IOC Radar
TLP:WHITE243 IOCs

Maltrail IOC for 2026-05-30

CO
CIRCL OSINT Feed
Published June 2, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYScattered SpiderINFRASTRUCTUREdownload.ikebro.orgjfzb.coupang.dns.navyview.ips-nifty.dns.ar…CAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise243

TypeIndicatorConfidenceScoreFirst Seen
Domaindownload.ikebro.org
indicatornetwork
High
68
Jun 3, 26
Domainjfzb.coupang.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainview.ips-nifty.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domain6c874.kvp207shd6.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA159847f16a542e886a582ad52a0bd67fe63ed1eec
file-hashindicator
High
68
Jun 3, 26
Domainmois-auth-nid.gm2gx.8lxzbzbtoh.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
IP43.167.9.65
indicatornetwork
High
68
Jun 3, 26
Domaincp10523.epost-kr.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainnhncontents.cafe
aptespionagenetwork
High
68
Jun 3, 26
Domainalragaa.com
botnetindicatormalware
High
86
Jun 3, 26
Domainuiabne.icu
indicatornetwork
High
68
Jun 3, 26
Domainliiincidin.com
indicatornetwork
High
68
Jun 3, 26
Domainpub-ab1bb580d3434929a2d068c06669ddb2.r2.dev
indicatornetwork
High
68
Jun 3, 26
Domain1hvl4j.2towig8bijd.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domaingoawq.com
aptespionagenetwork
High
68
Jun 3, 26
Domainnaver-login.petfoodkorea.kr
aptespionagenetwork
High
68
Jun 3, 26
Domainfenceidaho.com
aptespionagenetwork
High
68
Jun 3, 26
Domain772g.vsjlpbrey1d.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainzsg8de2qpw0.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainhu4e60f2ok.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domaintyabner.icu
indicatornetwork
High
68
Jun 3, 26
Domaindonate.nationsbeta.online
indicatornetwork
High
68
Jun 3, 26
Domaincdn.zeggah.icu
indicatornetwork
High
68
Jun 3, 26
IP161.248.14.93
aptespionagemalware
High
68
Jun 3, 26
Domainv32l8g4nbc3.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domaing4gr.eb0bw7j0sr.v6.army
aptespionagenetwork
High
68
Jun 3, 26
Domain2towig8bijd.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainips-auth-nid.redirect.ydns.eu
aptespionagenetwork
High
68
Jun 3, 26
Domainsandboxfinancialpartners.com
aptespionagenetwork
High
68
Jun 3, 26
Domaindakindsoups.com
indicatornetwork
High
68
Jun 3, 26
SHA1053822aa22ef6b81bb083e2f1573dd0efb2016e3
aptespionagefile-hash
High
68
Jun 3, 26
Domaincoupang.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainnationsbeta.online
indicatornetwork
High
68
Jun 3, 26
SHA1b5512e61b536691bd4552e9aed1ffb5b124facc3
file-hashindicator
High
68
Jun 3, 26
Domainlincidin.com
indicatornetwork
High
68
Jun 3, 26
Domain2923bx1jf4r.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA143a7229ae68185b0c78dcef0ebd2dde7c51fbc53
file-hashindicator
High
68
Jun 3, 26
Domainjuqc7swtyb.v6.army
aptespionagenetwork
High
68
Jun 3, 26
Domainyttban.icu
indicatornetwork
High
68
Jun 3, 26
Domain4brti.g3odkh1zx2q.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainliinkydeen.com
indicatornetwork
High
68
Jun 3, 26
Domains8arkan4ja.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainrapid-craft567.com
indicatornetwork
High
68
Jun 3, 26
Domainnmosinvoice.dns.army
aptespionagenetwork
High
68
Jun 3, 26
SHA17da21fa962bc5261b00632ba653f7f56bcfca2a1
file-hashindicator
High
68
Jun 3, 26
