Conflict Has a Domestic Signature
Grayline Intelligence identifies, classifies, and analyzes threats to U.S. interests arising from geopolitical escalation and gray zone activity. Developed by Spectra Intel Group (SIG), the platform transforms open-source reporting into structured, analyzable threat intelligence through systematic OSINT monitoring, AI-assisted extraction, and analyst-reviewed classification.
This dataset currently emphasizes incidents linked to the second-order effects of the U.S.–Iran conflict and related foreign-directed or foreign-inspired threat activity.
Foreign escalation. U.S. exposure. Structured for analysis.
This dataset captures observed incidents, disruptions, and credible threat activity affecting U.S. interests, structured for longitudinal analysis across geography, attribution, and method.
May 15, 2026
HIGH
Ivanka Trump Assassination Plot by IRGC-Linked Operative
Miami, Florida – Indian Creek Island residence
0 Killed
0 Injured
Planned assassination (specific method not disclosed)
IRGC / Kata'ib Hezbollah
Thwarted
Suspect
Mohammad Baqer Saad Dawood Al-Saadi, 32, Iraqi national – arrested in Turkey on May 15, extradited to US, currently held at MDC Brooklyn
Source Type
Government + Media
Threat Type
terrorism
Target Type
government
Intent
targeted
Outcome
thwarted
Confidence
0.82
Notes
- Al-Saadi allegedly made a 'pledge' to kill Ivanka Trump and possessed a blueprint of her Florida home.
- The plot was reportedly in retaliation for the January 2020 US drone strike that killed Iranian military chief Qasem Soleimani in Baghdad.
- Al-Saadi posted a map showing the Florida enclave where Ivanka Trump lives alongside a threat in Arabic stating 'We are currently in the stage of surveillance and analysis.'
- Al-Saadi is charged by the Department of Justice with 18 attacks and attempted attacks throughout Europe and the United States.
- Charged attacks include the firebombing of Bank of New York Mellon in Amsterdam, stabbing of two Jewish victims in London, shooting at US consulate in Toronto, and synagogue bombing in Liège, Belgium.
- Al-Saadi maintained close relationships with Soleimani and his replacement Brigadier General Esmail Qaani, who allegedly continued providing resources for terror networks.
- Al-Saadi operated a religious travel agency as cover for connecting with terror cells worldwide and held an Iraqi service passport enabling unrestricted travel.
- He was arrested in Turkey on May 15 while in transit to Russia and subsequently extradited to the United States.
Sources
Submitted URL
May 15, 2026
HIGH
Al-Saadi Arrest: Iraqi Militant Charged with Coordinating Attacks on Jews and Americans
New York, NY – Southern District of New York Federal Court
0 Killed
2 Injured
IED, Arson, Stabbing
Kataib Hezbollah / IRGC / Harakat Ashab al-Yamin al-Islamiya (HAYI)
Confirmed
Suspect
Mohammad Baqer Saad Dawood al-Saadi – arrested, held without bail
Source Type
Government + Media
Threat Type
terrorism
Target Type
religious
Intent
mass_casualty
Outcome
completed
Confidence
0.9
Notes
- Federal authorities arrested and charged Iraqi militant leader Mohammad Baqer Saad Dawood al-Saadi with coordinating and planning at least 18 terrorist attacks in Europe targeting Americans and Jews.
- Al-Saadi is alleged to be a commander for Kataib Hezbollah, a US-designated foreign terrorist organization based in Iraq, closely aligned with the IRGC.
- Prosecutors allege al-Saadi was trying to orchestrate the bombing of a prominent Jewish synagogue in New York City, as well as Jewish centers in Los Angeles and Scottsdale, Arizona.
- Al-Saadi allegedly agreed to pay $10,000 for the New York synagogue attack to someone he believed was a Mexican cartel member, but who was actually an undercover agent.
- Kataib Hezbollah has allegedly been operating under a pseudonym — Harakat Ashab al-Yamin al-Islamiya (HAYI) — to carry out the attacks.
- The first attack in the series started on March 9, 2026, when attackers used explosives on a synagogue in Liège, Belgium, followed by attacks in Rotterdam, Amsterdam, and London.
- Two Jewish men were stabbed and seriously wounded in London on April 29 as part of the violence.
