, {"id": 20, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ply.bearclod.com"}, {"id": 21, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sdk.starbolt.io"}, {"id": 22, "type": "domain", "tag": "tracker", "tlp": "white", "value": "dmp.starbolt.io"}, {"id": 23, "type": "domain", "tag": "tracker", "tlp": "white", "value": "e.crashlytics.com"}, {"id": 24, "type": "domain", "tag": "tracker", "tlp": "white", "value": "android-quinoa-config-prod.sense360eng.com"}, {"id": 25, "type": "domain", "tag": "tracker", "tlp": "white", "value": "survey-notify-event.sense360eng.com"}, {"id": 26, "type": "domain", "tag": "tracker", "tlp": "white", "value": "devices.starbolt.io"}, {"id": 27, "type": "domain", "tag": "tracker", "tlp": "white", "value": "app-measurement.com"}, {"id": 28, "type": "domain", "tag": "tracker", "tlp": "white", "value": "quinoa-personal-identify-prod.sense360eng.com"}, {"id": 29, "type": "domain", "tag": "tracker", "tlp": "white", "value": "mobile-collector.newrelic.com"}, {"id": 30, "type": "domain", "tag": "tracker", "tlp": "white", "value": "mobile-crash.newrelic.com"}, {"id": 31, "type": "domain", "tag": "tracker", "tlp": "white", "value": "data.mistat.india.xiaomi.com"}, {"id": 32, "type": "domain", "tag": "tracker", "tlp": "white", "value": "data.mistat.intl.xiaomi.com"}, {"id": 33, "type": "domain", "tag": "tracker", "tlp": "white", "value": "data.mistat.rus.xiaomi.com"}, {"id": 34, "type": "domain", "tag": "tracker", "tlp": "white", "value": "tracking.rus.miui.com"}, {"id": 35, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.238.186.0/24"}, {"id": 36, "type": "domain", "tag": "tracker", "tlp": "white", "value": "tracking.intl.miui.com"}, {"id": 37, "type": "domain", "tag": "tracker", "tlp": "white", "value": "tracking.india.miui.com"}, {"id": 38, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sa.api.intl.miui.com"}, {"id": 39, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sa.api.rus.miui.com"}, {"id": 40, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sa.api.india.miui.com"}, {"id": 41, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "shadow-logs.com"}, {"id": 42, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.myendpoint.io"}, {"id": 43, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ti.domainforlite.com"}, {"id": 44, "type": "domain", "tag": "tracker", "tlp": "white", "value": "uu.domainforlite.com"}, {"id": 45, "type": "domain", "tag": "tracker", "tlp": "white", "value": "adserver.hahamobi.com"}, {"id": 46, "type": "domain", "tag": "tracker", "tlp": "white", "value": "analytics.hahamobi.com"}, {"id": 47, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.salmonads.com"}, {"id": 48, "type": "domain", "tag": "tracker", "tlp": "white", "value": "dat.funheroic.com"}, {"id": 49, "type": "domain", "tag": "tracker", "tlp": "white", "value": "lg.luckyforworlds.com"}, {"id": 50, "type": "domain", "tag": "tracker", "tlp": "white", "value": "lg.smardroid.com"}, {"id": 51, "type": "domain", "tag": "tracker", "tlp": "white", "value": "analytics.salmonads.com"}, {"id": 52, "type": "domain", "tag": "tracker", "tlp": "white", "value": "log.mobpowertech.com"}, {"id": 53, "type": "domain", "tag": "tracker", "tlp": "white", "value": "log.adywind.com"}, {"id": 54, "type": "domain", "tag": "tracker", "tlp": "white", "value": "lg.requestads.com"}, {"id": 55, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hicam.net"}, {"id": 56, "type": "domain", "tag": "tracker", "tlp": "white", "value": "us01.salmonads.com"}, {"id": 57, "type": "domain", "tag": "tracker", "tlp": "white", "value": "www.ywupscsff.com"}, {"id": 58, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-painter.com"}, {"id": 59, "type": "domain", "tag": "tracker", "tlp": "white", "value": "www.mzeibiyr.com"}, {"id": 60, "type": "domain", "tag": "tracker", "tlp": "white", "value": "net.hahamobi.com"}, {"id": 61, "type": "domain", "tag": "tracker", "tlp": "white", "value": "i151125.infourl.net"}, {"id": 62, "type": "domain", "tag": "tracker", "tlp": "white", "value": "www.jueoxdr.com"}, {"id": 63, "type": "domain", "tag": "tracker", "tlp": "white", "value": "net.salmonads.com"}, {"id": 64, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ufz.doesxyz.com"}, {"id": 65, "type": "domain", "tag": "tracker", "tlp": "white", "value": "stable.icecyber.org"}, {"id": 66, "type": "domain", "tag": "tracker", "tlp": "white", "value": "404mobi.com"}, {"id": 67, "type": "domain", "tag": "tracker", "tlp": "white", "value": "51ginkgo.com"}, {"id": 68, "type": "domain", "tag": "tracker", "tlp": "white", "value": "lbjg7.com"}, {"id": 69, "type": "domain", "tag": "tracker", "tlp": "white", "value": "bigdata800.com"}, {"id": 70, "type": "domain", "tag": "tracker", "tlp": "white", "value": "apd1.thunup.com"}, {"id": 71, "type": "domain", "tag": "tracker", "tlp": "white", "value": "n.systemlog.me"}, {"id": 72, "type": "domain", "tag": "tracker", "tlp": "white", "value": "analytics.rayjump.com"}, {"id": 73, "type": "domain", "tag": "tracker", "tlp": "white", "value": "net.cleverjp.com"}, {"id": 74, "type": "domain", "tag": "tracker", "tlp": "white", "value": "arcpi.nextialive.roimaster.site"}, {"id": 75, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.nextialive.roimaster.site"}, {"id": 76, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ws.nextialive.roimaster.site"}, {"id": 77, "type": "domain", "tag": "tracker", "tlp": "white", "value": "nextialive.roimaster.site"}, {"id": 78, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.dev.chat.roimaster.site"}, {"id": 79, "type": "domain", "tag": "tracker", "tlp": "white", "value": "dev.chat.roimaster.site"}, {"id": 80, "type": "domain", "tag": "tracker", "tlp": "white", "value": "2j1i9uqw.oss-eu-central-1.aliyuncs.com"}, {"id": 81, "type": "domain", "tag": "tracker", "tlp": "white", "value": "blackdragon03.oss-ap-southeast-5.aliyuncs.com"}, {"id": 82, "type": "domain", "tag": "tracker", "tlp": "white", "value": "blackdragon.oss-ap-southeast-5.aliyuncs.com"}, {"id": 83, "type": "domain", "tag": "tracker", "tlp": "white", "value": "fgcxweasqw.oss-eu-central-1.aliyuncs.com"}, {"id": 84, "type": "domain", "tag": "tracker", "tlp": "white", "value": "jk8681oy.oss-eu-central-1.aliyuncs.com"}, {"id": 85, "type": "domain", "tag": "tracker", "tlp": "white", "value": "laodaoo.oss-ap-southeast-5.aliyuncs.com"}, {"id": 86, "type": "domain", "tag": "tracker", "tlp": "white", "value": "n47n.oss-ap-southeast-5.aliyuncs.com"}, {"id": 87, "type": "domain", "tag": "tracker", "tlp": "white", "value": "nineth03.oss-ap-southeast-5.aliyuncs.com"}, {"id": 88, "type": "domain", "tag": "tracker", "tlp": "white", "value": "proxy48.oss-eu-central-1.aliyuncs.com"}, {"id": 89, "type": "domain", "tag": "tracker", "tlp": "white", "value": "apd1.warnlog.com"}, {"id": 90, "type": "domain", "tag": "tracker", "tlp": "white", "value": "2fapass.club"}, {"id": 91, "type": "domain", "tag": "tracker", "tlp": "white", "value": "androidradio.life"}, {"id": 92, "type": "domain", "tag": "tracker", "tlp": "white", "value": "fitnessstrategy.xyz"}, {"id": 93, "type": "domain", "tag": "tracker", "tlp": "white", "value": "groovefitness.xyz"}, {"id": 94, "type": "domain", "tag": "tracker", "tlp": "white", "value": "downdating.club"}, {"id": 95, "type": "domain", "tag": "tracker", "tlp": "white", "value": "loversfinder.xyz"}, {"id": 96, "type": "domain", "tag": "tracker", "tlp": "white", "value": "positivefitness.club"}, {"id": 97, "type": "domain", "tag": "tracker", "tlp": "white", "value": "safeyourdata.xyz"}, {"id": 98, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sport4ever.club"}, {"id": 99, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sahar.oss-us-east-1.aliyuncs.com"}, {"id": 100, "type": "domain", "tag": "tracker", "tlp": "white", "value": "vipyoga.today"}, {"id": 101, "type": "domain", "tag": "tracker", "tlp": "white", "value": "weatherclub.club"}, {"id": 102, "type": "domain", "tag": "tracker", "tlp": "white", "value": "yoga4u.xyz"}, {"id": 103, "type": "domain", "tag": "tracker", "tlp": "white", "value": "yqchpwxvbg.execute-api.us-east-1.amazonaws.com"}, {"id": 104, "type": "domain", "tag": "tracker", "tlp": "white", "value": "pn8sm7rjuc.execute-api.us-east-1.amazonaws.com"}, {"id": 105, "type": "domain", "tag": "tracker", "tlp": "white", "value": "nwzhmwux-api.findgravy.com"}, {"id": 106, "type": "domain", "tag": "tracker", "tlp": "white", "value": "zmq5ytc1-api.findgravy.com"}, {"id": 107, "type": "domain", "tag": "tracker", "tlp": "white", "value": "mtm1nwmx-api.findgravy.com"}, {"id": 108, "type": "domain", "tag": "tracker", "tlp": "white", "value": "gravyanalytics.com"}, {"id": 109, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ws.findgravy.com"}, {"id": 110, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.foozor.com"}, {"id": 111, "type": "domain", "tag": "tracker", "tlp": "white", "value": "testapi.foozor.com"}, {"id": 112, "type": "domain", "tag": "tracker", "tlp": "white", "value": "img01.findgravy.com"}, {"id": 113, "type": "domain", "tag": "tracker", "tlp": "white", "value": "img02.findgravy.com"}, {"id": 114, "type": "domain", "tag": "tracker", "tlp": "white", "value": "img03.findgravy.com"}, {"id": 115, "type": "domain", "tag": "tracker", "tlp": "white", "value": "img04.findgravy.com"}, {"id": 116, "type": "domain", "tag": "tracker", "tlp": "white", "value": "pushapi.localytics.com"}, {"id": 117, "type": "domain", "tag": "tracker", "tlp": "white", "value": "rinimae.oss-ap-southeast-5.aliyuncs.com"}, {"id": 118, "type": "domain", "tag": "tracker", "tlp": "white", "value": "profile.localytics.com"}, {"id": 119, "type": "domain", "tag": "tracker", "tlp": "white", "value": "analytics.localytics.com"}, {"id": 120, "type": "domain", "tag": "tracker", "tlp": "white", "value": "in.cuebiq.com"}, {"id": 121, "type": "domain", "tag": "tracker", "tlp": "white", "value": "ingestion-api.kiwi.sand.cuebiq.ai"}, {"id": 122, "type": "domain", "tag": "tracker", "tlp": "white", "value": "dev.nodle.io"}, {"id": 123, "type": "domain", "tag": "tracker", "tlp": "white", "value": "us-central1-production-242307.cloudfunctions.net"}, {"id": 124, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.findgravy.com"}, {"id": 125, "type": "domain", "tag": "tracker", "tlp": "white", "value": "update.crashlytics.com"}, {"id": 126, "type": "domain", "tag": "tracker", "tlp": "white", "value": "pixelprose.fr"}, {"id": 127, "type": "domain", "tag": "tracker", "tlp": "white", "value": "onelink.me"}, {"id": 128, "type": "domain", "tag": "tracker", "tlp": "white", "value": "reports.crashlytics.com"}, {"id": 129, "type": "domain", "tag": "tracker", "tlp": "white", "value": "app.aflink.com"}, {"id": 130, "type": "domain", "tag": "tracker", "tlp": "white", "value": "onelnk.com"}, {"id": 131, "type": "domain", "tag": "tracker", "tlp": "white", "value": "firebase-settings.crashlytics.com"}, {"id": 132, "type": "domain", "tag": "tracker", "tlp": "white", "value": "t.appsflyer.com"}, {"id": 133, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.mixpanel.com"}, {"id": 134, "type": "domain", "tag": "tracker", "tlp": "white", "value": "decide.mixpanel.com"}, {"id": 135, "type": "domain", "tag": "tracker", "tlp": "white", "value": "logx.optimizely.com"}, {"id": 136, "type": "domain", "tag": "tracker", "tlp": "white", "value": "cdn.optimizely.com"}, {"id": 137, "type": "domain", "tag": "tracker", "tlp": "white", "value": "outline.truecaller.com"}, {"id": 138, "type": "domain", "tag": "tracker", "tlp": "white", "value": "c.webengage.com"}, {"id": 139, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.branch.io"}, {"id": 140, "type": "domain", "tag": "tracker", "tlp": "white", "value": "p.webengage.com"}, {"id": 141, "type": "domain", "tag": "tracker", "tlp": "white", "value": "bnc.lt"}, {"id": 142, "type": "domain", "tag": "tracker", "tlp": "white", "value": "cdn.branch.io"}, {"id": 143, "type": "domain", "tag": "tracker", "tlp": "white", "value": "js.intercomcdn.com"}, {"id": 144, "type": "domain", "tag": "tracker", "tlp": "white", "value": "mobile-sdk-api.intercom.io"}, {"id": 145, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.wzrkt.com"}, {"id": 146, "type": "domain", "tag": "tracker", "tlp": "white", "value": "in.wzrkt.com"}, {"id": 147, "type": "domain", "tag": "tracker", "tlp": "white", "value": "wzrkt.com"}, {"id": 148, "type": "domain", "tag": "tracker", "tlp": "white", "value": "eu1.alb.wzrkt.com"}, {"id": 149, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api4.truecaller.com"}, {"id": 150, "type": "domain", "tag": "tracker", "tlp": "white", "value": "eu1.wzrkt.com"}, {"id": 151, "type": "domain", "tag": "tracker", "tlp": "white", "value": "eu1-spiky.wzrkt.com"}, {"id": 152, "type": "domain", "tag": "tracker", "tlp": "white", "value": "cb.wzrkt.com"}, {"id": 153, "type": "domain", "tag": "tracker", "tlp": "white", "value": "in.cb.wzrkt.com"}, {"id": 154, "type": "domain", "tag": "tracker", "tlp": "white", "value": "in1-spiky.wzrkt.com"}, {"id": 155, "type": "domain", "tag": "tracker", "tlp": "white", "value": "in1.alb.wzrkt.com"}, {"id": 156, "type": "domain", "tag": "tracker", "tlp": "white", "value": "in1.wzrkt.com"}, {"id": 157, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sg1.cb.wzrkt.com"}, {"id": 158, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sg1.wzrkt.com"}, {"id": 159, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-spiky.wzrkt.com"}, {"id": 160, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-1.wzrkt.com"}, {"id": 161, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-10.wzrkt.com"}, {"id": 162, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-3.wzrkt.com"}, {"id": 163, "type": "domain", "tag": "tracker", "tlp": "white", "value": "htapi.getapiv8.com"}, {"id": 164, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sg1-spiky.wzrkt.com"}, {"id": 165, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-6.wzrkt.com"}, {"id": 166, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-7.wzrkt.com"}, {"id": 167, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-8.wzrkt.com"}, {"id": 168, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1.wzrkt.com"}, {"id": 169, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-2.wzrkt.com"}, {"id": 170, "type": "domain", "tag": "tracker", "tlp": "white", "value": "us1.cb.wzrkt.com"}, {"id": 171, "type": "domain", "tag": "tracker", "tlp": "white", "value": "us1.wzrkt.com"}, {"id": 172, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-9.wzrkt.com"}, {"id": 173, "type": "domain", "tag": "tracker", "tlp": "white", "value": "sk1-staging-5.wzrkt.com"}, {"id": 174, "type": "domain", "tag": "tracker", "tlp": "white", "value": "marketing.tllms.com"}, {"id": 175, "type": "domain", "tag": "tracker", "tlp": "white", "value": "pfsense02-01.is-61194.teragence.net"}, {"id": 176, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.tllms.com"}, {"id": 177, "type": "domain", "tag": "tracker", "tlp": "white", "value": "control.teragence.net"}, {"id": 178, "type": "domain", "tag": "tracker", "tlp": "white", "value": "reporting-util.tutelatechnologies.com"}, {"id": 179, "type": "domain", "tag": "tracker", "tlp": "white", "value": "hail-reporting.tutelatechnologies.com"}, {"id": 180, "type": "domain", "tag": "tracker", "tlp": "white", "value": "thepopulator.tutelatechnologies.com"}, {"id": 181, "type": "domain", "tag": "tracker", "tlp": "white", "value": "upload-tutelawest.s3-accelerate.amazonaws.com"}, {"id": 182, "type": "domain", "tag": "tracker", "tlp": "white", "value": "charles.huqindustries.co.uk"}, {"id": 183, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.huqindustries.co.uk"}, {"id": 184, "type": "domain", "tag": "tracker", "tlp": "white", "value": "report.huqindustries.co.uk"}, {"id": 185, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.pythonexample.com"}, {"id": 186, "type": "domain", "tag": "tracker", "tlp": "white", "value": "us1-spiky.wzrkt.com"}, {"id": 187, "type": "ns", "tag": "suspect", "tlp": "white", "value": "njalla.no"}, {"id": 188, "type": "ns", "tag": "suspect", "tlp": "white", "value": "bitdomain.biz"}, {"id": 189, "type": "ns", "tag": "suspect", "tlp": "white", "value": "topdns.com"}, {"id": 190, "type": "ns", "tag": "suspect", "tlp": "white", "value": "ititch.com"}, {"id": 191, "type": "ns", "tag": "suspect", "tlp": "white", "value": "realhosters.com"}, {"id": 192, "type": "ns", "tag": "suspect", "tlp": "white", "value": "orangewebsite.com"}, {"id": 193, "type": "ns", "tag": "suspect", "tlp": "white", "value": "porkbun.com"}, {"id": 194, "type": "ns", "tag": "suspect", "tlp": "white", "value": "qhoster.net"}, {"id": 195, "type": "ns", "tag": "suspect", "tlp": "white", "value": "easydns.com"}, {"id": 196, "type": "ns", "tag": "suspect", "tlp": "white", "value": "site-dns.com"}, {"id": 197, "type": "ns", "tag": "suspect", "tlp": "white", "value": "serverastra.com"}, {"id": 198, "type": "ns", "tag": "suspect", "tlp": "white", "value": "cloudns.net"}, {"id": 199, "type": "ns", "tag": "suspect", "tlp": "white", "value": "dnspod.com"}, {"id": 200, "type": "ns", "tag": "suspect", "tlp": "white", "value": "smoothdns.com"}, {"id": 201, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.100.84.0/23"}, {"id": 202, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "141.136.44.0/23"}, {"id": 203, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.63.0/24"}, {"id": 204, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.165.169.0/24"}, {"id": 205, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.126.0/23"}, {"id": 206, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.86.149.0/24"}, {"id": 207, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.86.150.0/24"}, {"id": 208, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.30.0/24"}, {"id": 209, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.235.207.0/24"}, {"id": 210, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.84.100.0/22"}, {"id": 211, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "23.163.0.0/24"}, {"id": 212, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.86.148.0/24"}, {"id": 213, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "23.227.192.0/20"}, {"id": 214, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "209.205.192.0/19"}, {"id": 215, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "23.247.50.0/24"}, {"id": 216, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.158.196.0/24"}, {"id": 217, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.48.100.0/24"}, {"id": 218, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.19.136.0/21"}, {"id": 219, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.28.200.0/21"}, {"id": 220, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.39.217.0/24"}, {"id": 221, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "76.74.176.0/22"}, {"id": 222, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "66.36.240.0/20"}, {"id": 223, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "78.142.19.0/24"}, {"id": 224, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "79.124.49.0/24"}, {"id": 225, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "80.255.0.0/20"}, {"id": 226, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "80.83.112.0/21"}, {"id": 227, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "81.17.16.0/20"}, {"id": 228, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.118.242.0/24"}, {"id": 229, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.80.148.0/24"}, {"id": 230, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.219.236.0/22"}, {"id": 231, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "95.215.47.0/24"}, {"id": 232, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.203.117.0/24"}, {"id": 233, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.144.156.0/22"}, {"id": 234, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.203.118.0/24"}, {"id": 235, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.205.210.0/24"}, {"id": 236, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.227.110.0/24"}, {"id": 237, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.203.119.0/24"}, {"id": 238, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.213.160.0/20"}, {"id": 239, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.37.212.0/24"}, {"id": 240, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.113.34.0/24"}, {"id": 241, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.219.0/24"}, {"id": 242, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "64.251.26.0/24"}, {"id": 243, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.149.252.0/23"}, {"id": 244, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "79.141.174.0/23"}, {"id": 245, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.217.171.0/24"}, {"id": 246, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.92.128.0/24"}, {"id": 247, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "92.119.115.0/24"}, {"id": 248, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.156.35.0/24"}, {"id": 249, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.156.189.0/24"}, {"id": 250, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.216.0/21"}, {"id": 251, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.216.0/24"}, {"id": 252, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.218.0/24"}, {"id": 253, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.217.0/24"}, {"id": 254, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.220.0/24"}, {"id": 255, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.221.0/24"}, {"id": 256, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.222.0/24"}, {"id": 257, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.130.0/24"}, {"id": 258, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.132.0/24"}, {"id": 259, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.223.0/24"}, {"id": 260, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.134.0/24"}, {"id": 261, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.135.0/24"}, {"id": 262, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.248.147.0/24"}, {"id": 263, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.248.148.0/24"}, {"id": 264, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.248.149.0/24"}, {"id": 265, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flushdata.1topspy.com"}, {"id": 266, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "webservicesdb.mobiispy.com"}, {"id": 267, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "1topspy.com"}, {"id": 268, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobiispy.com"}, {"id": 269, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "hellospy.com"}, {"id": 270, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "maxxspy.com"}, {"id": 271, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "guestspy.com"}, {"id": 272, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.ispyoo.com"}, {"id": 273, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spytomobile.com"}, {"id": 274, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "wisemo.com"}, {"id": 275, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "catwatchful-e03b8.firebaseio.com"}, {"id": 276, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "copy9.com"}, {"id": 277, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.copy9.com"}, {"id": 278, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a621.copy9.com"}, {"id": 279, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a723.thetruthspy.com"}, {"id": 280, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a811.ispyoo.com"}, {"id": 281, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trkps.com"}, {"id": 282, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flexispy.com"}, {"id": 283, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "evt17.com"}, {"id": 284, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ddiutilities.com"}, {"id": 285, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "hoverwatch.com"}, {"id": 286, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "imonitorsoft.com"}, {"id": 287, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "account.refog.com"}, {"id": 288, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "imonitorsoft.cn"}, {"id": 289, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "letmespy.com"}, {"id": 290, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "remotecommands.com"}, {"id": 291, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspyonline.com"}, {"id": 292, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mxspy.com"}, {"id": 293, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonespying.com"}, {"id": 294, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "apollospy.com"}, {"id": 295, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyhide.com"}, {"id": 296, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spy-phone-app.com"}, {"id": 297, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spappmonitoring.com"}, {"id": 298, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "fonetracker.com"}, {"id": 299, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "app-api.spyzie.com"}, {"id": 300, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "152.89.161.0/24"}, {"id": 301, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.spyzie.com"}, {"id": 302, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "app.api.spyzie.wondershare.cn"}, {"id": 303, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyzie.com"}, {"id": 304, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.144.82.0/23"}, {"id": 305, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "data.api.spyzie.wondershare.cn"}, {"id": 306, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.224.0/24"}, {"id": 307, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.216.35.0/24"}, {"id": 308, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "neospy.pro"}, {"id": 309, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "neospy.tech"}, {"id": 310, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "neospy.net"}, {"id": 311, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "androidmonitor.com"}, {"id": 312, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "alltracker.org"}, {"id": 313, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.243.215.0/24"}, {"id": 314, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "staging-all-tracker.appspot.com"}, {"id": 315, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "6-dot-all-tracker.appspot.com"}, {"id": 316, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.181.102.0/23"}, {"id": 317, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "4-dot-all-tracker.appspot.com"}, {"id": 318, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobistealth.com"}, {"id": 319, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "talklog.tools"}, {"id": 320, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "xnspy.com"}, {"id": 321, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "xiz4me.com"}, {"id": 322, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cerberusapp.com"}, {"id": 323, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mtoolapp.net"}, {"id": 324, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobiletool.ru"}, {"id": 325, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "sp.kuuvv.com"}, {"id": 326, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cocospy.com"}, {"id": 327, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "minspy.com"}, {"id": 328, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "neatspy.com"}, {"id": 329, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyic.com"}, {"id": 330, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyier.com"}, {"id": 331, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.37.255.0/24"}, {"id": 332, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "aovivo.foxspy.com.br"}, {"id": 333, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "pc.foxspy.com.br"}, {"id": 334, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "servidor.in"}, {"id": 335, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "celular007.s3.amazonaws.com"}, {"id": 336, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ikeymonitor.fr"}, {"id": 337, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "195.12.50.0/24"}, {"id": 338, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.149.0/24"}, {"id": 339, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.105.9.0/24"}, {"id": 340, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.238.128.0/18"}, {"id": 341, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.177.75.0/24"}, {"id": 342, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsapi.info"}, {"id": 343, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "logger.mobi"}, {"id": 344, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "freeandroidspy.com"}, {"id": 345, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobispy.net"}, {"id": 346, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "netspy.net"}, {"id": 347, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "reptilicus.net"}, {"id": 348, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "snoopza.com"}, {"id": 349, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "apispyhuman.com"}, {"id": 350, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spy-datacenter.com"}, {"id": 351, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ispyoo.com"}, {"id": 352, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spy2mobile.com"}, {"id": 353, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "tchsrvce.com"}, {"id": 354, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "thetruthspy.com"}, {"id": 355, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackmyphones.com"}, {"id": 356, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "appspy.net"}, {"id": 357, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "xnore.com"}, {"id": 358, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "catwatchful.com"}, {"id": 359, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "onlinefundb.com"}, {"id": 360, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mtracker.fortess.net"}, {"id": 361, "type": "ns", "tag": "suspect", "tlp": "white", "value": "hostinger.com"}, {"id": 362, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "001www.com"}, {"id": 363, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "2mydns.net"}, {"id": 364, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "16-b.it"}, {"id": 365, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "2waky.com"}, {"id": 366, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "3-a.net"}, {"id": 367, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "3d-game.com"}, {"id": 368, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "32-b.it"}, {"id": 369, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "3utilities.com"}, {"id": 370, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "25u.com"}, {"id": 371, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "4irc.com"}, {"id": 372, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "4pu.com"}, {"id": 373, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "4dq.com"}, {"id": 374, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "64-b.it"}, {"id": 375, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "almostmy.com"}, {"id": 376, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "acmetoy.com"}, {"id": 377, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "americanunfinished.com"}, {"id": 378, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "as19557.net"}, {"id": 379, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "at-band-camp.net"}, {"id": 380, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ath.cx"}, {"id": 381, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "authorizeddns.net"}, {"id": 382, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "authorizeddns.org"}, {"id": 383, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "authorizeddns.us"}, {"id": 384, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "b0ne.com"}, {"id": 385, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "b0tnet.com"}, {"id": 386, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "barrel-of-knowledge.info"}, {"id": 387, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "barrell-of-knowledge.info"}, {"id": 388, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "bbsindex.com"}, {"id": 389, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "better-than.tv"}, {"id": 390, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "bigmoney.biz"}, {"id": 391, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogdns.com"}, {"id": 392, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogdns.net"}, {"id": 393, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogdns.org"}, {"id": 394, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "bounceme.net"}, {"id": 395, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "brasilia.me"}, {"id": 396, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogsite.org"}, {"id": 397, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "boldlygoingnowhere.org"}, {"id": 398, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogsyte.com"}, {"id": 399, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "broke-it.net"}, {"id": 400, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "cechire.com"}, {"id": 401, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "buyshouses.net"}, {"id": 402, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "cable-modem.org"}, {"id": 403, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.biz"}, {"id": 404, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.co"}, {"id": 405, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.org"}, {"id": 406, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.net"}, {"id": 407, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.us"}, {"id": 408, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "chatnook.com"}, {"id": 409, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "cleansite.biz"}, {"id": 410, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "cleansite.info"}, {"id": 411, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ciscofreak.com"}, {"id": 412, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "collegefan.org"}, {"id": 413, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "cleansite.us"}, {"id": 414, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "couchpotatofries.org"}, {"id": 415, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "crafting.xyz"}, {"id": 416, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "damnserver.com"}, {"id": 417, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "darktech.org"}, {"id": 418, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.info"}, {"id": 419, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.me"}, {"id": 420, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.mobi"}, {"id": 421, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.ms"}, {"id": 422, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.net"}, {"id": 423, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.us"}, {"id": 424, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddnsking.com"}, {"id": 425, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddnslive.com"}, {"id": 426, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "deaftone.com"}, {"id": 427, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dhcp.biz"}, {"id": 428, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ditchyourip.com"}, {"id": 429, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns-dns.com"}, {"id": 430, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns-report.com"}, {"id": 431, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns-stuff.com"}, {"id": 432, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns04.com"}, {"id": 433, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns05.com"}, {"id": 434, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns1.us"}, {"id": 435, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns2.us"}, {"id": 436, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsalias.com"}, {"id": 437, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsalias.net"}, {"id": 438, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsalias.org"}, {"id": 439, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdojo.net"}, {"id": 440, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdojo.com"}, {"id": 441, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdojo.org"}, {"id": 442, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsfailover.net"}, {"id": 443, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdyn.net"}, {"id": 444, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsfor.me"}, {"id": 445, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsiskinky.com"}, {"id": 446, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsking.ch"}, {"id": 447, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnset.com"}, {"id": 448, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsrd.com"}, {"id": 449, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsup.net"}, {"id": 450, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "does-it.net"}, {"id": 451, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "doesntexist.com"}, {"id": 452, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "doesntexist.org"}, {"id": 453, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dontexist.com"}, {"id": 454, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dontexist.net"}, {"id": 455, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "doomdns.com"}, {"id": 456, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dontexist.org"}, {"id": 457, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "doomdns.org"}, {"id": 458, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dsmtp.biz"}, {"id": 459, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dsmtp.com"}, {"id": 460, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.info"}, {"id": 461, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dtdns.net"}, {"id": 462, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.net"}, {"id": 463, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.us"}, {"id": 464, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dumb1.com"}, {"id": 465, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.biz"}, {"id": 466, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dvrcam.info"}, {"id": 467, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dvrdns.org"}, {"id": 468, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyn-o-saur.com"}, {"id": 469, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynalias.com"}, {"id": 470, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynalias.org"}, {"id": 471, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynalias.net"}, {"id": 472, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynamicdns.biz"}, {"id": 473, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynathome.net"}, {"id": 474, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynamic-dns.net"}, {"id": 475, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-at-home.com"}, {"id": 476, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-at-work.com"}, {"id": 477, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-free.com"}, {"id": 478, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-blog.com"}, {"id": 479, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-home.com"}, {"id": 480, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-ip.com"}, {"id": 481, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-pics.com"}, {"id": 482, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-office.com"}, {"id": 483, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-web.com"}, {"id": 484, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-mail.com"}, {"id": 485, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-wiki.com"}, {"id": 486, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-work.com"}, {"id": 487, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.biz"}, {"id": 488, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-remote.com"}, {"id": 489, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.info"}, {"id": 490, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.org"}, {"id": 491, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-server.com"}, {"id": 492, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.tv"}, {"id": 493, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynns.com"}, {"id": 494, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynserv.org"}, {"id": 495, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynssl.com"}, {"id": 496, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "eating-organic.net"}, {"id": 497, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynip.org"}, {"id": 498, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "edns.biz"}, {"id": 499, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "effers.com"}, {"id": 500, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.ws"}, {"id": 501, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "endofinternet.net"}, {"id": 502, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "endofinternet.org"}, {"id": 503, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "endoftheinternet.org"}, {"id": 504, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-a-la-maison.com"}, {"id": 505, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "esmtp.biz"}, {"id": 506, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-a-la-masion.com"}, {"id": 507, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-mon-blogueur.com"}, {"id": 508, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-le-patron.com"}, {"id": 509, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "etowns.org"}, {"id": 510, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "etowns.net"}, {"id": 511, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ezua.com"}, {"id": 512, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "fantasyleague.cc"}, {"id": 513, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-better.biz"}, {"id": 514, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "fartit.com"}, {"id": 515, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-more.biz"}, {"id": 516, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-some.biz"}, {"id": 517, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-the.biz"}, {"id": 518, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-our.info"}, {"id": 519, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "faqserv.com"}, {"id": 520, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "forgot.her.name"}, {"id": 521, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "flnet.org"}, {"id": 522, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "forumz.info"}, {"id": 523, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "forgot.his.name"}, {"id": 524, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "freeddns.uk"}, {"id": 525, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "freeddns.us"}, {"id": 526, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "freeddns.com"}, {"id": 527, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "freewww.info"}, {"id": 528, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "freewww.biz"}, {"id": 529, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "freetcp.com"}, {"id": 530, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ak.com"}, {"id": 531, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-al.com"}, {"id": 532, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ar.com"}, {"id": 533, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ca.com"}, {"id": 534, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-az.net"}, {"id": 535, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-co.net"}, {"id": 536, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-dc.com"}, {"id": 537, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-de.com"}, {"id": 538, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ct.com"}, {"id": 539, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-fl.com"}, {"id": 540, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ga.com"}, {"id": 541, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-hi.com"}, {"id": 542, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ia.com"}, {"id": 543, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-il.com"}, {"id": 544, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-id.com"}, {"id": 545, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-in.com"}, {"id": 546, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ks.com"}, {"id": 547, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ky.com"}, {"id": 548, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-la.net"}, {"id": 549, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mn.com"}, {"id": 550, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ma.com"}, {"id": 551, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-md.com"}, {"id": 552, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mo.com"}, {"id": 553, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mt.com"}, {"id": 554, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-me.org"}, {"id": 555, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ms.com"}, {"id": 556, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nc.com"}, {"id": 557, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mi.com"}, {"id": 558, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nd.com"}, {"id": 559, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ne.com"}, {"id": 560, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nh.com"}, {"id": 561, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nj.com"}, {"id": 562, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nm.com"}, {"id": 563, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nv.com"}, {"id": 564, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ny.net"}, {"id": 565, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ok.com"}, {"id": 566, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-pa.com"}, {"id": 567, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-pr.com"}, {"id": 568, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-or.com"}, {"id": 569, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ri.com"}, {"id": 570, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-oh.com"}, {"id": 571, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-sd.com"}, {"id": 572, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-sc.com"}, {"id": 573, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-tn.com"}, {"id": 574, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ut.com"}, {"id": 575, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-va.com"}, {"id": 576, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-tx.com"}, {"id": 577, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-vt.com"}, {"id": 578, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wa.com"}, {"id": 579, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wi.com"}, {"id": 580, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wv.com"}, {"id": 581, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wy.com"}, {"id": 582, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftpserver.biz"}, {"id": 583, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftp1.biz"}, {"id": 584, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "fuettertdasnetz.de"}, {"id": 585, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "game-host.org"}, {"id": 586, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftpaccess.cc"}, {"id": 587, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "game-server.cc"}, {"id": 588, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "geekgalaxy.com"}, {"id": 589, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "getmyip.com"}, {"id": 590, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gets-it.net"}, {"id": 591, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gettrials.com"}, {"id": 592, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "go.dyndns.org"}, {"id": 593, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotdns.ch"}, {"id": 594, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "got-game.org"}, {"id": 595, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotgeeks.com"}, {"id": 596, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gr8name.biz"}, {"id": 597, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotdns.com"}, {"id": 598, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gr8domain.biz"}, {"id": 599, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotdns.org"}, {"id": 600, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "groks-the.info"}, {"id": 601, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "groks-this.info"}, {"id": 602, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ham-radio-op.net"}, {"id": 603, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "golffan.us"}, {"id": 604, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "health-carereform.com"}, {"id": 605, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "here-for-more.info"}, {"id": 606, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hobby-site.org"}, {"id": 607, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hobby-site.com"}, {"id": 608, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homedns.org"}, {"id": 609, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeftp.net"}, {"id": 610, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeftp.org"}, {"id": 611, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeip.net"}, {"id": 612, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinux.com"}, {"id": 613, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinux.net"}, {"id": 614, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "home.dyndns.org"}, {"id": 615, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinux.org"}, {"id": 616, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homesecuritymac.com"}, {"id": 617, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homesecuritypc.com"}, {"id": 618, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeunix.net"}, {"id": 619, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeunix.org"}, {"id": 620, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homingbeacon.net"}, {"id": 621, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeunix.com"}, {"id": 622, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hopto.me"}, {"id": 623, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hopto.org"}, {"id": 624, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "https443.net"}, {"id": 625, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "https443.org"}, {"id": 626, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "iamallama.com"}, {"id": 627, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ikwb.com"}, {"id": 628, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "in-the-band.net"}, {"id": 629, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "instanthq.com"}, {"id": 630, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "iownyour.org"}, {"id": 631, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ilovecollege.info"}, {"id": 632, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "iownyour.biz"}, {"id": 633, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-anarchist.com"}, {"id": 634, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-blogger.com"}, {"id": 635, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-bookkeeper.com"}, {"id": 636, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-bruinsfan.org"}, {"id": 637, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-candidate.org"}, {"id": 638, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-bulls-fan.com"}, {"id": 639, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-celticsfan.org"}, {"id": 640, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-caterer.com"}, {"id": 641, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-chef.net"}, {"id": 642, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-chef.org"}, {"id": 643, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-conservative.com"}, {"id": 644, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-cpa.com"}, {"id": 645, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-chef.com"}, {"id": 646, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-cubicle-slave.com"}, {"id": 647, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-designer.com"}, {"id": 648, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-democrat.com"}, {"id": 649, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-doctor.com"}, {"id": 650, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-geek.com"}, {"id": 651, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-financialadvisor.com"}, {"id": 652, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-green.com"}, {"id": 653, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-geek.org"}, {"id": 654, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-guru.com"}, {"id": 655, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-hard-worker.com"}, {"id": 656, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-geek.net"}, {"id": 657, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-hunter.com"}, {"id": 658, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-knight.org"}, {"id": 659, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-landscaper.com"}, {"id": 660, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-liberal.com"}, {"id": 661, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-linux-user.org"}, {"id": 662, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-lawyer.com"}, {"id": 663, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-llama.com"}, {"id": 664, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-libertarian.com"}, {"id": 665, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-musician.com"}, {"id": 666, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-nascarfan.com"}, {"id": 667, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-nurse.com"}, {"id": 668, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-patsfan.org"}, {"id": 669, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-personaltrainer.com"}, {"id": 670, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-player.com"}, {"id": 671, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-photographer.com"}, {"id": 672, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-socialist.com"}, {"id": 673, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-soxfan.org"}, {"id": 674, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-republican.com"}, {"id": 675, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-student.com"}, {"id": 676, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-teacher.com"}, {"id": 677, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-techie.com"}, {"id": 678, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-therapist.com"}, {"id": 679, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-rockstar.com"}, {"id": 680, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-accountant.com"}, {"id": 681, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-actor.com"}, {"id": 682, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-actress.com"}, {"id": 683, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-anarchist.com"}, {"id": 684, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-artist.com"}, {"id": 685, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-engineer.com"}, {"id": 686, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-entertainer.com"}, {"id": 687, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-by.us"}, {"id": 688, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-certified.com"}, {"id": 689, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-found.org"}, {"id": 690, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-gone.com"}, {"id": 691, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-anime.com"}, {"id": 692, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-cartoons.com"}, {"id": 693, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-cars.com"}, {"id": 694, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-games.com"}, {"id": 695, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-leet.com"}, {"id": 696, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-lost.org"}, {"id": 697, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-not-certified.com"}, {"id": 698, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-saved.org"}, {"id": 699, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-slick.com"}, {"id": 700, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-uberleet.com"}, {"id": 701, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-bad.org"}, {"id": 702, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-good.org"}, {"id": 703, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-sweet.org"}, {"id": 704, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-evil.org"}, {"id": 705, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-geek.com"}, {"id": 706, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-geek.net"}, {"id": 707, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-hockeynut.com"}, {"id": 708, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-geek.org"}, {"id": 709, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-nice.org"}, {"id": 710, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-with-theband.com"}, {"id": 711, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "isasecret.com"}, {"id": 712, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "isteingeek.de"}, {"id": 713, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "issmarterthanyou.com"}, {"id": 714, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "istmein.de"}, {"id": 715, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "itemdb.com"}, {"id": 716, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "itsaol.com"}, {"id": 717, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "jetos.com"}, {"id": 718, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "jungleheart.com"}, {"id": 719, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "justdied.com"}, {"id": 720, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "jkub.com"}, {"id": 721, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "kicks-ass.net"}, {"id": 722, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "kicks-ass.org"}, {"id": 723, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "knowsitall.info"}, {"id": 724, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "land-4-sale.us"}, {"id": 725, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "lebtimnetz.de"}, {"id": 726, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "leitungsen.de"}, {"id": 727, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.64.104.0/22"}, {"id": 728, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflinkup.org"}, {"id": 729, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "likes-pie.com"}, {"id": 730, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "likescandy.com"}, {"id": 731, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "213.252.244.0/22"}, {"id": 732, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflinkup.com"}, {"id": 733, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflink.com"}, {"id": 734, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "loginto.me"}, {"id": 735, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "longmusic.com"}, {"id": 736, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mefound.com"}, {"id": 737, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "merseine.com"}, {"id": 738, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "merseine.org"}, {"id": 739, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflinkup.net"}, {"id": 740, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "misconfused.org"}, {"id": 741, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "misecure.com"}, {"id": 742, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mine.nu"}, {"id": 743, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mlbfan.org"}, {"id": 744, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mmafan.biz"}, {"id": 745, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "moneyhome.biz"}, {"id": 746, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrbasic.com"}, {"id": 747, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrbonus.com"}, {"id": 748, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrslove.com"}, {"id": 749, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrface.com"}, {"id": 750, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mydad.info"}, {"id": 751, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "my03.com"}, {"id": 752, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myactivedirectory.com"}, {"id": 753, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myddns.com"}, {"id": 754, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mydissent.net"}, {"id": 755, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myftp.biz"}, {"id": 756, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myeffect.net"}, {"id": 757, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myftp.info"}, {"id": 758, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myftp.org"}, {"id": 759, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myiphost.com"}, {"id": 760, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mylftv.com"}, {"id": 761, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mymediapc.net"}, {"id": 762, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mymom.info"}, {"id": 763, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynetav.com"}, {"id": 764, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynetav.net"}, {"id": 765, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynetav.org"}, {"id": 766, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynumber.org"}, {"id": 767, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypets.ws"}, {"id": 768, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myphotos.cc"}, {"id": 769, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypi.co"}, {"id": 770, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypop3.net"}, {"id": 771, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypop3.org"}, {"id": 772, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypicture.info"}, {"id": 773, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypsx.net"}, {"id": 774, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecondarydns.com"}, {"id": 775, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecuritycamera.net"}, {"id": 776, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecuritycamera.org"}, {"id": 777, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myvnc.com"}, {"id": 778, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "myz.info"}, {"id": 779, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mywww.biz"}, {"id": 780, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "neat-url.com"}, {"id": 781, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecuritycamera.com"}, {"id": 782, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "nflfan.org"}, {"id": 783, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "nhlfan.net"}, {"id": 784, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ninth.biz"}, {"id": 785, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.biz"}, {"id": 786, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.ca"}, {"id": 787, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.co.uk"}, {"id": 788, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "net-freaks.com"}, {"id": 789, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.info"}, {"id": 790, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.net"}, {"id": 791, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.org"}, {"id": 792, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "noip.me"}, {"id": 793, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "n4t.co"}, {"id": 794, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "noip.us"}, {"id": 795, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "now-dns.org"}, {"id": 796, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "nowddns.com"}, {"id": 797, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns01.biz"}, {"id": 798, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns01.info"}, {"id": 799, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns01.us"}, {"id": 800, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "now-dns.net"}, {"id": 801, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns02.info"}, {"id": 802, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns02.biz"}, {"id": 803, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "now-dns.top"}, {"id": 804, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns02.us"}, {"id": 805, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns1.name"}, {"id": 806, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns2.name"}, {"id": 807, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns3.name"}, {"id": 808, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ocry.com"}, {"id": 809, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onedumb.com"}, {"id": 810, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.biz"}, {"id": 811, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ntdll.top"}, {"id": 812, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.info"}, {"id": 813, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "office-on-the.net"}, {"id": 814, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.net"}, {"id": 815, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.org"}, {"id": 816, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.us"}, {"id": 817, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "on-the-web.tv"}, {"id": 818, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "onthewifi.com"}, {"id": 819, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "otzo.com"}, {"id": 820, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "organiccrap.com"}, {"id": 821, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ownip.net"}, {"id": 822, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ourhobby.com"}, {"id": 823, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "pgafan.net"}, {"id": 824, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "podzone.org"}, {"id": 825, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "point2this.com"}, {"id": 826, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "pointto.us"}, {"id": 827, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "podzone.net"}, {"id": 828, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "port25.biz"}, {"id": 829, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "privatizehealthinsurance.net"}, {"id": 830, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "proxydns.com"}, {"id": 831, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "quicksytes.com"}, {"id": 832, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "qhigh.com"}, {"id": 833, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "readmyblog.org"}, {"id": 834, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "rebatesrule.net"}, {"id": 835, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "remotecam.nu"}, {"id": 836, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "redirectme.net"}, {"id": 837, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "read-books.org"}, {"id": 838, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "saves-the-whales.com"}, {"id": 839, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "scieron.com"}, {"id": 840, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "scrapper-site.net"}, {"id": 841, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "qpoe.com"}, {"id": 842, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "scrapping.cc"}, {"id": 843, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "securitytactics.com"}, {"id": 844, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.info"}, {"id": 845, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.biz"}, {"id": 846, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.com"}, {"id": 847, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".site"}, {"id": 848, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.org"}, {"id": 849, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sells-for-less.com"}, {"id": 850, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.net"}, {"id": 851, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sells-it.net"}, {"id": 852, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sellsyourhome.org"}, {"id": 853, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sells-for-u.com"}, {"id": 854, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sendsmtp.com"}, {"id": 855, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebbs.com"}, {"id": 856, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebbs.net"}, {"id": 857, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebbs.org"}, {"id": 858, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveblog.net"}, {"id": 859, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebeer.com"}, {"id": 860, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servecounterstrike.com"}, {"id": 861, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveftp.net"}, {"id": 862, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveexchange.com"}, {"id": 863, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveftp.com"}, {"id": 864, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveftp.org"}, {"id": 865, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servegame.com"}, {"id": 866, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servegame.org"}, {"id": 867, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servehalflife.com"}, {"id": 868, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servehttp.com"}, {"id": 869, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servehumour.com"}, {"id": 870, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveirc.com"}, {"id": 871, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servemp3.com"}, {"id": 872, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servepics.com"}, {"id": 873, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servesarcasm.com"}, {"id": 874, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveuser.com"}, {"id": 875, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servep2p.com"}, {"id": 876, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveusers.com"}, {"id": 877, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sexidude.com"}, {"id": 878, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveminecraft.net"}, {"id": 879, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sexxxy.biz"}, {"id": 880, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "shacknet.biz"}, {"id": 881, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "servequake.com"}, {"id": 882, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "shaqnet.nu"}, {"id": 883, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "soundcast.me"}, {"id": 884, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sixth.biz"}, {"id": 885, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "slyip.com"}, {"id": 886, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "slyip.net"}, {"id": 887, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "space-to-rent.com"}, {"id": 888, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "shacknet.us"}, {"id": 889, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "squirly.info"}, {"id": 890, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ssmailer.com"}, {"id": 891, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ssl443.org"}, {"id": 892, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "simple-url.com"}, {"id": 893, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "stuff-4-sale.org"}, {"id": 894, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "stufftoread.com"}, {"id": 895, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sytes.net"}, {"id": 896, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "tftpd.net"}, {"id": 897, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "suroot.com"}, {"id": 898, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "tcp4.me"}, {"id": 899, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "thruhere.net"}, {"id": 900, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "stuff-4-sale.us"}, {"id": 901, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "toh.info"}, {"id": 902, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "toshibanetcam.com"}, {"id": 903, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "toythieves.com"}, {"id": 904, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "trickip.net"}, {"id": 905, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "traeumtgerade.de"}, {"id": 906, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "teaches-yoga.com"}, {"id": 907, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "trickip.org"}, {"id": 908, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ufcfan.org"}, {"id": 909, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.biz"}, {"id": 910, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "unusualperson.com"}, {"id": 911, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.info"}, {"id": 912, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "vpndns.net"}, {"id": 913, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.net"}, {"id": 914, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.me"}, {"id": 915, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.org"}, {"id": 916, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "wikaba.com"}, {"id": 917, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "wifizone.org"}, {"id": 918, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "vizvaz.com"}, {"id": 919, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "workisboring.com"}, {"id": 920, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "worse-than.tv"}, {"id": 921, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "writesthisblog.com"}, {"id": 922, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "x24hr.com"}, {"id": 923, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "www1.biz"}, {"id": 924, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "x443.pw"}, {"id": 925, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "wwwhost.us"}, {"id": 926, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "xxxy.info"}, {"id": 927, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "xxuz.com"}, {"id": 928, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "xxxy.biz"}, {"id": 929, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ygto.com"}, {"id": 930, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "yourtrap.com"}, {"id": 931, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "youdontcare.com"}, {"id": 932, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "zyns.com"}, {"id": 933, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "zapto.org"}, {"id": 934, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "wwwhost.biz"}, {"id": 935, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "zzux.com"}, {"id": 936, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mycloud.wisemo.com"}, {"id": 937, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mycloud1.wisemo.com"}, {"id": 938, "type": "ns", "tag": "suspect", "tlp": "white", "value": "openprovider.nl"}, {"id": 939, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.132.194.0/24"}, {"id": 940, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.160.0/20"}, {"id": 941, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.164.0/22"}, {"id": 942, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.160.0/22"}, {"id": 943, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.168.0/22"}, {"id": 944, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.172.0/22"}, {"id": 945, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.240.0/22"}, {"id": 946, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.160.0/21"}, {"id": 947, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.168.0/24"}, {"id": 948, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.171.0/24"}, {"id": 949, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.170.0/24"}, {"id": 950, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.174.0/24"}, {"id": 951, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.175.0/24"}, {"id": 952, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.216.163.0/24"}, {"id": 953, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.25.48.0/22"}, {"id": 954, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.177.150.0/24"}, {"id": 955, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.32.223.0/24"}, {"id": 956, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mooo.com"}, {"id": 957, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "uk.to"}, {"id": 958, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ignorelist.com"}, {"id": 959, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "strangled.net"}, {"id": 960, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "us.to"}, {"id": 961, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "chickenkiller.com"}, {"id": 962, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "crabdance.com"}, {"id": 963, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "jumpingcrab.com"}, {"id": 964, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "privatedns.org"}, {"id": 965, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "twilightparadox.com"}, {"id": 966, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "my.to"}, {"id": 967, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "yao.cl"}, {"id": 968, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftp.sh"}, {"id": 969, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "now.im"}, {"id": 970, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mine.bz"}, {"id": 971, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "undo.it"}, {"id": 972, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "bot.nu"}, {"id": 973, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "minecraftnoob.com"}, {"id": 974, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "info.gf"}, {"id": 975, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "allowed.org"}, {"id": 976, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynet.com"}, {"id": 977, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ro.lt"}, {"id": 978, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "3dxtras.com"}, {"id": 979, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "home.kg"}, {"id": 980, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "69.mu"}, {"id": 981, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "minecraftr.us"}, {"id": 982, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "fr.to"}, {"id": 983, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "root.sx"}, {"id": 984, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "farted.net"}, {"id": 985, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "spacetechnology.net"}, {"id": 986, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "nav.co.id"}, {"id": 987, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "port0.org"}, {"id": 988, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "1337.cx"}, {"id": 989, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "gw.lt"}, {"id": 990, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "serverpit.com"}, {"id": 991, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mooo.info"}, {"id": 992, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "happyforever.com"}, {"id": 993, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "nx.tc"}, {"id": 994, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "epicgamer.org"}, {"id": 995, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "evils.in"}, {"id": 996, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "h4ck.me"}, {"id": 997, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "soon.it"}, {"id": 998, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "verymad.net"}, {"id": 999, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "csproject.org"}, {"id": 1000, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "404.mn"}, {"id": 1001, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "punked.us"}, {"id": 1002, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "tru.io"}, {"id": 1003, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "zanity.net"}, {"id": 1004, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mm.my"}, {"id": 1005, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "120v.ac"}, {"id": 1006, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "madhacker.biz"}, {"id": 1007, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "d-n-s.name"}, {"id": 1008, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "r-o-o-t.net"}, {"id": 1009, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "star.is"}, {"id": 1010, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinuxserver.org"}, {"id": 1011, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "24-7.ro"}, {"id": 1012, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "ohbah.com"}, {"id": 1013, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "fedea.com.ar"}, {"id": 1014, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "h-o-s-t.name"}, {"id": 1015, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "kir22.ru"}, {"id": 1016, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "psybnc.org"}, {"id": 1017, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "abuser.eu"}, {"id": 1018, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "routemehome.com"}, {"id": 1019, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "bad.mn"}, {"id": 1020, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hackquest.com"}, {"id": 1021, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "iiiii.info"}, {"id": 1022, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "raspberryip.com"}, {"id": 1023, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "fairuse.org"}, {"id": 1024, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "cloudwatch.net"}, {"id": 1025, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "photo-frame.com"}, {"id": 1026, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hs.vc"}, {"id": 1027, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hpc.tw"}, {"id": 1028, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "nard.ca"}, {"id": 1029, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "agropeople.ru"}, {"id": 1030, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "uk.ms"}, {"id": 1031, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "crackedsidewalks.com"}, {"id": 1032, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "pii.at"}, {"id": 1033, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mindhackers.org"}, {"id": 1034, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "stfu-kthx.net"}, {"id": 1035, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "host2go.net"}, {"id": 1036, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "awiki.org"}, {"id": 1037, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "surfnet.ca"}, {"id": 1038, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "mcsoft.org"}, {"id": 1039, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "xpresit.net"}, {"id": 1040, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "silksky.com"}, {"id": 1041, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "hbmc.net"}, {"id": 1042, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "netlord.de"}, {"id": 1043, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "688.org"}, {"id": 1044, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeplex.org"}, {"id": 1045, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "good.one.pl"}, {"id": 1046, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "linkpc.net"}, {"id": 1047, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "sellclassics.com"}, {"id": 1048, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "publicvm.com"}, {"id": 1049, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".club"}, {"id": 1050, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".xyz"}, {"id": 1051, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".win"}, {"id": 1052, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".online"}, {"id": 1053, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".news"}, {"id": 1054, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".top"}, {"id": 1055, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".tech"}, {"id": 1056, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".buzz"}, {"id": 1057, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".ms"}, {"id": 1058, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".best"}, {"id": 1059, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".faith"}, {"id": 1060, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".download"}, {"id": 1061, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".cloud"}, {"id": 1062, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".today"}, {"id": 1063, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".tk"}, {"id": 1064, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".ml"}, {"id": 1065, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".ga"}, {"id": 1066, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".gq"}, {"id": 1067, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".cf"}, {"id": 1068, "type": "snort", "tag": "spyware", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (content:\"|00 00 00 20 61 6e 64 72 6f 69 64 70 61 79 6c 6f 61 64 2e 73 74 61 67 65  2e 4d 65 74 65 72 70 72 65 74 65|\"; offset:0; msg:\"Android Meterpreter stager\"; sid:10000100; rev:001;)"}, {"id": 1069, "type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:\"Cryptominer (Stratum job) - Rule from the CERT-EU\"; flow:established,to_client; content:\"|22|job|22 3A 7B 22|blob|22 3A 22|\"; classtype:trojan-activity; sid:6666667; rev:1;)"}, {"id": 1070, "type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:\"Cryptominer (Stratum job result) - Rule from the CERT-EU\"; flow:established,to_server; content:\"|22|method|22 3A| |22|submit|22 2C| |22|params|22 3A| |7B 22|id|22|\"; classtype:trojan-activity; sid:6666668; rev:1;)"}, {"id": 1071, "type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:\"Cryptominer (Stratum login) - Rule from the CERT-EU\"; flow:established,to_server; content:\"|22|method|22 3A| |22|login|22 2C| |22|params|22 3A| |7B 22|login|22|\"; classtype:trojan-activity; sid:6666666; rev:1;)"}, {"id": 1072, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "146.185.253.0/24"}, {"id": 1073, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.161.208.0/22"}, {"id": 1074, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.162.235.0/24"}, {"id": 1075, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.202.0.0/24"}, {"id": 1076, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.119.113.0/24"}, {"id": 