SHA1ee0c87073466124435c98907f5e7dfa47d44ce25
file-hashindicator
High
68
Jun 3, 26
Domainxi99w080ra.dynv6.net
aptespionagenetwork
High
68
Jun 3, 26
Domainissueall.com
indicatornetwork
High
68
Jun 3, 26
Domaincdn.bnantr.icu
aptespionagenetwork
High
68
Jun 3, 26
Domainhostnid.ezgateway.net
aptespionagenetwork
High
68
Jun 3, 26
Domainkr-edoc.xubi.org
aptespionagenetwork
High
68
Jun 3, 26
Domainmap.nationsbeta.online
indicatornetwork
High
68
Jun 3, 26
Domainuui90svmzk.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainasfafs.pages.dev
indicatornetwork
High
68
Jun 3, 26
Domainprodukmesin.com
indicatornetwork
High
68
Jun 3, 26
Domainauroraagencies.com
aptespionagemalware
High
68
Jun 3, 26
Domainleqpylccczpnd.top
indicatornetwork
High
68
Jun 3, 26
Domainli3pg2l17b.v6.army
aptespionagenetwork
High
68
Jun 3, 26
SHA2564e6add88feff408b96f01d15917540dbb3ee3819c37020c4e03708410026192e
aptespionagefile-hash
High
68
Jun 3, 26
Domaindmf.ips-cert.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainredirect.ydns.eu
aptespionagenetwork
High
68
Jun 3, 26
Domainftp.videoinnovationsdaily.com
aptespionagenetwork
High
68
Jun 3, 26
Domainlinkiydiin.com
indicatornetwork
High
68
Jun 3, 26
Domainphotovault-safe.info
indicatornetwork
High
68
Jun 3, 26
Domainmoltsavvy.com
aptespionagenetwork
High
68
Jun 3, 26
Domain4btb8lukrf.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domaincambioefectivo.com
aptespionagenetwork
High
68
Jun 3, 26
SHA17a9123c64cdc9905d32274c6ea5ba22c4d2c9049
aptespionagefile-hash
High
68
Jun 3, 26
Domainnationsbeta.ru
indicatornetwork
High
68
Jun 3, 26
Domaineubka.com
indicatornetwork
High
68
Jun 3, 26
Domaineb0bw7j0sr.v6.army
aptespionagenetwork
High
68
Jun 3, 26
SHA256b3942ad05357c5cb8617f2c66dea219abfd3367ee2139f9d8dc6d40aaef914c2
file-hashindicator
High
68
Jun 3, 26
SHA11b6daf1604e294638809339f1252ae13d26cc802
file-hashindicator
High
68
Jun 3, 26
Domainthenrpod.com
indicatornetwork
High
68
Jun 3, 26
Domainninvoice.nclouddocs.bumbleshrimp.com
aptespionagenetwork
High
68
Jun 3, 26
Domainservice-nid.6c874.kvp207shd6.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA12f8b0d71682c199ceaee6484237adc9a89096702
file-hashloadermalware
High
68
Jun 3, 26
Domaindfeagr.icu
indicatornetwork
High
68
Jun 3, 26
Domainmichigansecurityguard.com
aptespionagenetwork
High
68
Jun 3, 26
Domainmoisguide.g4gr.eb0bw7j0sr.v6.army
aptespionagenetwork
High
68
Jun 3, 26
Domainchecker-pumps.fun
indicatornetwork
High
68
Jun 3, 26
Domainzeggah.icu
indicatornetwork
High
68
Jun 3, 26
Domainifavbett.icu
indicatornetwork
High
68
Jun 3, 26
Domainushort.com
indicatornetwork
High
68
Jun 3, 26
SHA151c267c9cf2314b7f2d27d9acd4b9d628886bd07
aptespionagefile-hash
High
68
Jun 3, 26
SHA2561df1a23a24dff84ba55dadcfa90cc3df7f7ace6dde69987d125c07474c8a1388
file-hashindicator
High
68
Jun 3, 26
Domainazmekl.com
indicatornetwork
High
68
Jun 3, 26
Domaineggsjelly.space
loadermalwarenetwork
High
68
Jun 3, 26
Domainndoc.1hvl4j.2towig8bijd.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domaincpabruwxgagyzm.top
indicatornetwork
High
68
Jun 3, 26
Domainvideoinnovationsdaily.com
aptespionagenetwork
High
68
Jun 3, 26
Domainnusser.ezgateway.net
aptespionagenetwork
High
68
Jun 3, 26
SHA13faef4f3265d754b32c5aa34c6fc7fdab7297662
aptespionagefile-hash
High
68
Jun 3, 26
Domainfklihnz6pb.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainhhois.o-r.kr