- Flight records show a Justice Department aircraft often used for global extraditions flew to Turkey this week, with al-Saadi's attorney stating he was arrested in Turkey by Turkish authorities.
Sources
Submitted URL
May 4, 2026
HIGH
HAYI Iranian Proxy Hybrid Warfare Campaign in Europe
Multiple cities across Europe – London, Rotterdam, Amsterdam, Nijkerk, Liege, Antwerp, Paris, Munich, Skopje
0 Killed
2 Injured
Multiple methods: IED, Incendiary Device, Arson, Stabbing, Drone
Harakat Ashab al-Yamin al-Islamiyah (HAYI) – Iranian regime proxy linked to IRGC
Confirmed
Suspect
Multiple suspects: 44 arrested (28 UK, 10 Netherlands, 4 France, 2 Belgium); 16 charged; Essa Suleiman (45-year-old Somali-born British national) suspected in London stabbing
Source Type
Academic
Threat Type
terrorism
Target Type
religious
Intent
symbolic
Outcome
completed
Confidence
0.82
Notes
- HAYI emerged in early March 2026 shortly after the Iran war began, with its first claimed attack being an explosion at a synagogue in Liege, Belgium, on March 9.
- The group has claimed seventeen incidents across seven European countries since the war began, targeting Jewish communities and symbolic targets.
- HAYI recruits non-ideological local residents—mainly youths with petty criminal backgrounds—via Snapchat and Telegram, offering modest cash incentives for low-complexity acts of violence.
- No fatalities have resulted from HAYI's claimed incidents, though two Jewish men were injured in the April 29 London stabbing attack.
- Specific targets have included five synagogues (Liege, Rotterdam, Skopje, and two in London), Jewish schools, community buildings, U.S. financial institutions, and Iranian opposition media.
- At least forty-four arrests have been made in connection with HAYI incidents: 28 in the UK, 10 in the Netherlands, 4 in France, and 2 in Belgium, including eleven minors aged 14-17.
- Dutch and French authorities have charged suspects with terrorism-related offenses, while British authorities have primarily used standard arson and criminal damage charges.
- HAYI's videos are circulated through Telegram channels linked to the Iranian regime and Iraqi Shia militias within Tehran's 'axis of resistance.'
Sources
Submitted URL
April 29, 2026
HIGH
Golders Green Stabbing Attack
Golders Green, London – Highfield Avenue and Golders Green Road
0 Killed
2 Injured
Edged Weapon
Unknown; under investigation. Claim by Harakat Ashab al-Yamin al-Islamiya (Hayi), possibly Iran-linked, unverified
Confirmed
Suspect
Unnamed male, age 45, Tasered and arrested on suspicion of attempted murder; has history of serious violence per Met Police
Source Type
Media
Threat Type
terrorism
Target Type
religious
Intent
targeted
Outcome
completed
Confidence
0.85
Notes
- Two Jewish men, aged 76 and 34, were stabbed in Golders Green; both are in stable condition.
- Metropolitan Police formally declared the incident a terrorist attack.
- Police say one line of inquiry is whether the attack deliberately targeted the Jewish community in London.
- The suspect, aged 45, also attempted to stab officers before being Tasered and arrested.
- A shadowy group called Harakat Ashab al-Yamin al-Islamiya (Hayi), possibly associated with the Iranian regime, claimed responsibility but provided no proof.
- Met Police Commissioner Mark Rowley said the suspect has a history of serious violence.
- Chief Rabbi Ephraim Mirvis stated that visibly Jewish people are not safe on British streets.
- Prime Minister Starmer convened a Cobra meeting and pledged enhanced funding for Jewish community protection.
Sources
Submitted URL
April 25, 2026
HIGH
White House Correspondents' Dinner Shooting
Washington, DC – Washington Hilton
0 Killed
0 Injured
Firearms
Anti-Trump extremism; individual actor
Confirmed
Suspect
Cole Tomas Allen, 31, subdued and hospitalized; expected to be charged Monday
Source Type
Media
Threat Type
terrorism
Target Type
government
Intent
mass_casualty
Outcome
failed
Confidence
0.9
Notes
- Allen was armed with a shotgun, handgun and knives when he rushed a security checkpoint and ran toward the ballroom where the black-tie dinner was being held.
