{
    "type": "bundle",
    "id": "bundle--c8e74a04-2fa9-458b-9970-90b7f299e0d1",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--745668c5-3886-4b79-bbba-b48f3d17c9c5",
            "created": "2024-01-19T09:10:16.769103Z",
            "modified": "2025-08-05T13:31:51.975478Z",
            "name": "Whoisxmlapi",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--99b31dd1-5eeb-451d-b1b3-b9aca06843e7",
            "value": "bydnib.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--576abb07-a898-46c9-a6f8-32516c2fbd9c",
            "value": "104.168.136.231"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4ae59b13-de21-4bab-b2be-ccd59cc583ef",
            "value": "172.236.126.225"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--83565ebc-9725-4986-b07b-ea0c67d425c2",
            "value": "172.236.126.145"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--77dcce4b-aa1d-408e-973f-02a764eec398",
            "value": "172.236.126.142"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2b28a307-59cd-4b96-9de9-68cba052e1a4",
            "value": "real-update.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fb2870a4-3f70-4260-84e9-3bec298d3997",
            "value": "system-update.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e11b0b96-3b4b-46e2-8e0b-84c0750bc113",
            "value": "security-update.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2efc12ab-9e00-4ab3-84b1-f134197fcfc5",
            "value": "autoupdate.xyz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d1affa41-b2bb-4bb3-a679-444a45b03888",
            "value": "76.223.54.146"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T17:09:10.562077Z",
            "modified": "2026-06-24T17:09:10.562077Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--73a7102f-c802-401e-9f43-52567c2fbfd6",
            "created_by_ref": "identity--745668c5-3886-4b79-bbba-b48f3d17c9c5",
            "created": "2026-06-24T17:09:10.566269Z",
            "modified": "2026-06-24T17:09:10.566269Z",
            "name": "Going DNS Deep Diving Into GhostCall and GhostHire",
            "published": "2025-11-29T00:00:00Z",
            "object_refs": [
                "identity--745668c5-3886-4b79-bbba-b48f3d17c9c5",
                "domain-name--99b31dd1-5eeb-451d-b1b3-b9aca06843e7",
                "ipv4-addr--576abb07-a898-46c9-a6f8-32516c2fbd9c",
                "ipv4-addr--4ae59b13-de21-4bab-b2be-ccd59cc583ef",
                "ipv4-addr--83565ebc-9725-4986-b07b-ea0c67d425c2",
                "ipv4-addr--77dcce4b-aa1d-408e-973f-02a764eec398",
                "domain-name--2b28a307-59cd-4b96-9de9-68cba052e1a4",
                "domain-name--fb2870a4-3f70-4260-84e9-3bec298d3997",
                "domain-name--e11b0b96-3b4b-46e2-8e0b-84c0750bc113",
                "domain-name--2efc12ab-9e00-4ab3-84b1-f134197fcfc5",
                "ipv4-addr--d1affa41-b2bb-4bb3-a679-444a45b03888",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://circleid.com/posts/going-dns-deep-diving-into-ghostcall-and-ghosthire"
                }
            ]
        }
    ]
}