aptespionagenetwork
High
68
Jun 3, 26
Domainnrg644np82.v6.army
aptespionagenetwork
High
68
Jun 3, 26
Domainnpo-doc.workspace.cloud-ip.cc
aptespionagenetwork
High
68
Jun 3, 26
Domainstringcard.space
loadermalwarenetwork
High
68
Jun 3, 26
Domainscreenshot-jpg290526.info
indicatornetwork
High
68
Jun 3, 26
Domainnid.niddirect.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainkvp207shd6.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA15a0ad2cbd9c39f5df9d6f338527211b5315d9178
file-hashindicator
High
68
Jun 3, 26
Domainushort.observer
indicatornetwork
High
68
Jun 3, 26
Domainvr7qlm8n5.xyz
indicatornetwork
High
68
Jun 3, 26
Domainrfotdqmwkv.top
indicatornetwork
High
68
Jun 3, 26
Domainnisoft.yyuyy.com
aptespionagenetwork
High
68
Jun 3, 26
Domainverify-nid.suredoc.net
aptespionagenetwork
High
68
Jun 3, 26
SHA1b5344b183b54a8d541c3e118e34d4ebf3e6a7681
aptespionagefile-hash
High
68
Jun 3, 26
Domainwhois.dynuddns.com
aptespionagenetwork
High
68
Jun 3, 26
Domainsuzke.com
loadermalwarenetwork
High
68
Jun 3, 26
SHA12b80e8d739b0ce70cde341e49b56469de1bb5052
file-hashindicator
High
68
Jun 3, 26
Domainndoc.hostnid.ezgateway.net
aptespionagenetwork
High
68
Jun 3, 26
Domainhexfiles.top
indicatornetwork
High
68
Jun 3, 26
Domainsafe-photohub.info
aptespionagenetwork
High
68
Jun 3, 26
MD5ab1bb580d3434929a2d068c06669ddb2
file-hashindicator
High
68
Jun 3, 26
Domaintemperbed.space
aptespionageloader
High
68
Jun 3, 26
Domainndoc.hhois.o-r.kr
aptespionagenetwork
High
68
Jun 3, 26
Domaingwulittlxr.top
indicatornetwork
High
68
Jun 3, 26
SHA1f3e9e256480253f9ae3125383f3db30a44846d48
file-hashindicator
High
68
Jun 3, 26
Domaindedelk.com
indicatornetwork
High
68
Jun 3, 26
Domain8lxzbzbtoh.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
IP2.27.59.167
indicatornetwork
High
68
Jun 3, 26
IP82.39.109.211
indicatornetwork
High
68
Jun 3, 26
Domainaccess.edoc.korea-app.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainworkspace.cloud-ip.cc
aptespionagenetwork
High
68
Jun 3, 26
Domainvuczu.xp2xbk8ukme.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainptksldvvizjsuk.top
indicatornetwork
High
68
Jun 3, 26
Domainwv05i1q670.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainushort.today
indicatornetwork
High
68
Jun 3, 26
Domainbedpocket.xyz
loadermalwarenetwork
High
68
Jun 3, 26
SHA1fff6b5f2267badcd27204de4990879f5af7d44a8
file-hashindicator
High
68
Jun 3, 26
Domainbilling-address.abrdns.com
aptespionagenetwork
High
68
Jun 3, 26
Domainwebiqonline.com
indicatornetwork
High
68
Jun 3, 26
Domainntverify.nisoft.yyuyy.com
aptespionagenetwork
High
68
Jun 3, 26
Domain9hear9ofp5.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainoippake.icu
indicatornetwork
High
68
Jun 3, 26
Domainrfjx07u0x3.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainy8fb9ktbd7f.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA1f472080c9d038e2a247a36a847bfe4f944fa0538
file-hashindicator
High
68
Jun 3, 26
Domainmoverssocal.com
aptespionagenetwork
High
68
Jun 3, 26
Domainsuperlork.info
indicatornetwork
High
68
Jun 3, 26
Domainurshort.live
indicatornetwork
High
68
Jun 3, 26
IP82.39.109.218
indicatornetwork
High
68
Jun 3, 26
SHA256d6ad8571c92c9d095df41cb830943d5bf3eb0d88c37ce27fa54a16816249467d
file-hashindicator
High
68
Jun 3, 26
Domaincyf550.g3odkh1zx2q.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainimagest-r.info