- Allen sent family members a note approximately 10 minutes before the attack apologizing for what he was about to do and expressing rage about the Trump administration.
- In the note, Allen described his 'expected rules of engagement,' writing: 'Administration officials (not including Mr. Patel): they are targets, prioritized from highest-ranking to lowest.'
- Allen exchanged gunfire with law enforcement and was tackled to the ground; he was not shot but was taken to a local hospital.
- Law enforcement authorities believe Allen traveled by train from Los Angeles to Chicago, then Chicago to Washington, D.C., where he checked into the Washington Hilton in the days before the attack.
- Records show Allen purchased a Maverick 12 gauge shotgun in August 2025 and an Armscor Precision .38 semi-automatic pistol in October 2023.
- Allen's sister told investigators he was part of a group called 'The Wide Awakes' and attended a 'No Kings' anti-Trump protest in California.
- The suspect is expected to be charged with two counts of using a firearm during a crime of violence and assault on a federal officer using a dangerous weapon.
Sources
Submitted URL
April 24, 2026
HIGH
Houston Congregation Beth Israel Synagogue Plot
Houston, Texas – Congregation Beth Israel, Meyerland neighborhood
0 Killed
0 Injured
Firearms
Antisemitic extremist ideology
Thwarted
Suspect
Melissa Torres, 41, of North Carolina (arrested, in custody without bond); unnamed 17-year-old Harris County juvenile (arrested, in custody without bond)
Source Type
Media
Threat Type
terrorism
Target Type
religious
Intent
mass_casualty
Outcome
thwarted
Confidence
0.75
Notes
- FBI tip line call led to the arrests of a 41-year-old North Carolina woman and a Houston-area teenager accused of plotting a mass-casualty attack on Congregation Beth Israel.
- The alleged plot targeted worshippers during Sabbath services with the stated goal to 'kill as many Jews as possible' according to intercepted communications.
- Investigation revealed detailed surveillance of the synagogue's security patterns, acquisition of firearms, and coordination across state lines.
- Digital evidence recovered included chat logs, weapon purchase receipts, and reconnaissance photos of the synagogue taken over a three-week period in March 2026.
- Melissa Torres was extradited from Mecklenburg County, North Carolina to face federal charges including conspiracy to commit hate crimes and attempted use of a firearm in a crime of violence.
- The juvenile co-defendant was charged in state court with making terroristic threats and unlawful possession of a weapon.
- Congregation Beth Israel temporarily suspended in-person services and the Shlenker School closed for several days following the threat before reopening with enhanced security.
Sources
Submitted URL
April 20, 2026
MEDIUM
United Airlines DIA Bomb Threat
Denver, Colorado – Denver International Airport
0 Killed
0 Injured
Bomb Threat
Unknown; under investigation
Under Investigation
Suspect
Unknown
Source Type
Media
Threat Type
unknown
Target Type
infrastructure
Intent
unknown
Outcome
thwarted
Confidence
0.75
Notes
- United Airlines flight 2408 was scheduled to depart DIA at 5:58 p.m. Sunday but passengers deplaned after a bomb threat was reported.
- The aircraft was screened and cleared, and no dangerous materials were located on the aircraft.
- Denver Police Department and DIA staff responded to the reported bomb threat.
- Denver law enforcement is working with the FBI to investigate the threat.
- None of the 200 passengers or seven United crew members was injured.
- The plane safely departed for Washington Dulles International Airport at 11:33 p.m. Sunday, nearly six hours after its scheduled departure time.
- FBI stated that any threat or hoax threat can potentially be a federal crime, including threats to critical infrastructure such as airport operations.
Sources
Submitted URL
April 18, 2026
HIGH
Los Angeles Arms Trafficking Arrest – Iran-Sudan Weapons Deal
Los Angeles, California – Los Angeles International Airport
0 Killed
0 Injured
Arms Trafficking
Iranian Government (Ministry of Intelligence and Security)
Confirmed
Suspect
Shamim Mafi, 44, of Woodland Hills, California – arrested
Source Type
Media
Threat Type
criminal
Target Type
government
Intent
targeted
Outcome
thwarted
Confidence
0.82
Notes
- Shamim Mafi, 44, was arrested on Saturday night at Los Angeles International Airport by federal agents.