1077, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.20.186.0/23"}, {"id": 1078, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.8.176.0/22"}, {"id": 1079, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.111.152.0/22"}, {"id": 1080, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.20.184.0/23"}, {"id": 1081, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.76.0/22"}, {"id": 1082, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.253.219.0/24"}, {"id": 1083, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.36.188.0/22"}, {"id": 1084, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.38.55.0/24"}, {"id": 1085, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "212.80.216.0/22"}, {"id": 1086, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.1.200.0/21"}, {"id": 1087, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.1.216.0/21"}, {"id": 1088, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.252.14.0/23"}, {"id": 1089, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.67.231.0/24"}, {"id": 1090, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.67.228.0/24"}, {"id": 1091, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.249.32.0/19"}, {"id": 1092, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.249.59.0/24"}, {"id": 1093, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.178.64.0/21"}, {"id": 1094, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.255.64.0/19"}, {"id": 1095, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.255.94.0/23"}, {"id": 1096, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.45.64.0/21"}, {"id": 1097, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.45.72.0/22"}, {"id": 1098, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.45.76.0/22"}, {"id": 1099, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.61.48.0/22"}, {"id": 1100, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.56.133.0/24"}, {"id": 1101, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.61.56.0/22"}, {"id": 1102, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.239.35.0/24"}, {"id": 1103, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.239.42.0/24"}, {"id": 1104, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "87.236.212.0/24"}, {"id": 1105, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.218.16.0/24"}, {"id": 1106, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.218.17.0/24"}, {"id": 1107, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.221.69.0/24"}, {"id": 1108, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.158.200.0/21"}, {"id": 1109, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.158.200.0/24"}, {"id": 1110, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.158.208.0/20"}, {"id": 1111, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "104.250.174.0/24"}, {"id": 1112, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "104.250.190.0/24"}, {"id": 1113, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "158.255.208.0/24"}, {"id": 1114, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "152.89.160.0/24"}, {"id": 1115, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "158.255.215.0/24"}, {"id": 1116, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.111.147.0/24"}, {"id": 1117, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.70.236.0/24"}, {"id": 1118, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.111.250.0/24"}, {"id": 1119, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.94.53.0/24"}, {"id": 1120, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.94.87.0/24"}, {"id": 1121, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.104.185.0/24"}, {"id": 1122, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.120.144.0/22"}, {"id": 1123, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.128.24.0/24"}, {"id": 1124, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.128.27.0/24"}, {"id": 1125, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.173.0/24"}, {"id": 1126, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.172.0/24"}, {"id": 1127, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.174.0/24"}, {"id": 1128, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.175.0/24"}, {"id": 1129, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.158.248.0/24"}, {"id": 1130, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.158.250.0/24"}, {"id": 1131, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.160.24.0/24"}, {"id": 1132, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.172.112.0/24"}, {"id": 1133, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.189.112.0/24"}, {"id": 1134, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.189.114.0/24"}, {"id": 1135, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.195.200.0/24"}, {"id": 1136, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.200.116.0/24"}, {"id": 1137, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.225.0/24"}, {"id": 1138, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.227.0/24"}, {"id": 1139, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.210.217.0/24"}, {"id": 1140, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.210.219.0/24"}, {"id": 1141, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.212.170.0/24"}, {"id": 1142, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.230.124.0/24"}, {"id": 1143, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.201.0/24"}, {"id": 1144, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.202.0/24"}, {"id": 1145, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.203.0/24"}, {"id": 1146, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.242.4.0/24"}, {"id": 1147, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.242.6.0/24"}, {"id": 1148, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "spdns.org"}, {"id": 1149, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.212.0/24"}, {"id": 1150, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.106.120.0/24"}, {"id": 1151, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.213.0/24"}, {"id": 1152, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.245.84.0/24"}, {"id": 1153, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.72.0/24"}, {"id": 1154, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.106.122.0/24"}, {"id": 1155, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.74.0/24"}, {"id": 1156, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.75.0/24"}, {"id": 1157, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.73.0/24"}, {"id": 1158, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.24.0/24"}, {"id": 1159, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.25.0/24"}, {"id": 1160, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.245.85.0/24"}, {"id": 1161, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.90.60.0/24"}, {"id": 1162, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.26.0/24"}, {"id": 1163, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.27.0/24"}, {"id": 1164, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.188.0/22"}, {"id": 1165, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.189.0/24"}, {"id": 1166, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.192.0/24"}, {"id": 1167, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.72.103.0/24"}, {"id": 1168, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.96.0/24"}, {"id": 1169, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.193.0/24"}, {"id": 1170, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.97.0/24"}, {"id": 1171, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.72.115.0/24"}, {"id": 1172, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "192.121.82.0/24"}, {"id": 1173, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "192.145.125.0/24"}, {"id": 1174, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.148.16.0/24"}, {"id": 1175, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.148.18.0/24"}, {"id": 1176, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.183.217.0/24"}, {"id": 1177, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.98.0/24"}, {"id": 1178, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.56.0/24"}, {"id": 1179, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.99.0/24"}, {"id": 1180, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.239.84.0/24"}, {"id": 1181, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.239.85.0/24"}, {"id": 1182, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.27.14.0/24"}, {"id": 1183, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.9.114.0/24"}, {"id": 1184, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.9.115.0/24"}, {"id": 1185, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.124.34.0/24"}, {"id": 1186, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.57.0/24"}, {"id": 1187, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.156.231.0/24"}, {"id": 1188, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.156.228.0/24"}, {"id": 1189, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.187.249.0/24"}, {"id": 1190, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.58.0/24"}, {"id": 1191, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.59.0/24"}, {"id": 1192, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.149.0/24"}, {"id": 1193, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.150.0/24"}, {"id": 1194, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.187.251.0/24"}, {"id": 1195, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.59.249.0/24"}, {"id": 1196, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.151.0/24"}, {"id": 1197, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.192.0/24"}, {"id": 1198, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.68.26.0/24"}, {"id": 1199, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.193.0/24"}, {"id": 1200, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.200.0/24"}, {"id": 1201, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.202.0/24"}, {"id": 1202, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.68.27.0/24"}, {"id": 1203, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.68.44.0/24"}, {"id": 1204, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.99.105.0/24"}, {"id": 1205, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "195.206.106.0/24"}, {"id": 1206, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "195.206.105.0/24"}, {"id": 1207, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.196.0/24"}, {"id": 1208, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.203.0/24"}, {"id": 1209, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.199.0/24"}, {"id": 1210, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.116.36.0/24"}, {"id": 1211, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.200.0/24"}, {"id": 1212, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.189.0/24"}, {"id": 1213, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.188.0/24"}, {"id": 1214, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.205.0/24"}, {"id": 1215, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.151.96.0/20"}, {"id": 1216, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.190.0/24"}, {"id": 1217, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.64.113.0/24"}, {"id": 1218, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.64.114.0/24"}, {"id": 1219, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.10.71.0/24"}, {"id": 1220, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.191.0/24"}, {"id": 1221, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "212.8.251.0/24"}, {"id": 1222, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "openprovider.be"}, {"id": 1223, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.64.127.0/24"}, {"id": 1224, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.129.0/24"}, {"id": 1225, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.140.0/24"}, {"id": 1226, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.145.0/24"}, {"id": 1227, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.146.0/24"}, {"id": 1228, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.153.0/24"}, {"id": 1229, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.193.0/24"}, {"id": 1230, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.198.0/24"}, {"id": 1231, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.203.0/24"}, {"id": 1232, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.205.0/24"}, {"id": 1233, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.217.0/24"}, {"id": 1234, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.221.113.0/24"}, {"id": 1235, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.221.114.0/24"}, {"id": 1236, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.221.115.0/24"}, {"id": 1237, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.132.111.0/24"}, {"id": 1238, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.132.126.0/24"}, {"id": 1239, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.132.99.0/24"}, {"id": 1240, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.95.111.0/24"}, {"id": 1241, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.11.0.0/24"}, {"id": 1242, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.11.180.0/24"}, {"id": 1243, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.11.2.0/24"}, {"id": 1244, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.12.221.0/24"}, {"id": 1245, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.12.222.0/24"}, {"id": 1246, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.133.180.0/24"}, {"id": 1247, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.141.152.0/24"}, {"id": 1248, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.66.134.0/24"}, {"id": 1249, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.67.53.0/24"}, {"id": 1250, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.74.36.0/24"}, {"id": 1251, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.74.62.0/24"}, {"id": 1252, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.88.42.0/24"}, {"id": 1253, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.89.175.0/24"}, {"id": 1254, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.9.250.0/24"}, {"id": 1255, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.93.216.0/24"}, {"id": 1256, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.90.142.0/24"}, {"id": 1257, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.102.153.0/24"}, {"id": 1258, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.243.147.0/24"}, {"id": 1259, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.243.149.0/24"}, {"id": 1260, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.183.100.0/24"}, {"id": 1261, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.243.223.0/24"}, {"id": 1262, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.61.60.0/23"}, {"id": 1263, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.253.205.0/24"}, {"id": 1264, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "77.81.109.0/24"}, {"id": 1265, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "77.81.98.0/24"}, {"id": 1266, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "77.81.110.0/24"}, {"id": 1267, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "79.110.52.0/24"}, {"id": 1268, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "81.90.189.0/24"}, {"id": 1269, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.16.0/24"}, {"id": 1270, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "81.92.200.0/22"}, {"id": 1271, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.17.0/24"}, {"id": 1272, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.19.0/24"}, {"id": 1273, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.23.0/24"}, {"id": 1274, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "83.97.20.0/24"}, {"id": 1275, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.247.51.0/24"}, {"id": 1276, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.20.0/24"}, {"id": 1277, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.249.65.0/24"}, {"id": 1278, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.249.66.0/23"}, {"id": 1279, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.33.246.0/24"}, {"id": 1280, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.38.225.0/24"}, {"id": 1281, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.41.26.0/24"}, {"id": 1282, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.44.9.0/24"}, {"id": 1283, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.45.4.0/24"}, {"id": 1284, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.46.100.0/22"}, {"id": 1285, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.102.64.0/21"}, {"id": 1286, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.132.136.0/24"}, {"id": 1287, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.132.138.0/24"}, {"id": 1288, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.132.139.0/24"}, {"id": 1289, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.207.174.0/24"}, {"id": 1290, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "92.118.45.0/24"}, {"id": 1291, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "92.119.178.0/24"}, {"id": 1292, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.119.178.0/24"}, {"id": 1293, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.198.40.0/24"}, {"id": 1294, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "95.174.65.0/24"}, {"id": 1295, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "95.174.66.0/24"}, {"id": 1296, "type": "snort", "tag": "suspect", "tlp": "white", "value": "alert tcp any any -> $EXTERNAL_NET any (content:\"tinycheck\"; msg:\"The name tinycheck has been seen exfiltrated\"; sid:10000102; rev:001;)"}, {"id": 1297, "type": "snort", "tag": "suspect", "tlp": "white", "value": "alert tcp any any -> $EXTERNAL_NET [20,21,990,989] (msg:\"Your device is communicating with FTP(s) ports\"; sid:10000103; rev:001;)"}, {"id": 1298, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cellphonetrackers.org"}, {"id": 1299, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "hws.icu"}, {"id": 1300, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "hwa.cab"}, {"id": 1301, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "refog.org"}, {"id": 1302, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "hww.cab"}, {"id": 1303, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "hwm.cab"}, {"id": 1304, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "refog.net"}, {"id": 1305, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "refog.com"}, {"id": 1306, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.com"}, {"id": 1307, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".icu"}, {"id": 1308, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".cab"}, {"id": 1309, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "android-police.ru"}, {"id": 1310, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "androidlost.appspot.com"}, {"id": 1311, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "androidlost.com"}, {"id": 1312, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "android-monitor.ru"}, {"id": 1313, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "antifurtodroid.com"}, {"id": 1314, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "find-my-phone-prod.herokuapp.com"}, {"id": 1315, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "c-phone.ru"}, {"id": 1316, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "e-spy.app"}, {"id": 1317, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "kidsshield.net"}, {"id": 1318, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "nemospy.com"}, {"id": 1319, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "meuspy.com"}, {"id": 1320, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ownspy.es"}, {"id": 1321, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonetracking.net"}, {"id": 1322, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonedata.me"}, {"id": 1323, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spykontrol.com"}, {"id": 1324, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "63.34.249.94"}, {"id": 1325, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "backupsoft.eu"}, {"id": 1326, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "viptelefonprogrami.com"}, {"id": 1327, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "systemservice.org.uk"}, {"id": 1328, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "selfspy.com"}, {"id": 1329, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mysystemlogin.com"}, {"id": 1330, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "sharpspy.com"}, {"id": 1331, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "kispy.net"}, {"id": 1332, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "freespyapp.com"}, {"id": 1333, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flushdbd.maxxspy.com"}, {"id": 1334, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flushdata2.hellospy.com"}, {"id": 1335, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "account.logger.mobi"}, {"id": 1336, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "97.logger.mobi"}, {"id": 1337, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "beta-api.logger.mobi"}, {"id": 1338, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "beta.logger.mobi"}, {"id": 1339, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ps97mailer.logger.mobi"}, {"id": 1340, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "server.freeandroidspy.com"}, {"id": 1341, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a.ispyoo.com"}, {"id": 1342, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a810.ispyoo.com"}, {"id": 