{
  "773d3b94-4df5-443e-83d8-b15998adea30": {
    "event_id": 25815,
    "created_at": "2026-09-03T08:27:24.402605+00:00",
    "updated_at": "2026-09-03T08:27:48.639462+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.intbc.cc",
        "intbc.cc"
      ],
      "url": [
        "https://rimborso.intbc.cc/TzfvloMAFK/api/input",
        "https://rimborso.intbc.cc/it",
        "https://rimborso.intbc.cc/wf167_it/footer.html",
        "https://rimborso.intbc.cc/wf167_it/header.html",
        "https://rimborso.intbc.cc/TzfvloMAFK/api"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "257ff5a6-614e-47fb-86d9-558c4915ae94": {
    "event_id": 25828,
    "created_at": "2026-09-03T10:55:17.899035+00:00",
    "updated_at": "2026-09-03T10:55:24.548035+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "intv.cam",
        "tari.intv.cam"
      ],
      "url": [
        "https://tari.intv.cam/it/",
        "https://tari.intv.cam/wf167_it/header.html",
        "https://tari.intv.cam/wf167_it/footer.html",
        "https://tari.intv.cam/TzfvloMAFK/api/input",
        "https://tari.intv.cam/TzfvloMAFK/api"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "5f0a94ff-d55c-4db3-9a5e-558cc460e690": {
    "event_id": 25830,
    "created_at": "2026-09-03T10:58:38.728340+00:00",
    "updated_at": "2026-09-03T10:58:46.814275+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "tari.intw.cam",
        "intw.cam"
      ],
      "url": [
        "https://tari.intw.cam/TzfvloMAFK/api",
        "https://tari.intw.cam/it",
        "https://tari.intw.cam/TzfvloMAFK/api/input",
        "https://tari.intw.cam/wf167_it/header.html",
        "https://tari.intw.cam/wf167_it/footer.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "de0f8615-0932-4718-b0bd-805d3b95dc3a": {
    "event_id": 25805,
    "created_at": "2026-09-02T13:34:02.592424+00:00",
    "updated_at": "2026-09-02T13:36:53.408624+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.inti.cam",
        "inti.cam"
      ],
      "url": [
        "https://rimborso.inti.cam/TzfvloMAFK/api/input",
        "https://rimborso.inti.cam/it",
        "https://rimborso.inti.cam/TzfvloMAFK/api",
        "https://rimborso.inti.cam/wf167_it/header.html",
        "https://rimborso.inti.cam/wf167_it/footer.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "79b30d9e-8157-4985-ac7a-1d438d0abfcf": {
    "event_id": 25809,
    "created_at": "2026-09-02T13:37:02.828318+00:00",
    "updated_at": "2026-09-02T13:37:18.783184+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.intq.cam",
        "intq.cam"
      ],
      "url": [
        "https://rimborso.intq.cam/it",
        "https://rimborso.intq.cam/wf167_it/footer.html",
        "https://rimborso.intq.cam/wf167_it/header.html",
        "https://rimborso.intq.cam/TzfvloMAFK/api",
        "https://rimborso.intq.cam/TzfvloMAFK/api/input"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "c6c67b69-7b27-4a63-91b1-3e44e8b4c1b6": {
    "event_id": 25821,
    "created_at": "2026-09-03T08:53:53.436472+00:00",
    "updated_at": "2026-09-03T08:54:01.374139+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "intp.cam",
        "rimborso.intp.cam"
      ],
      "url": [
        "https://rimborso.intp.cam/wf167_it/footer.html",
        "https://rimborso.intp.cam/TzfvloMAFK/api",
        "https://rimborso.intp.cam/it",
        "https://rimborso.intp.cam/wf167_it/header.html",
        "https://rimborso.intp.cam/TzfvloMAFK/api/input"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "45a9fb2a-70cd-43ae-a3b7-a6c157f621de": {
    "event_id": 25831,
    "created_at": "2026-09-03T11:11:00.782039+00:00",
    "updated_at": "2026-09-03T11:11:07.997707+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.intr.cam",
        "intr.cam"
      ],
      "url": [
        "https://rimborso.intr.cam/TzfvloMAFK/api/input",
        "https://rimborso.intr.cam/wf167_it/header.html",
        "https://rimborso.intr.cam/wf167_it/footer.html",
        "https://rimborso.intr.cam/it",
