experimental type represents test or prototype data sources curated by the research team that Flare is evaluating for potential inclusion as officially supported event types.
Example Content
Copy
Ask AI
{
"id": "example-id-55667",
"title": "Darknet App Listing - AI Chat Assistant (suspicious)",
"url": null,
"browser_url": "http://hiddenserviceexample.onion/app/210.0",
"data": {
"app_name": "DarkChat AI",
"publisher": "anonymous_publisher",
"description": "Darknet-hosted APK listing. Entry claims multilingual AI chat functionality but metadata and hosting indicate untrusted provenance. Listing notes: obfuscated binary, unknown signing key, and community comments alleging covert telemetry and possible remote access components. Use in CTI contexts to track actor TTPs and indicators of compromise — do NOT execute the APK; treat as intelligence artifact."
},
"content": "Dark web-style app marketplace entry summarizing version history, mirrored onion download locations (redacted), uploader notes claiming 'hardened' build and bundled modules, and community-sourced warnings about suspected backdoor behavior. Contains version list and redacted hashes for analyst reference.",
"duplicates": [],
"header": {
"actor": "",
"actor_id": null,
"category_name": "",
"content_hash": "hashvalue123xyz",
"content_preview": "Dark web APK listing for 'DarkChat AI' with suspicious provenance — mirrors and community warnings.",
"country": null,
"duplicates": [],
"es_score": 1.0,
"expiration": null,
"highlights": {},
"host": null,
"id": "example-id-55667",
"infection_date": null,
"parent_id": null,
"parent_title": null,
"parent_title_en": null,
"parent_uid": null,
"parent_uids": [],
"risk": { "score": 3 },
"similar_items_count": 0,
"source": "darknet_market_scrape",
"source_name": "Darknet Market Scrape",
"target_name": "Darknet Market Scrape",
"tags": ["darkweb", "apk", "malicious-suspected", "cti"],
"notes": null,
"state_code": null,
"timestamp": "2025-10-01T23:57:51.346759+00:00",
"title": "Darknet App Listing - AI Chat Assistant (suspicious)",
"type": "experimental",
"uid": "experimental/darknet/darkchat/example-id-55667",
"user_risk_score": null,
"user_notes": null,
"ignored_at": null,
"remediated_at": null,
"verb": "",
"external_url": null,
"external_netloc": null,
"can_have_duplicates": true,
"priority_action_uuid_related": false,
"victim_name": null,
"contains_secrets": null,
"secrets_metadata": null
},
"history_logs": null,
"metadata": {
"estimated_created_at": "2025-10-01T23:57:51.346759+00:00",
"event_id": null,
"first_crawled_at": "2025-10-01T23:57:51.346759+00:00",
"last_crawled_at": "2025-10-01T23:57:51.346759+00:00",
"payload_digest": "hashvalue123xyz",
"scraped_at": "2025-10-01T23:57:51.347503+00:00",
"source": "darknet_market_scrape",
"crawled_by": null,
"flare_url": "https://app.flare.io/#/experimental/app_store/example-id-55667"
},
"similar_items": []
}