indicatornetwork
High
68
Jun 3, 26
Domainurshort.com
indicatornetwork
High
68
Jun 3, 26
URLhttps://www.malware-traffic-analysis.net/2026/05/11/index.html
networkurl
High
68
Jun 3, 26
Domainvsjlpbrey1d.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA1f999f220a3621c54b60fde28eda54e567b09d7c7
file-hashindicator
High
68
Jun 3, 26
Domainniddirect.dns.army
aptespionagenetwork
High
68
Jun 3, 26
SHA1edea7cb83d636906ec80417738afbea88c021da7
aptespionagefile-hash
High
68
Jun 3, 26
Domainofwajrd6pr.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainnidsign.772g.vsjlpbrey1d.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainnid.kr-edoc.xubi.org
aptespionagenetwork
High
68
Jun 3, 26
Domainx5ffq2z8h8.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainushort.dev
indicatornetwork
High
68
Jun 3, 26
Domaingm2gx.8lxzbzbtoh.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA256cf356be76e96233224e73e9d4d5fa8fa7ae178d8f56e5fd6c98d551ea2b06d86
file-hashindicator
High
68
Jun 3, 26
Domainasdf.cyf550.g3odkh1zx2q.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domain8tvklxdp9e.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainzgqkdper.top
indicatornetwork
High
68
Jun 3, 26
SHA1a26a72cc7961476ed6c3cbc66ae3d9843f046e91
file-hashindicator
High
68
Jun 3, 26
Domainliyckidin.com
indicatornetwork
High
68
Jun 3, 26
Domainhatop.ru
indicatornetwork
High
68
Jun 3, 26
Domaingreezupdto.info
aptespionagenetwork
High
68
Jun 3, 26
Domainc-nous.com
indicatornetwork
High
68
Jun 3, 26
Domainnmlist.p-e.kr
aptespionagenetwork
High
68
Jun 3, 26
Domainiuhnme.icu
indicatornetwork
High
68
Jun 3, 26
Domainushort.info
indicatornetwork
High
68
Jun 3, 26
Domainbalbxl.eubka.com
indicatornetwork
High
68
Jun 3, 26
Domainn-aver-log.camdvr.org
aptespionagenetwork
High
68
Jun 3, 26
Domaing3odkh1zx2q.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainogpjgxobzlya.top
indicatornetwork
High
68
Jun 3, 26
Domainkorea-app.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainninewerty.info
indicatornetwork
High
68
Jun 3, 26
Domainug72r637rqr.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
SHA1ab265a76c6e1a1b5f350ae956b123ea75a8c190a
file-hashmalwarerat
High
68
Jun 3, 26
Domainvyvipbnt5p0.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainsimpletskmn.com
indicatornetwork
High
68
Jun 3, 26
SHA192ab2c7f2c008371e2816a015aabb849153aeb1a
aptespionagefile-hash
High
68
Jun 3, 26
SHA125aeb6cb02c74edfd7a115d8dbc4ac9432fe3f56
aptespionagefile-hash
High
68
Jun 3, 26
Domainmail.videoinnovationsdaily.com
aptespionagenetwork
High
68
Jun 3, 26
SHA15d2caac85870dd15e3d59ae1e788fabee4ffa578
file-hashindicator
High
68
Jun 3, 26
SHA11ba71ab4f7ee1850b600600b7167e08f77b97a53
file-hashindicator
High
68
Jun 3, 26
SHA1025e08b109abbc874c539ddb24b5a531581bc100
file-hashindicator
High
68
Jun 3, 26
Domainvines.live
aptespionagenetwork
High
68
Jun 3, 26
SHA111665a3e11d98575f318c9e98b7b7c0581b6e764
file-hashindicator
High
68
Jun 3, 26
SHA1acd9e70939035d72baeb5717f692f74b7634898d
aptespionagefile-hash
High
68
Jun 3, 26
Domainworkspaceviewer.com
indicatornetwork
High
68
Jun 3, 26
Domainndocload.cloudvps.ddnsguru.com
aptespionagenetwork
High
68
Jun 3, 26
Domaindocstorage-hub.info
indicatornetwork
High
68
Jun 3, 26
Domainbubblekip.info
indicatornetwork
High
68
Jun 3, 26
Domaincachwe.help
malwarenetworkrat
High
68
Jun 3, 26
