{
  "field": "endpoint",
  "label": "endpoint",
  "value": "149.28.30.98:443",
  "page": "https://publicmosaic.com/config/endpoint/MTQ5LjI4LjMwLjk4OjQ0Mw",
  "generated": "2026-10-31T06:37:43.937Z",
  "tlp": "CLEAR",
  "note": "A shared configuration value is not evidence of a single operator.",
  "samples_total": 4,
  "hosts_total": 1,
  "samples": [
    {
      "sha256": "4e7042a417c2cf9794f58612ed9735dd0e773b0ce7fed97fdaa45d825ff65fdf",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T18:09:47.684565+00:00",
      "served_by": [
        "149.28.30.98:443"
      ]
    },
    {
      "sha256": "7dc232bfb678d044b435700db28591ed4bf85d68b7fc0417b4d8d2d311e9ae7e",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T18:09:46.585555+00:00",
      "served_by": [
        "149.28.30.98:443"
      ]
    },
    {
      "sha256": "6eb97ab099908e1b32857e83e1004321d95f4482ab4209c1bac787400aa56a36",
      "family": "vshell",
      "provenance": "file analysis",
      "last_seen": "2026-10-05T18:09:45.804447+00:00",
      "served_by": [
        "149.28.30.98:443"
      ]
    },
    {
      "sha256": "32b973ab525e194b230f1dbeb191020e16e95f17597165618697d314ed1140e1",
      "family": "vshell",
      "provenance": "sandbox run",
      "last_seen": "2026-10-05T18:09:44.863904+00:00",
      "served_by": [
        "149.28.30.98:443"
      ]
    }
  ],
  "hosts": [
    {
      "ip": "149.28.30.98",
      "ports": [
        443
      ],
      "still_listed": true,
      "family": "vshell",
      "asn": 20473,
      "last_seen": "2026-10-31T03:05:16.476Z"
    }
  ]
}