        "https://rimborso.intr.cam/TzfvloMAFK/api"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "b6ffe171-b6ad-4dce-8ff2-cca1074c7cc1": {
    "event_id": 25810,
    "created_at": "2026-09-02T13:39:53.219859+00:00",
    "updated_at": "2026-09-02T13:40:04.418681+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "inth.cam",
        "pago.inth.cam"
      ],
      "url": [
        "https://pago.inth.cam/it",
        "https://pago.inth.cam/wf167_it/header.html",
        "https://pago.inth.cam/TzfvloMAFK/api/input",
        "https://pago.inth.cam/wf167_it/footer.html",
        "https://pago.inth.cam/TzfvloMAFK/api"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "c8c28371-1eec-4774-a780-855710612e56": {
    "event_id": 25829,
    "created_at": "2026-09-03T10:57:18.108931+00:00",
    "updated_at": "2026-09-03T10:57:31.170431+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.inty.cam",
        "inty.cam"
      ],
      "url": [
        "https://rimborso.inty.cam/wf167_it/header.html",
        "https://rimborso.inty.cam/TzfvloMAFK/api/input",
        "https://rimborso.inty.cam/it",
        "https://rimborso.inty.cam/TzfvloMAFK/api",
        "https://rimborso.inty.cam/wf167_it/footer.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "2e2d5228-7b26-4ed7-9c9f-d36172424bdb": {
    "event_id": 25808,
    "created_at": "2026-09-02T13:37:02.805961+00:00",
    "updated_at": "2026-09-02T13:37:11.572119+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.intl.cam",
        "intl.cam"
      ],
      "url": [
        "https://rimborso.intl.cam/TzfvloMAFK/api",
        "https://rimborso.intl.cam/TzfvloMAFK/api/input",
        "https://rimborso.intl.cam/it",
        "https://rimborso.intl.cam/wf167_it/header.html",
        "https://rimborso.intl.cam/wf167_it/footer.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "47ac391b-77d8-465a-bd74-71a3d568fc69": {
    "event_id": 25814,
    "created_at": "2026-09-03T08:27:24.383369+00:00",
    "updated_at": "2026-09-03T08:27:40.423577+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "intj.cam",
        "rimborso.intj.cam"
      ],
      "url": [
        "https://rimborso.intj.cam/TzfvloMAFK/api",
        "https://rimborso.intj.cam/it",
        "https://rimborso.intj.cam/wf167_it/footer.html",
        "https://rimborso.intj.cam/TzfvloMAFK/api/input",
        "https://rimborso.intj.cam/wf167_it/header.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "98feeeab-e89d-4579-97e3-49a218ceb5ae": {
    "event_id": 25806,
    "created_at": "2026-09-02T13:34:08.928846+00:00",
    "updated_at": "2026-09-02T13:36:09.287035+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "rimborso.into.cam",
        "into.cam"
      ],
      "url": [
        "https://rimborso.into.cam/it",
        "https://rimborso.into.cam/TzfvloMAFK/api",
        "https://rimborso.into.cam/TzfvloMAFK/api/input",
        "https://rimborso.into.cam/wf167_it/footer.html",
        "https://rimborso.into.cam/wf167_it/header.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  },
  "82e39c03-9f36-4a5c-8700-5a531f576ef1": {
    "event_id": 25834,
    "created_at": "2026-09-03T12:53:58.273675+00:00",
    "updated_at": "2026-09-03T12:54:08.523104+00:00",
    "name": "Campagna di Phishing PagoPA italiana",
    "description": "",
    "subject": null,
    "tlp": "1",
    "campaign_type": "phishing",
    "method": "linked",
    "country": "italy",
    "file_type": [],
    "theme": "Rimborso",
    "malware": null,
    "phishing": "PagoPA",
    "via": "email",
    "tag": [],
    "ioc_list": {
      "md5": [],
      "sha1": [],
      "sha256": [],
      "imphash": [],
      "domain": [
        "inka.cam",
        "rimborso.inka.cam"
      ],
      "url": [
        "https://rimborso.inka.cam/wf167_it/footer.html",
        "https://rimborso.inka.cam/TzfvloMAFK/api/input",
        "https://rimborso.inka.cam/it",
        "https://rimborso.inka.cam/TzfvloMAFK/api",
        "https://rimborso.inka.cam/wf167_it/header.html"
      ],
      "ipv4": [],
      "email": []
    },
    "email_victim": [],
    "ioca_version": "1.0",
    "organization": "cert-agid"
  }
}