1343, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a89.ispyoo.com"}, {"id": 1344, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol.ispyoo.com"}, {"id": 1345, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.mobispy.net"}, {"id": 1346, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.shadow-logs.com"}, {"id": 1347, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "shadow-spy.com"}, {"id": 1348, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.snoopza.com"}, {"id": 1349, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my2.snoopza.com"}, {"id": 1350, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "api.snoopza.com"}, {"id": 1351, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spy-datacenter.com"}, {"id": 1352, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "sap4mobile.com"}, {"id": 1353, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a.thetruthspy.com"}, {"id": 1354, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a610.thetruthspy.com"}, {"id": 1355, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a6.thetruthspy.com"}, {"id": 1356, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a611.thetruthspy.com"}, {"id": 1357, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a810.thetruthspy.com"}, {"id": 1358, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a930.thetruthspy.com"}, {"id": 1359, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail.icloudappe.com"}, {"id": 1360, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "icloudappe.com"}, {"id": 1361, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a741.thetruthspy.com"}, {"id": 1362, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a748.thetruthspy.com"}, {"id": 1363, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media.thetruthspy.com"}, {"id": 1364, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a744.thetruthspy.com"}, {"id": 1365, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a930.thetruthspy.com"}, {"id": 1366, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a733.thetruthspy.com"}, {"id": 1367, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a734.thetruthspy.com"}, {"id": 1368, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a920.thetruthspy.com"}, {"id": 1369, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a737.icloudappe.com"}, {"id": 1370, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a736.thetruthspy.com"}, {"id": 1371, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a737.thetruthspy.com"}, {"id": 1372, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a745.thetruthspy.com"}, {"id": 1373, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a825.thetruthspy.com"}, {"id": 1374, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a746.thetruthspy.com"}, {"id": 1375, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a742.icloudappe.com"}, {"id": 1376, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a738.thetruthspy.com"}, {"id": 1377, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a735.thetruthspy.com"}, {"id": 1378, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol.thetruthspy.com"}, {"id": 1379, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a742.thetruthspy.com"}, {"id": 1380, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a749.thetruthspy.com"}, {"id": 1381, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a732.icloudappe.com"}, {"id": 1382, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a732.thetruthspy.com"}, {"id": 1383, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a722.thetruthspy.com"}, {"id": 1384, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a724.thetruthspy.com"}, {"id": 1385, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a925.thetruthspy.com"}, {"id": 1386, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a743.thetruthspy.com"}, {"id": 1387, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a727.thetruthspy.com"}, {"id": 1388, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a727.icloudappe.com"}, {"id": 1389, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a735.icloudappe.com"}, {"id": 1390, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a.icloudappe.com"}, {"id": 1391, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a743.icloudappe.com"}, {"id": 1392, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a740.thetruthspy.com"}, {"id": 1393, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a745.icloudappe.com"}, {"id": 1394, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a731.thetruthspy.com"}, {"id": 1395, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a739.thetruthspy.com"}, {"id": 1396, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a748.icloudappe.com"}, {"id": 1397, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a748.thetruthspy.com"}, {"id": 1398, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a722.icloudappe.com"}, {"id": 1399, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a915.thetruthspy.com"}, {"id": 1400, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a730.thetruthspy.com"}, {"id": 1401, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a720.thetruthspy.com"}, {"id": 1402, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a910.thetruthspy.com"}, {"id": 1403, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a746.icloudappe.com"}, {"id": 1404, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a746.thetruthspy.com"}, {"id": 1405, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a830.thetruthspy.com"}, {"id": 1406, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a741.icloudappe.com"}, {"id": 1407, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a726.icloudappe.com"}, {"id": 1408, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a728.thetruthspy.com"}, {"id": 1409, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a810.thetruthspy.com"}, {"id": 1410, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a721.thetruthspy.com"}, {"id": 1411, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a726.thetruthspy.com"}, {"id": 1412, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a725.thetruthspy.com"}, {"id": 1413, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a729.thetruthspy.com"}, {"id": 1414, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a747.thetruthspy.com"}, {"id": 1415, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a733.icloudappe.com"}, {"id": 1416, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a744.icloudappe.com"}, {"id": 1417, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a835.thetruthspy.com"}, {"id": 1418, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a720.icloudappe.com"}, {"id": 1419, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a743.thetruthspy.com"}, {"id": 1420, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a895.thetruthspy.com"}, {"id": 1421, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a740.thetruthspy.com"}, {"id": 1422, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a747.icloudappe.com"}, {"id": 1423, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a734.icloudappe.com"}, {"id": 1424, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a820.thetruthspy.com"}, {"id": 1425, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a740.icloudappe.com"}, {"id": 1426, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a738.icloudappe.com"}, {"id": 1427, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a749.thetruthspy.com"}, {"id": 1428, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "media-sync-a747.thetruthspy.com"}, {"id": 1429, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a729.icloudappe.com"}, {"id": 1430, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a724.icloudappe.com"}, {"id": 1431, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "setupmail-a725.icloudappe.com"}, {"id": 1432, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-monitor.thetruthspy.com"}, {"id": 1433, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.thespyapp.com"}, {"id": 1434, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.trackmyphones.com"}, {"id": 1435, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.appspy.com"}, {"id": 1436, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a58.guestspy.com"}, {"id": 1437, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a59.guestspy.com"}, {"id": 1438, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a60.guestspy.com"}, {"id": 1439, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.hoverwatch.com"}, {"id": 1440, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.imonitorsoft.com"}, {"id": 1441, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.imonitorsoft.cn"}, {"id": 1442, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.mspyonline.com"}, {"id": 1443, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "my.mspyonline.com"}, {"id": 1444, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a811.mxspy.com"}, {"id": 1445, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.mxspy.com"}, {"id": 1446, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol.mxspy.com"}, {"id": 1447, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a810.mxspy.com"}, {"id": 1448, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a89.mxspy.com"}, {"id": 1449, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.phonespying.com"}, {"id": 1450, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "data.reptilicus.net"}, {"id": 1451, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "proxy.reptilicus.net"}, {"id": 1452, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "rp.apollospy.com"}, {"id": 1453, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "client.spyhide.com"}, {"id": 1454, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spy-phone-app.com"}, {"id": 1455, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spappmonitoring.com"}, {"id": 1456, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a712.fonetracker.com"}, {"id": 1457, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a100.fonetracker.com"}, {"id": 1458, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a780.fonetracker.com"}, {"id": 1459, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "sync-a712.fonetracker.com"}, {"id": 1460, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.netspy.net"}, {"id": 1461, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "data-api.spyzie.com"}, {"id": 1462, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spyzie.com"}, {"id": 1463, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "server.androidmonitor.com"}, {"id": 1464, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.androidmonitor.com"}, {"id": 1465, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.mobistealth.com"}, {"id": 1466, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "sync.xiz4me.com"}, {"id": 1467, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.cerberusapp.com"}, {"id": 1468, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.mtoolapp.net"}, {"id": 1469, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.minspy.com"}, {"id": 1470, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.neatspy.com"}, {"id": 1471, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.spyic.com"}, {"id": 1472, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.spyier.com"}, {"id": 1473, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "n.servidor.in"}, {"id": 1474, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "s1.spylive360.com"}, {"id": 1475, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "s2.spylive360.com"}, {"id": 1476, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "s3.spylive360.com"}, {"id": 1477, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spylive360.com"}, {"id": 1478, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "senseye.spymasterpro.com"}, {"id": 1479, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spymasterpro.com"}, {"id": 1480, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spymasterpro.com"}, {"id": 1481, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ikm.awsapi.io"}, {"id": 1482, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "emcpanel.com"}, {"id": 1483, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "users.easemon.com"}, {"id": 1484, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ikeymonitor.com"}, {"id": 1485, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyhuman.com"}, {"id": 1486, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "172.67.81.216"}, {"id": 1487, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.25.28.15"}, {"id": 1488, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.25.29.15"}, {"id": 1489, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "46.40.125.240"}, {"id": 1490, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "199.38.181.70"}, {"id": 1491, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "69.64.81.166"}, {"id": 1492, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "176.9.42.16"}, {"id": 1493, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "217.182.250.165"}, {"id": 1494, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "46.105.57.148"}, {"id": 1495, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "139.59.125.208"}, {"id": 1496, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "78.46.34.14"}, {"id": 1497, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "69.64.91.29"}, {"id": 1498, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "69.64.81.49"}, {"id": 1499, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "69.64.74.239"}, {"id": 1500, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "69.64.81.98"}, {"id": 1501, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "162.144.212.52"}, {"id": 1502, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "167.114.114.207"}, {"id": 1503, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "45.114.224.147"}, {"id": 1504, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "162.144.75.253"}, {"id": 1505, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "91.121.70.22"}, {"id": 1506, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "172.67.82.183"}, {"id": 1507, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.25.170.109"}, {"id": 1508, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.25.169.109"}, {"id": 1509, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.26.15.56"}, {"id": 1510, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "172.67.73.2"}, {"id": 1511, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.26.14.56"}, {"id": 1512, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "172.67.194.85"}, {"id": 1513, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.18.54.129"}, {"id": 1514, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "104.18.55.129"}, {"id": 1515, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "213.239.228.196"}, {"id": 1516, "type": "domain", "tag": "cybercrime", "tlp": "white", "value": "hawkshaw-cae48.firebaseio.com"}, {"id": 1517, "type": "domain", "tag": "cybercrime", "tlp": "white", "value": "bald-panel.firebaseio.com"}, {"id": 1518, "type": "domain", "tag": "cybercrime", "tlp": "white", "value": "spitfirepanel.firebaseio.com"}, {"id": 1519, "type": "domain", "tag": "cybercrime", "tlp": "white", "value": "phoenix-panel.firebaseio.com"}, {"id": 1520, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "account.cellphone-remote-tracker.com"}, {"id": 1521, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cellphone-remote-tracker.com"}, {"id": 1522, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spyhide.com"}, {"id": 1523, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyhide.ir"}, {"id": 1524, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.spyhide.ir"}, {"id": 1525, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "client.spyhide.ir"}, {"id": 1526, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "virsis.net"}, {"id": 1527, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.spyzie.io"}, {"id": 1528, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.safespy.com"}, {"id": 1529, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "i.spyine.com"}, {"id": 1530, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "us.umobix.com"}, {"id": 1531, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "lb.theonespy.com"}, {"id": 1532, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "im.theonespy.com"}, {"id": 1533, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "node-api.theonespy.com"}, {"id": 1534, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "node1.theonespy.com"}, {"id": 1535, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "node2.theonespy.com"}, {"id": 1536, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "node3.theonespy.com"}, {"id": 1537, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "node4.theonespy.com"}, {"id": 1538, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "node5.theonespy.com"}, {"id": 1539, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "78.47.16.3"}, {"id": 1540, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "85.13.218.229"}, {"id": 1541, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "85.13.206.195"}, {"id": 1542, "type": "domain", "tag": "apt", "tlp": "white", "value": "googleservicesforar.com"}, {"id": 1543, "type": "domain", "tag": "apt", "tlp": "white", "value": "googleassisstants.com"}, {"id": 1544, "type": "domain", "tag": "apt", "tlp": "white", "value": "androidsystemswebview.com"}, {"id": 1545, "type": "domain", "tag": "apt", "tlp": "white", "value": "firmwaresystemupdate.com"}, {"id": 1546, "type": "snort", "tag": "suspect", "tlp": "white", "value": "alert udp [192.168.100.0/24,!192.168.100.1] 5353 -> any 5353 (content:\"|74 69 6e 79 63 68 65 63 6b 05 6c 6f 63 61 6c 00|\"; msg:\"MDNS request to resolve tinycheck.local\"; sid:10000104; rev:001;)"}, {"id": 1547, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "pipe.thd.cc"}, {"id": 1548, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "thd.cc"}, {"id": 1549, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "push.mobilefonex.com"}, {"id": 1550, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ecom.flexispy.com"}, {"id": 1551, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flushdata.hellospy.com"}, {"id": 1552, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flushdata3.hellospy.com"}, {"id": 1553, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "flushdata5.hellospy.com"}, {"id": 1554, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a.copy9.com"}, {"id": 1555, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a610.copy9.com"}, {"id": 1556, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a611.copy9.com"}, {"id": 1557, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a612.copy9.com"}, {"id": 1558, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a614.copy9.com"}, {"id": 1559, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a615.copy9.com"}, {"id": 1560, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a616.copy9.com"}, {"id": 1561, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a617.copy9.com"}, {"id": 1562, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a618.copy9.com"}, {"id": 1563, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a620.copy9.com"}, {"id": 1564, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a69.copy9.com"}, {"id": 1565, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a696.copy9.com"}, {"id": 1566, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a710.copy9.com"}, {"id": 1567, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a780.copy9.com"}, {"id": 1568, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-viewer-a.copy9.com"}, {"id": 1569, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol.copy9.com"}, {"id": 1570, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "client.mobilefonex.com"}, {"id": 1571, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "test-client.mobilefonex.com"}, {"id": 1572, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mflx.biz"}, {"id": 1573, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "dmw.bz"}, {"id": 1574, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "djp.bz"}, {"id": 1575, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "dmw.cc"}, {"id": 1576, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a.guestspy.com"}, {"id": 1577, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a5.guestspy.com"}, {"id": 1578, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a65.guestspy.com"}, {"id": 1579, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a70.guestspy.com"}, {"id": 1580, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol.guestspy.com"}, {"id": 1581, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "rec.hw.cab"}, {"id": 1582, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "a.thd.cc"}, {"id": 1583, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "protocol-a.mxspy.com"}, {"id": 1584, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "dwn.vys.me"}, {"id": 1585, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "www.vys.me"}, {"id": 1586, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "l.servidor.in"}, {"id": 1587, "type": "freedns", "tag": "suspect", "tlp": "white", "value": "000webhostapp.com"}, {"id": 1588, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "80.209.224.0/20"}, {"id": 1589, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.123.8.0/22"}, {"id": 1590, "type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.147.0/24"}, {"id": 1591, "type": "ns", "tag": "suspect", "tlp": "white", "value": "monovm.com"}, {"id": 1592, "type": "ns", "tag": "suspect", "tlp": "white", "value": "njalla.fo"}, {"id": 1593, "type": "ns", "tag": "suspect", "tlp": "white", "value": "openprovider.eu"}, {"id": 1594, "type": "ns", "tag": "suspect", "tlp": "white", "value": "njalla.in"}, {"id": 