SHA25611c3c7fd8b9fbb954a5a21af80f38414795930d63e8c6f5ea67bc92162359c52
file-hashmalwarerat
High
68
Jun 3, 26
Domaincertific-activation.info
aptespionagenetwork
High
68
Jun 3, 26
SHA1c19e525c18ccdf3d852da295d51508a06f747503
file-hashindicator
High
68
Jun 3, 26
Domainasdf.4brti.g3odkh1zx2q.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainooklale.icu
indicatornetwork
High
68
Jun 3, 26
SHA256a2dfc9a0c1e5135fe5afa3594d5eb8c89a6018f74a72f0a3b9052f781c783291
file-hashindicator
High
68
Jun 3, 26
Domainu-short.net
indicatornetwork
High
68
Jun 3, 26
Domainxpo.coupang.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainnycaihong.com
indicatornetwork
High
68
Jun 3, 26
SHA1aae264e861f619ea1619b8fcc888f7fbaebb4e28
file-hashindicator
High
68
Jun 3, 26
Domainxp2xbk8ukme.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainedoc.korea-app.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainnikkimstudiosllc.info
aptespionagenetwork
High
68
Jun 3, 26
SHA1a9500fb0dff1cfe6a781bcca4c21d8cdc149f103
file-hashindicator
High
68
Jun 3, 26
Domainninvoice.nmosinvoice.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainindianatowingservice.com
aptespionagenetwork
High
68
Jun 3, 26
Domainliikydin.com
indicatornetwork
High
68
Jun 3, 26
Domainculturabia.com
indicatornetwork
High
68
Jun 3, 26
Domainhh4323bc6mc.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domaintabqzjavjuo.top
indicatornetwork
High
68
Jun 3, 26
Domaintinvoice.opik.net
aptespionagenetwork
High
68
Jun 3, 26
Domainlinkideen.com
indicatornetwork
High
68
Jun 3, 26
Domaindoc-load.ln2jl.xp2xbk8ukme.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domainlogsasset.com
aptespionagenetwork
High
68
Jun 3, 26
Domain5v9h4rkbop.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainzzanme.icu
aptespionagenetwork
High
68
Jun 3, 26
Domainninvoice.nmlist.p-e.kr
aptespionagenetwork
High
68
Jun 3, 26
Domainips-nifty.dns.army
aptespionagenetwork
High
68
Jun 3, 26
SHA1c43514eefbc716fbe3df188aea293983c11a1aca
aptespionagefile-hash
High
68
Jun 3, 26
SHA1ff20aee7adbb557e9ef81240beab02f4ab2e9b54
aptespionagefile-hash
High
68
Jun 3, 26
Domainushort.company
indicatornetwork
High
68
Jun 3, 26
Domainikebro.org
indicatornetwork
High
68
Jun 3, 26
Domainushort.org
indicatornetwork
High
68
Jun 3, 26
Domainln2jl.xp2xbk8ukme.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domaindocnid.vuczu.xp2xbk8ukme.dns.army
aptespionagenetwork
High
68
Jun 3, 26
Domaintravelfountain.com
aptespionagenetwork
High
68
Jun 3, 26
Domainisdp.ooguy.com
aptespionagenetwork
High
68
Jun 3, 26
Domainjpmdswap.com
aptespionagenetwork
High
68
Jun 3, 26
IP108.62.161.53
indicatornetwork
High
68
Jun 3, 26
Domainbmqobgextpnfj.top
indicatornetwork
High
68
Jun 3, 26
SHA158237b65b3a90561208c22432c936ab4c9dd40f8
aptespionagefile-hash
High
68
Jun 3, 26
Domaincloudvps.ddnsguru.com
aptespionagenetwork
High
68
Jun 3, 26
Domain3pc3b9ph4f7.dns.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainiyyfk3jnqbw.v6.navy
aptespionagenetwork
High
68
Jun 3, 26
Domainchinoatmeal.xyz
loadermalwarenetwork
High
68
Jun 3, 26
Domainlrdiuk.com
indicatornetwork
High
68
Jun 3, 26
Domainnid.nusser.ezgateway.net
aptespionagenetwork
High
68
Jun 3, 26
Domainnclouddocs.bumbleshrimp.com
aptespionagenetwork
High
68
Jun 3, 26
Domainhydrantmachine.space
indicatornetwork
High
68
Jun 3, 26

IOC Relationship Graph

IOC Relationship Graph
Building graph…