- Mafi was charged with brokering the sale of drones, bombs, bomb fuses, and millions of rounds of ammunition manufactured by Iran.
- Mafi allegedly facilitated the sale of Iranian-manufactured drones to Sudan's ministry of defense in a contract valued at more than €60 million.
- Mafi reportedly earned €6 million after coordinating the Sudanese delegation's travel to Iran.
- Mafi and a co-conspirator allegedly brokered weapons deals through their company Atlas International.
- Mafi's first husband was reportedly an officer for Iran's ministry of intelligence and security.
- Mafi has been a lawful permanent resident of the US since 2016 and frequently travels to Iran, Turkey, and Oman.
- If convicted, Mafi faces up to 20 years in federal prison.
Sources
Submitted URL
April 17, 2026
MEDIUM
Kensington Gardens Israeli Embassy Drone Threat
London, England – Kensington Gardens near Israeli Embassy
0 Killed
0 Injured
Drone (alleged threat with dangerous substances)
Harakat Ashab al-Yamin al-Islamia (Iran-linked Islamist group, unverified claim)
Under Investigation
Suspect
Unknown; group Harakat Ashab al-Yamin al-Islamia claimed responsibility via video
Source Type
Media
Threat Type
terrorism
Target Type
government
Intent
targeted
Outcome
unknown
Confidence
0.65
Notes
- Police are investigating whether items found near the Israeli embassy are connected to a video posted on social media claiming the building was going to be targeted by drones carrying dangerous substances.
- The Metropolitan Police said the embassy had not been attacked and officers were trying to verify the source and authenticity of the footage.
- A Met Police chemical, biological, radiological and nuclear team was seen near the park's bandstand and police divers were spotted near the Round Pond ornamental lake.
- A video posted to social media, which appears to have been posted by Iran-linked Islamist group Harakat Ashab al-Yamin al-Islamia, showed a target over an image of the Israeli embassy before people could be seen dressed in hazmat suits flying drones.
- The group has also posted videos about several other incidents in London, including arson attacks on Jewish ambulances and attempted arson attacks on a synagogue and a Persian media company.
- Police are not currently linking this incident to any other attacks.
- The embassy confirmed all staff are safe and the embassy was not attacked.
Sources
Submitted URL
April 7, 2026
HIGH
Chinese National Arrested for Photographing Offutt AFB Military Aircraft
Bellevue, Nebraska – Offutt Air Force Base
0 Killed
0 Injured
Espionage/Surveillance
Unknown; under investigation
Under Investigation
Suspect
Tianrui Liang, 21, Chinese national – arrested and in federal custody
Source Type
Government
Threat Type
unknown
Target Type
government
Intent
unknown
Outcome
thwarted
Confidence
0.92
Notes
- Tianrui Liang, 21, of China, has been charged by complaint for conduct related to illegally documenting Air Force planes located at Offutt Air Force Base in Bellevue, Nebraska.
- Offutt Air Force Base is a key base in the Air Force's Strategic Command.
- Liang was allegedly present at Ellsworth Air Force Base in South Dakota in the days leading up to his visit to the Air Force installation in Nebraska.
- Liang crossed the Canadian-United States border on March 28, 2026, from Vancouver, Canada, to Washington on a valid B1/B2 visa.
- After being confronted by the FBI in Nebraska, Liang allegedly drove to New York and was subsequently arrested at John F. Kennedy International Airport.
- Following initial release by an Eastern District of New York magistrate judge on April 7, federal prosecutors in Nebraska successfully appealed and Liang was taken back into federal custody on April 10, 2026.
- If convicted, Liang is subject to a term of imprisonment of up to 1 year, though investigation into more serious charges is ongoing.
Sources
Submitted URL
This platform is being developed to improve detection of emerging threat patterns and support better decision-making across government, academic, and security stakeholders.
Disclaimer
This platform is based on open-source reporting and should be treated as OSINT. Facts, motivations, affiliations, and legal conclusions may change as investigations proceed. Unless explicitly confirmed by official authorities, all activities, attributions, and linkages should be considered under investigation.