1595, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobitrackapps.com"}, {"id": 1596, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-data.com"}, {"id": 1597, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonecontrolapp-e2c64.firebaseio.com"}, {"id": 1598, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "androidlost.firebaseio.com"}, {"id": 1599, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "callsmstracker.com"}, {"id": 1600, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "smsandcalltracker.firebaseio.com"}, {"id": 1601, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackingsmartphone.com"}, {"id": 1602, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.fr"}, {"id": 1603, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonetrack.com"}, {"id": 1604, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "message-tracker-98822.firebaseio.com"}, {"id": 1605, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "studio11-7e288.firebaseio.com"}, {"id": 1606, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "72.22.72.83"}, {"id": 1607, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cell-tracker-updated.firebaseio.com"}, {"id": 1608, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.de"}, {"id": 1609, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mclnsac07ggd6eh9f5uqgjg58jg92imj.apps.googleusercontent.com"}, {"id": 1610, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "rp.liquidblue.com.ua"}, {"id": 1611, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "rp.labrador.ua"}, {"id": 1612, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "rp.dedrone.com.ua"}, {"id": 1613, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.name"}, {"id": 1614, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.co"}, {"id": 1615, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.eu"}, {"id": 1616, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.es"}, {"id": 1617, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.be"}, {"id": 1618, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.mobi"}, {"id": 1619, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.me"}, {"id": 1620, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.it"}, {"id": 1621, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.org"}, {"id": 1622, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.ir"}, {"id": 1623, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.info"}, {"id": 1624, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.net"}, {"id": 1625, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-free.biz"}, {"id": 1626, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-app.com"}, {"id": 1627, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker-family.com"}, {"id": 1628, "type": "domain", "tag": "spyware", "tlp": "white", "value": "api.mainrepo.org"}, {"id": 1629, "type": "domain", "tag": "spyware", "tlp": "white", "value": "mainrepo.org"}, {"id": 1630, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.co.il"}, {"id": 1631, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspylite.com"}, {"id": 1632, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.nl"}, {"id": 1633, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.co.uk"}, {"id": 1634, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.net"}, {"id": 1635, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.com.ar"}, {"id": 1636, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.in"}, {"id": 1637, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.it"}, {"id": 1638, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.jp"}, {"id": 1639, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.com.br"}, {"id": 1640, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.com.cn"}, {"id": 1641, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.fr"}, {"id": 1642, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.support"}, {"id": 1643, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "tracking.mliteapp.com"}, {"id": 1644, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mliteapp.com"}, {"id": 1645, "type": "tld", "tag": "suspect", "tlp": "white", "value": ".app"}, {"id": 1646, "type": "domain", "tag": "suspect", "tlp": "white", "value": "mobilespy.net"}, {"id": 1647, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspyreviewsapp.com"}, {"id": 1648, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "b55y.net"}, {"id": 1649, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "q12z.net"}, {"id": 1650, "type": "domain", "tag": "spyware", "tlp": "white", "value": "mypro-b3435.firebaseio.com"}, {"id": 1651, "type": "domain", "tag": "spyware", "tlp": "white", "value": "licences.website"}, {"id": 1652, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "panel24.org"}, {"id": 1653, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spy24.net"}, {"id": 1654, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/protocols/set_device_status.aspx\"; msg:\"Stalkerware meta framework HTTP request (Copy9, iSpyoo, TheTruthSpy etc.)\"; sid:10000105; rev:001;)"}, {"id": 1655, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "50.28.38.175"}, {"id": 1656, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "119.8.47.97"}, {"id": 1657, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "159.138.146.100"}, {"id": 1658, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "51.15.183.209"}, {"id": 1659, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "51.15.20.139"}, {"id": 1660, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "69.64.64.162"}, {"id": 1661, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "66.228.35.203"}, {"id": 1662, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "180.150.156.193"}, {"id": 1663, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mtf.re"}, {"id": 1664, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "d-app-apk.com"}, {"id": 1665, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobile-tracker.mobi"}, {"id": 1666, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "copy9db.com"}, {"id": 1667, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "209.59.213.47"}, {"id": 1668, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackonline.com.ua"}, {"id": 1669, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "innovaspy.com"}, {"id": 1670, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET 22222 (content:\"device_id=\";depth:10;offset:0; msg:\"Reptilicus Stalkerware\"; sid:10000106; rev:001;)"}, {"id": 1671, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|0b 61 6e 64 72 6f 69 64 6c 6f 73 74 07 61 70 70 73 70 6f 74 03 63 6f 6d|\"; msg:\"STALKERWARE AndroidLost (androidlost.appspot.com DNS Query)\"; sid:10000107; rev:001;)"}, {"id": 1672, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp any any -> $EXTERNAL_NET 80  (content:\"SendLocationLog\";offset:850;depth:125;content:\"fsIMEINumber\";offset:900;depth:200; msg:\"STALKERWARE - EasyLogger Location Beacon\"; sid:10000108; rev:001;)"}, {"id": 1673, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "149.56.26.44"}, {"id": 1674, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "198.100.150.203"}, {"id": 1675, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "158.69.24.236"}, {"id": 1676, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyapp.top"}, {"id": 1677, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/admin/new_cmd.php\";offset:4;depth:22; msg:\"STALKERWARE - XNore New command beacon\"; sid:10000109; rev:001;)"}, {"id": 1678, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|11616c6c747261636b65722d66616d696c7903636f6d|\"; msg:\"STALKERWARE - AllTracker DNS Request\"; sid:10000110; rev:001;)"}, {"id": 1679, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|13616c6c747261636b65722d627573696e65737303636f6d|\"; msg:\"STALKERWARE - AllTracker Business DNS Request\"; sid:10000111; rev:001;)"}, {"id": 1680, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "device-ac480.firebaseio.com"}, {"id": 1681, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cellphoneservices.info"}, {"id": 1682, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "highstermobile.com"}, {"id": 1683, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|1163656c6c70686f6e65736572766963657304696e666f|\"; msg:\"STALKERWARE - Highster DNS Request\"; sid:10000112; rev:001;)"}, {"id": 1684, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> 199.223.235.173 any (msg:\"STALKERWARE - AutoForward/Highster connection\"; sid:10000118; rev:001;)"}, {"id": 1685, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|116175746F666F72776172642D38343333640A6669726562617365696F03636F6D|\"; msg:\"STALKERWARE - AutoForward DNS Request\"; sid:10000115; rev:001;)"}, {"id": 1686, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|0C6175746F2D666F727761726403636F6D|\"; msg:\"STALKERWARE - AutoForward DNS Request\"; sid:10000116; rev:001;)"}, {"id": 1687, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|0C6465766963652D61633438300A6669726562617365696F03636F6D|\"; msg:\"STALKERWARE - Highster DNS Request\"; sid:10000114; rev:001;)"}, {"id": 1688, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|056D6679363003636F6D|\"; msg:\"STALKERWARE - AutoForward/Highster DNS Request\"; sid:10000117; rev:001;)"}, {"id": 1689, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert udp $HOME_NET any -> any 53 (content:\"|05657674313703636f6d|\"; msg:\"STALKERWARE - Highster DNS Request\"; sid:10000113; rev:001;)"}, {"id": 1690, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "awsapi.io"}, {"id": 1691, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "91.196.212.202"}, {"id": 1692, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "135.181.73.134"}, {"id": 1693, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "em.awsapi.io"}, {"id": 1694, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "be580f8cfaaf14b504669f9197efc1c84741b74e"}, {"id": 1695, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "42759c625a7b8c81816f67a703f8b3df027d4dfd"}, {"id": 1696, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "3dc24f2c950f8e80265a155c72d6b90e6ea82044"}, {"id": 1697, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "7f7dbb68363fcd8b6ff899ecee3bdc3cffc96185"}, {"id": 1698, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "51b522b3140070d4193ac9105ffec6524c206e90"}, {"id": 1699, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "b2562ac85e028406de2d5abd2410d5e2aa30e125"}, {"id": 1700, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0d84ae48f14c564a8b5cbc48147affa73eb452e8"}, {"id": 1701, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "11344ad20a23025f90309e3d6538bc4234e9eaae"}, {"id": 1702, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "4cda655d563f8420d5ba9001d675a440f7b1b57b"}, {"id": 1703, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "c1b7b47fe366cd894688bbe6617530e91b2843ff"}, {"id": 1704, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "1447f3b8ef4f380f8285e9c1280f95d3b090597b"}, {"id": 1705, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d145a5d9b336152a5bf0dc854f6ba225e492a944"}, {"id": 1706, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "3eacd2a3e189c0911a620999ed08b9ec87c0a1eb"}, {"id": 1707, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "9762d8306f529cd006005c0f297cf95dfdbd74f3"}, {"id": 1708, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "390a652d9ef347d4c6145c577a1a6c4c127c88d8"}, {"id": 1709, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "50e227e35ed3a57c55b7f95706ac70bd398b2c4e"}, {"id": 1710, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "51a5e5a866fb0c2afc7aaad30cec7d2f87637c35"}, {"id": 1711, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0d67159dc13a33ad7706ee5949121147497670be"}, {"id": 1712, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "8060d62fd5e7f7b3f6292443ddcc15918bcbd8b4"}, {"id": 1713, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "207b675e7d4f3fe3949022acb8b02781a6ba5026"}, {"id": 1714, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "04661d70b69584b2add40cfd94f672474f955726"}, {"id": 1715, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "8e82bad5c54e0e561f7f272e7cd95665057925c8"}, {"id": 1716, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "7fcc4e3c25de2696f46e5d768e96b1321a0fe831"}, {"id": 1717, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "4e8381b4c7c027863aa9b5c30837caa3504956bc"}, {"id": 1718, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e5ca97d7c53af5ba56a8c6b9955d75cce60caa25"}, {"id": 1719, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "783ccc1428020c19905b207d041af95cadf070cc"}, {"id": 1720, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0bde31c0cae857a1dae260e8cd8cd151862454fb"}, {"id": 1721, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "fe345282ae50ab94198bcf8d183ae9ebef52689c"}, {"id": 1722, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "2138993aedb9c7c8be65ee0336d062f8100f04c2"}, {"id": 1723, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "5c3998bca3dcca13a83572ebbc83b48cbd7722b7"}, {"id": 1724, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "25dc97e7b5994f1c8fd463493d8f7e9e6f8e53fc"}, {"id": 1725, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "2060e2245c8ce81f9bbf84ac92085f4a5bad33c5"}, {"id": 1726, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "504adee7fb2ad1a85512c2c2868f4004cf3aed16"}, {"id": 1727, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f585d688f8e8937debbaccb25114bfd8b5751f64"}, {"id": 1728, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0e7c1b969915ec452977ab2c3ff99dc7f7bdc358"}, {"id": 1729, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "a9cf7bfadf3dabe3991107746f79760c39d1eb2c"}, {"id": 1730, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "99cdbcc6bd6059a575d7b29143c2b45406f37d2d"}, {"id": 1731, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "61c838c53ff3aa4cfb8c5dbb87d39839ef57480f"}, {"id": 1732, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "b906f90dacde6fda4b22b5ff0916970534c95d8e"}, {"id": 1733, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "2ef356d51d26b95d025271d8cf28fb7896a11be5"}, {"id": 1734, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "a68096c710cce46818fe29ca6c327ffe5df133fa"}, {"id": 1735, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "18f189842bd34aa180bb4f46066a7eff2eb00d2e"}, {"id": 1736, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "ed3595c86246b18db195399aa26af0c52c0da2ae"}, {"id": 1737, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d1b3f3792d40a6eb5299281d6e3b76acc97fdd40"}, {"id": 1738, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "16c0a04326e964c134c0ab5c361da6fffbd69d6a"}, {"id": 1739, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "6f5abd6da7f79e8fa83e15202738ea82b2329da6"}, {"id": 1740, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "b75c3caaf2519d7ddb1b34ec437599e6d8f502f5"}, {"id": 1741, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "85b1b0a632eeef1b7a8688bf5ab9a2243569573f"}, {"id": 1742, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "91f27266618c1403081d1fabbab78f531b4e35fd"}, {"id": 1743, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f3ea8befa2bfa7480536debb7698748701a33a6d"}, {"id": 1744, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "abaf0a7125535249f53a73145aae63c4ac02425a"}, {"id": 1745, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "16bc03480a72e8b5248450cda04e951c8b596f48"}, {"id": 1746, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "93a32b2eaea7306ec45a9011f4cdff2f2663a026"}, {"id": 1747, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "28c8082a197e5c9d8b62a806ae00abb794c81624"}, {"id": 1748, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "ca7bd1061967f5aad8ddcfa98bc5cf1bbe7649da"}, {"id": 1749, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d091e2ca4c2d2de52a31f2827892aae9dc427e63"}, {"id": 1750, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f12890f8c8ba8292f3ebb14f26b337011a209493"}, {"id": 1751, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f4efe584dff1982a91695ed08ff3b4b7bc493c04"}, {"id": 1752, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e8f79d0f02f7f846a1c560a02daafbca3d911af6"}, {"id": 1753, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "ad6bb8b5d13dd77c3a15eb74a024f472b870338d"}, {"id": 1754, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "94331f252feca34833a7623bb41f71abc81d4f0d"}, {"id": 1755, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "6c86183682597bb56aab33712ef509cb95d73417"}, {"id": 1756, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f312bb22e5419f63cb28f262fd7a078795ca9f3c"}, {"id": 1757, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "66a64a1834bdcf39405593ff6737324784d9eee5"}, {"id": 1758, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e8b522765d0dc7fe0aa5056aef2fbf5b1640a699"}, {"id": 1759, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "241c35c1d34c8fa7a7f44e74fddc839451306f30"}, {"id": 1760, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "fbd72a9d010605e63e924c2e1f7d866041974969"}, {"id": 1761, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "16581b691b453fa5219d925cd8e07f52912305f5"}, {"id": 1762, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "ef9c17e1e2a76a3885158a7886600ecc5b475e99"}, {"id": 1763, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0e4df980fdfe7b5e4307b311ac7f9d11e96a6e6b"}, {"id": 1764, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "090dc51fde5972c84b0cba60dd5bbfe46df79830"}, {"id": 1765, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "617cd1e17b4d9e3ab3bef54070eb244441ae814e"}, {"id": 1766, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "a8ac37d742b03f0caf33c9fd55630ca5bf14bd88"}, {"id": 1767, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0af5704338f327b15bf2b4f12740c298f8a40f7a"}, {"id": 1768, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "508ac0a6b8de57e086d4fbdfbdefb260d733196d"}, {"id": 1769, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d3d99449cd36bfe0f135639b189f248dadc7994c"}, {"id": 1770, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "7dc65b4da048ac630e199a1b82adb46926267299"}, {"id": 1771, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "aeca5d4559294bf0ebc7b184b99acdea2be7f5ee"}, {"id": 1772, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "8b168b01d464b0144eb27a38830f9f8dc771b18e"}, {"id": 1773, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "949b7be962fbf8e024846c2f17adb50f7ceeb331"}, {"id": 1774, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "45c0fce85f505f6519bb7640ee29652ed7d11fc8"}, {"id": 1775, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "a49ec4ec5245135f9174d3ff4d6bfd9109269233"}, {"id": 1776, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d87d7d175157f979c0fc2beaa2cddac9ad92b32b"}, {"id": 1777, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "dba50d986f5db3197becc9392cb2555e6db349bf"}, {"id": 1778, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "c52fc56c7b787abc5db33993dab5ee36f0fddf87"}, {"id": 1779, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "bf21d79f8f25048588c1872c118ce3332c24e37d"}, {"id": 1780, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e9f915da29093d119b1ea1aa721b26b0bd3c005b"}, {"id": 1781, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "ed897330b03be72e6cf0c86ecc8011af42002b2e"}, {"id": 1782, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "c18e528c561bdb7b182e5d8cea757d503cc476fe"}, {"id": 1783, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "4bf778705519f5d7b5bc1ac9bfd465e34c82635d"}, {"id": 1784, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "289f1ecb47b8fd82e832b254bce28e9f5f4b8454"}, {"id": 1785, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "3780a74320129d7be8217fb769a7272f882dc0f6"}, {"id": 1786, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "fe3a29d92f59bd496db65de7ae67b18b73dffa05"}, {"id": 1787, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "6b5875054554f0658bcd21125bf0f4a48c7ae0d7"}, {"id": 1788, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "4cb5de283b77ae45085199ee5e10095fe8aa1899"}, {"id": 1789, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e18e5a867174c4d100aeddaed3d40ef1b46760f4"}, {"id": 1790, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "4ad03461144f70d1f1d7dda263f1a372a397bcfb"}, {"id": 1791, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "c513bfd1b11abfb123d18621c2b215cbcc602017"}, {"id": 1792, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "332acbcbfc27544b5008174e60b931648e07089f"}, {"id": 1793, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d563a493571c5b1cae95a1ffca42a1be66e613cc"}, {"id": 1794, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "3fa81206fe934ba558f011c9f16bae6ac207e065"}, {"id": 1795, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "8d2c4f9cf120544b4573107f6c5c816ec86e72e0"}, {"id": 1796, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "dc6112a25fc8e9c7d8124e1fb2655289088faa0b"}, {"id": 1797, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "b1685aec5157857e5733d49915ad5762b2e6f97f"}, {"id": 1798, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "314612da1187763d59bd982812b69c892e2f17ff"}, {"id": 1799, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "2299e4e013dac8c901393765eae9cd71a4b0ab23"}, {"id": 1800, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "58ec14b07c4507fe59007cecd1de98dbc571d77f"}, {"id": 1801, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "21b981b0d60a226a98fbab0492fb6ec99d1ee8fe"}, {"id": 1802, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "a5a2400b811b8620263e32dd975c7de2adca5d46"}, {"id": 1803, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "30598f264941153808c4c640c0edaa40b2710177"}, {"id": 