[{"id":1,"reference_code":"SD-2026-00101","fingerprint":"41a5719eff3e35a0c751a8004fe1aa8b85fe87fe742bfdd3e7f8cbdcc9ab7ca3","target_type":"domain","target_value":"auth-verify-billing-portal.example.net","category":"phishing","status":"triaged","severity":"critical","risk_score":92,"reports_count":14,"assigned_to":1,"sla_due_at":"2026-11-05T06:03:26.000000Z","first_reported_at":"2026-11-05T00:03:26.000000Z","last_reported_at":"2026-11-05T01:48:26.000000Z","resolved_at":null,"created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z","enrichment":{"id":1,"incident_id":1,"resolved_ips":["203.0.113.88"],"dns_records":{"A":["203.0.113.88"],"NS":["ns1.dreamhost.com","ns2.dreamhost.com"]},"asn_name":"AS26347 New Dream Network, LLC","hosting_provider":"DreamHost Cloud Infrastructure (Simulated)","ssl_valid":true,"risk_factors":["Newly registered subdomain (< 48h)","Deceptive login keywords detected","14 duplicate reports in 2 hours"],"enriched_at":"2026-11-05T01:53:26.000000Z","created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z"},"reports":[{"id":1,"incident_id":1,"idempotency_key":"seed-SD-2026-00101","source_type":"webhook","reporter_email":"abuse-feed@netcraft-threat-feeds.org","reporter_organization":"Netcraft Threat Feeds","dmca_sworn_statement":false,"evidence_urls":["auth-verify-billing-portal.example.net"],"raw_payload":{"confidence":0.96,"automated_feed":true},"sender_ip":"198.51.100.42","created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z"}],"audit_logs":[{"id":1,"incident_id":1,"actor_id":1,"event":"incident_seeded_and_triaged","old_values":{"status":"received"},"new_values":{"status":"triaged","risk_score":92},"ip_address":"127.0.0.1","created_at":"2026-11-05T02:03:27.000000Z"}]},{"id":2,"reference_code":"SD-2026-00102","fingerprint":"4b774289a869fc95127e33623245f6ea34ec8fbae84301db856681c54a07ff44","target_type":"url","target_value":"https:\/\/media-mirror-vault.example.org\/assets\/licensed-pack.zip","category":"dmca","status":"awaiting_customer","severity":"medium","risk_score":45,"reports_count":1,"assigned_to":1,"sla_due_at":"2026-11-06T02:03:26.000000Z","first_reported_at":"2026-11-05T00:03:26.000000Z","last_reported_at":"2026-11-05T01:48:26.000000Z","resolved_at":null,"created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z","enrichment":{"id":2,"incident_id":2,"resolved_ips":["203.0.113.88"],"dns_records":{"A":["203.0.113.88"],"NS":["ns1.dreamhost.com","ns2.dreamhost.com"]},"asn_name":"AS26347 New Dream Network, LLC","hosting_provider":"DreamHost Cloud Infrastructure (Simulated)","ssl_valid":true,"risk_factors":["Valid sworn DMCA statement attached","First offense on target domain"],"enriched_at":"2026-11-05T01:53:26.000000Z","created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z"},"reports":[{"id":2,"incident_id":2,"idempotency_key":"seed-SD-2026-00102","source_type":"webhook","reporter_email":"abuse-feed@digital-millennium-copyright-counsel.org","reporter_organization":"Digital Millennium Copyright Counsel","dmca_sworn_statement":true,"evidence_urls":["https:\/\/media-mirror-vault.example.org\/assets\/licensed-pack.zip"],"raw_payload":{"confidence":0.96,"automated_feed":true},"sender_ip":"198.51.100.42","created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z"}],"audit_logs":[{"id":2,"incident_id":2,"actor_id":1,"event":"incident_seeded_and_triaged","old_values":{"status":"received"},"new_values":{"status":"awaiting_customer","risk_score":45},"ip_address":"127.0.0.1","created_at":"2026-11-05T02:03:27.000000Z"}]},{"id":3,"reference_code":"SD-2026-00103","fingerprint":"0d6d30652e137b0acbe1e6b577e036be4bb41a03ae677600bff65477201ac40d","target_type":"domain","target_value":"wp-shop-outdated.example.com","category":"malware","status":"investigating","severity":"high","risk_score":78,"reports_count":4,"assigned_to":1,"sla_due_at":"2026-11-05T10:03:26.000000Z","first_reported_at":"2026-11-05T00:03:26.000000Z","last_reported_at":"2026-11-05T01:48:26.000000Z","resolved_at":null,"created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z","enrichment":{"id":3,"incident_id":3,"resolved_ips":["203.0.113.88"],"dns_records":{"A":["203.0.113.88"],"NS":["ns1.dreamhost.com","ns2.dreamhost.com"]},"asn_name":"AS26347 New Dream Network, LLC","hosting_provider":"DreamHost Cloud Infrastructure (Simulated)","ssl_valid":true,"risk_factors":["Compromised WP plugin shell signature","Outbound port scanning reported"],"enriched_at":"2026-11-05T01:53:26.000000Z","created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z"},"reports":[{"id":3,"incident_id":3,"idempotency_key":"seed-SD-2026-00103","source_type":"webhook","reporter_email":"abuse-feed@shadowserver-foundation.org","reporter_organization":"Shadowserver Foundation","dmca_sworn_statement":false,"evidence_urls":["wp-shop-outdated.example.com"],"raw_payload":{"confidence":0.96,"automated_feed":true},"sender_ip":"198.51.100.42","created_at":"2026-11-05T02:03:26.000000Z","updated_at":"2026-11-05T02:03:26.000000Z"}],"audit_logs":[{"id":3,"incident_id":3,"actor_id":1,"event":"incident_seeded_and_triaged","old_values":{"status":"received"},"new_values":{"status":"investigating","risk_score":78},"ip_address":"127.0.0.1","created_at":"2026-11-05T02:03:27.000000Z"}]}]