1804, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d1e1a24de4720cf4a03afc09f97c43bf3e3a7723"}, {"id": 1805, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e7f94c811aa6fedb484a915b87a0f53203447ce4"}, {"id": 1806, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "3bd2d7e68eb05a28e6a2f7f8100eaaab6d42d81f"}, {"id": 1807, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e6a9389b52150d0f21ffae84017925a2c3c325a7"}, {"id": 1808, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f06ac91a02ce460ec5af00d135bbb2ec7798e757"}, {"id": 1809, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e1e8215e4c5523eb914fa5ece271a397023adec8"}, {"id": 1810, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "5610e78a11146e3ad68903e07767a07b36dd58d5"}, {"id": 1811, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "2a4a201720f2afb3ecd5b730f5e77e17ffc75355"}, {"id": 1812, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e6a8252b683c67e3b502627a739a512655ce6881"}, {"id": 1813, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "5e2c63d6d197670024ba739e6f474bc7cebab710"}, {"id": 1814, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "c9a5c789a03f7864dd77d2051c2ce1bc1a3927e6"}, {"id": 1815, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "3df4738dd2b85d2d8dfd39a46dff00aa38119ac1"}, {"id": 1816, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "f5e50639323227a3237832be83ff56d28da51854"}, {"id": 1817, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "2616f0bac5b04b50740f0e14768f4e5cad4f40ed"}, {"id": 1818, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "55de98ac01874b54fd57c11e8981313984b24ce2"}, {"id": 1819, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "36352d0637321b1d43124b5839b069432e46dfd0"}, {"id": 1820, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "e8b25a744e76dd8948ccf6521b8ed41406502223"}, {"id": 1821, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "0aaaa890f6e0c3bf4d478ec2d0d98dc4bf67cd1f"}, {"id": 1822, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "5b608abe5757e7841a11e96d3350b07a81d854b2"}, {"id": 1823, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "d17ea20dea47f796e765506603d5df8d9bf0fb33"}, {"id": 1824, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "b686150a6aebf5e2ba949f0c84499e3dc64cc17f"}, {"id": 1825, "type": "sha1cert", "tag": "stalkerware", "tlp": "white", "value": "845ef0f909cd5e74a324d9ccc7ea986250feeb42"}, {"id": 1826, "type": "domain", "tag": "tracker", "tlp": "white", "value": "opencellid.org"}, {"id": 1827, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "kuuvv.com"}, {"id": 1828, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "39.108.91.228"}, {"id": 1829, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "viptrack.pro"}, {"id": 1830, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "fonemonitor.vip"}, {"id": 1831, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "neatspy.vip"}, {"id": 1832, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackine.vip"}, {"id": 1833, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackpro.vip"}, {"id": 1834, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "minspy.biz"}, {"id": 1835, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "safespy.vip"}, {"id": 1836, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mintrack.vip"}, {"id": 1837, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "safespy.net"}, {"id": 1838, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "best-mobile-spy.com"}, {"id": 1839, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spydialer.cc"}, {"id": 1840, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyic.biz"}, {"id": 1841, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyier.biz"}, {"id": 1842, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyine.biz"}, {"id": 1843, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "cocospy.net"}, {"id": 1844, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyine.com"}, {"id": 1845, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "teensafe.vip"}, {"id": 1846, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyzie.online"}, {"id": 1847, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "teensoftware.com"}, {"id": 1848, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackier.vip"}, {"id": 1849, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/api/Online\";offset:4;depth:12; msg:\"STALKERWARE - Spyic/CoCoSpy API Online HTTP request\"; sid:10000122; rev:001;)"}, {"id": 1850, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/api/location/update\";offset:4;depth:22; msg:\"STALKERWARE - Spyic/CoCoSpy Location Update HTTP request\"; sid:10000119; rev:001;)"}, {"id": 1851, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/api/sms_info/insert\";offset:4;depth:22; msg:\"STALKERWARE - Spyic/CoCoSpy Insert SMS log HTTP request\"; sid:10000121; rev:001;)"}, {"id": 1852, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/api/call_log/insert\";offset:4;depth:22; msg:\"STALKERWARE - Spyic/CoCoSpy Insert Call log HTTP request\"; sid:10000120; rev:001;)"}, {"id": 1853, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "safespy.com"}, {"id": 1854, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "thebestspyphone.com"}, {"id": 1855, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "fleksispy.com"}, {"id": 1856, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ipadkeylogger.com"}, {"id": 1857, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyphonepro.com"}, {"id": 1858, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "smartprotect.com"}, {"id": 1859, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "tabletkeylogger.com"}, {"id": 1860, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyera.com"}, {"id": 1861, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spylogs.com"}, {"id": 1862, "type": "ip4addr", "tag": "stalkerware", "tlp": "white", "value": "66.147.232.135"}, {"id": 1863, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "locatorprivacy.com"}, {"id": 1864, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "onelocator.com"}, {"id": 1865, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "xk9df.app.goo.gl"}, {"id": 1866, "type": "domain", "tag": "tracker", "tlp": "white", "value": "api.skyhookwireless.com"}, {"id": 1867, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "5.79.123.219"}, {"id": 1868, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "stealthmate.com"}, {"id": 1869, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "5.79.71.114"}, {"id": 1870, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "vys.me"}, {"id": 1871, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "162.242.243.43"}, {"id": 1872, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "37.252.127.42"}, {"id": 1873, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "bk128.com"}, {"id": 1874, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "xiz4me-asset.tilaa.cloud"}, {"id": 1875, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mydwnd.com"}, {"id": 1876, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "84.22.105.199"}, {"id": 1877, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "xnspy-sync.cloud.tilaa.com"}, {"id": 1878, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "37.252.121.242"}, {"id": 1879, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ndwa1.tilaa.cloud"}, {"id": 1880, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "brilliant-flame-585.firebaseio.com"}, {"id": 1881, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "all-tracker.appspot.com"}, {"id": 1882, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "tecxspy.com"}, {"id": 1883, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "anliktakip.com"}, {"id": 1884, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "dbin.biz"}, {"id": 1885, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "pinspy.com"}, {"id": 1886, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spytek.co.za"}, {"id": 1887, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspyitaly.com"}, {"id": 1888, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "juju.co.ke"}, {"id": 1889, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobileapps.com.my"}, {"id": 1890, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "victimovil.es"}, {"id": 1891, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ddbi.biz"}, {"id": 1892, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "bibispy.net"}, {"id": 1893, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "fsde.biz"}, {"id": 1894, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "119.8.35.235"}, {"id": 1895, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "afidinvestigations.fr"}, {"id": 1896, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "180.150.146.32"}, {"id": 1897, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "topzaloha.cz"}, {"id": 1898, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "119.8.35.182"}, {"id": 1899, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "ngc77.com"}, {"id": 1900, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "nexspy.com"}, {"id": 1901, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/mms_upload\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000142; rev:001;)"}, {"id": 1902, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/keyValueRetrieve\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server;  sid:10000123; rev:001;)"}, {"id": 1903, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/payment_info\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000124; rev:001;)"}, {"id": 1904, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/whats_app\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000141; rev:001;)"}, {"id": 1905, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/auto_answer\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000125; rev:001;)"}, {"id": 1906, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/short_gcm_ping_delivered\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000151; rev:001;)"}, {"id": 1907, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/gps_tracking\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000128; rev:001;)"}, {"id": 1908, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/open_apps_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000135; rev:001;)"}, {"id": 1909, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/deviceInfo\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000136; rev:001;)"}, {"id": 1910, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/facebook_contacts\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000138; rev:001;)"}, {"id": 1911, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/twitter_chat_data\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000139; rev:001;)"}, {"id": 1912, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/contact_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000130; rev:001;)"}, {"id": 1913, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/keylogger_data\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000140; rev:001;)"}, {"id": 1914, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/browser_history_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000132; rev:001;)"}, {"id": 1915, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/instagram\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000143; rev:001;)"}, {"id": 1916, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/install_app_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000133; rev:001;)"}, {"id": 1917, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/instagram_direct_messages\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000144; rev:001;)"}, {"id": 1918, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/calendar_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000134; rev:001;)"}, {"id": 1919, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/gcm_delivered\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000145; rev:001;)"}, {"id": 1920, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/ping_server\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000146; rev:001;)"}, {"id": 1921, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/facebook_chat_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000137; rev:001;)"}, {"id": 1922, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/line_chat_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000147; rev:001;)"}, {"id": 1923, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/gmail\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000148; rev:001;)"}, {"id": 1924, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/diagnostics_logs\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000149; rev:001;)"}, {"id": 1925, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/call_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000131; rev:001;)"}, {"id": 1926, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/skype_chat_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000150; rev:001;)"}, {"id": 1927, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/registration\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000126; rev:001;)"}, {"id": 1928, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/sms_v2\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000129; rev:001;)"}, {"id": 1929, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/iphone/new_android_services/gcm_token\";offset:4;depth:55; msg:\"STALKERWARE - HighsterSpyApp HTTP request\"; flow:established,to_server; sid:10000127; rev:001;)"}, {"id": 1930, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/bbDownloadFile.php?file=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000152; rev:001;)"}, {"id": 1931, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/videos.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000178; rev:001;)"}, {"id": 1932, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/bbUploadFile.php?type=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000153; rev:001;)"}, {"id": 1933, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/sys.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000177; rev:001;)"}, {"id": 1934, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_callrecsec.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000154; rev:001;)"}, {"id": 1935, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/surround.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000176; rev:001;)"}, {"id": 1936, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_gpslocsettings.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000158; rev:001;)"}, {"id": 1937, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_logcmd.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000159; rev:001;)"}, {"id": 1938, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_simchange.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000160; rev:001;)"}, {"id": 1939, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_datasec.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000155; rev:001;)"}, {"id": 1940, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_deletion.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000156; rev:001;)"}, {"id": 1941, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_gpsec.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000157; rev:001;)"}, {"id": 1942, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_surrecsec.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000161; rev:001;)"}, {"id": 1943, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_updatesettingssms.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000162; rev:001;)"}, {"id": 1944, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cb_version.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000163; rev:001;)"}, {"id": 1945, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cbreg.php?i=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000164; rev:001;)"}, {"id": 1946, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/cmd_issuance.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000165; rev:001;)"}, {"id": 1947, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/appointments.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000166; rev:001;)"}, {"id": 1948, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/bookmark.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000167; rev:001;)"}, {"id": 1949, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/browser.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000168; rev:001;)"}, {"id": 1950, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/calls.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000169; rev:001;)"}, {"id": 1951, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/cdr.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000170; rev:001;)"}, {"id": 1952, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/cmdCheck.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000171; rev:001;)"}, {"id": 1953, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/contacts.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000172; rev:001;)"}, {"id": 1954, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/pictures.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000173; rev:001;)"}, {"id": 1955, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/setgps.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000174; rev:001;)"}, {"id": 1956, "type": "snort", "tag": "stalkerware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (content:\"/crons/sms.php?imei=\";offset:4;depth:35; msg:\"STALKERWARE - Mobistealth/StealthMate HTTP Request\"; sid:10000175; rev:001;)"}, {"id": 1957, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "alter757.info"}, {"id": 1958, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "awarenesstechnologies.com"}, {"id": 1959, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "easyphonetrack.com"}, {"id": 1960, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "geozilla.com"}, {"id": 1961, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "life360.com"}, {"id": 1962, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "zoemob.com"}, {"id": 1963, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "webwatcherdata.com"}, {"id": 1964, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spymyfone.com"}, {"id": 1965, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyfone.com"}, {"id": 1966, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "smstracker.com"}, {"id": 1967, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobilefonex.com"}, {"id": 1968, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "findmykids.org"}, {"id": 1969, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "familysafetyproduction.com"}, {"id": 1970, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mtoolapp.biz"}, {"id": 1971, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "trackview.net"}, {"id": 1972, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spycell.net"}, {"id": 1973, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "tispy.net"}, {"id": 1974, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "foreverspy.com"}, {"id": 1975, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "89.47.91.131"}, {"id": 1976, "type": "cidr", "tag": "stalkerware", "tlp": "white", "value": "109.235.66.53"}, {"id": 1977, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyequipmentuk.co.uk"}, {"id": 1978, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "appmia.com"}, {"id": 1979, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spytrac.com"}, {"id": 1980, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "clevguard.com"}, {"id": 1981, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "appspyfree.com"}, {"id": 1982, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyzee.com"}, {"id": 1983, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "imonitorke.com"}, {"id": 1984, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "myfonemate.com"}, {"id": 1985, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonesheriff.com"}, {"id": 1986, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyphone.com"}, {"id": 1987, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "easemon.com"}, {"id": 1988, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spytoapp.com"}, {"id": 1989, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "theispyoo.com"}, {"id": 1990, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "coupletracker.com"}, {"id": 1991, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "phonetracker.com"}, {"id": 1992, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "aispyer.com"}, {"id": 1993, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "a-spy.com"}, {"id": 1994, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "wt-spy.com"}, {"id": 1995, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "evaspy.com"}, {"id": 1996, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "jjspy.com"}, {"id": 1997, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mspy.com"}, {"id": 1998, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "en.ownspy.com"}, {"id": 1999, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "blurspy.com"}, {"id": 2000, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "fonemonitor.co"}, {"id": 2001, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "spyzie.io"}, {"id": 2002, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "mobilespy.at"}, {"id": 2003, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "teensafe.net"}, {"id": 2004, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "asgardtech.ru"}, {"id": 2005, "type": "domain", "tag": "stalkerware", "tlp": "white", "value": "usafe.ru"}]}