Grayline Intelligence identifies, classifies, and analyzes threats to U.S. interests arising from geopolitical escalation and gray zone activity. Developed by Spectra Intel Group (SIG), the platform transforms open-source reporting into structured, analyzable threat intelligence through systematic OSINT monitoring, AI-assisted extraction, and analyst-reviewed classification.
This dataset currently emphasizes incidents linked to the second-order effects of the U.S.–Iran conflict and related foreign-directed or foreign-inspired threat activity.
Foreign escalation. U.S. exposure. Structured for analysis.
This dataset captures observed incidents, disruptions, and credible threat activity affecting U.S. interests, structured for longitudinal analysis across geography, attribution, and method.
Upper West Side Double Stabbing Near Central Park
- Two men were stabbed on the Upper West Side on Thursday afternoon around 1:30 p.m.
- The first victim, a 57-year-old Asian man, was stabbed in the torso at West 84th Street and Central Park West.
- The second victim, a 50-year-old Jewish man, was stabbed at 86th Street and Amsterdam Avenue near a church and synagogue.
- Both victims were taken to Mt. Sinai-St. Luke's Hospital and are expected to survive.
- NYPD is investigating the attacks as potential hate crimes based on victim and witness statements.
- According to NYPD Commissioner Jessica Tisch, witnesses reported Morales yelled 'Allahu Akbar' during both attacks.
- Police are evaluating whether mental health may have been a factor in the attacks.
- The suspect has no known connection to either victim, and the victims have no known connection to each other.
White House UFC Freedom 250 Drone Attack Plot Arrests
- Two men, William Lee Spartacus Falkner and Jordan W. Rincker, were arrested by the FBI on June 19 and June 21, 2026, respectively, in connection with a plot to attack the June 14 UFC Freedom 250 event at the White House.
- Falkner is charged with conspiracy to commit murder in the Western District of Washington; he allegedly has experience manufacturing and piloting drones and discussed loading explosives on drones for maximum destructive impact.
- The attack plan called for explosive drones to strike one side of the event, forcing attendees toward another exit where co-conspirators with sniper rifles and other weapons would shoot them.
- One arrested co-conspirator stated the goal was to cause enough chaos to bring about the overthrow of the U.S. government.
- Rincker is charged with conspiracy to commit murder in the Western District of Missouri; he allegedly accepted $1,200 to disperse payments to co-conspirators and provided a 12-gauge pump action shotgun to another suspect.
- A search of Rincker's home and storage unit revealed multiple firearms including a 3D printed Glock-style pistol, night vision goggles, ballistic plates, a 3D printer for making drones, and an off-grid mesh network communication device.
- The plot was initially discovered when parents of co-conspirator Tycen C. Proper in Ohio alerted police to their son's purchase of weapons and concerning online activities.
- Conspiracy to commit murder is punishable by up to life in prison.
White House UFC Freedom 250 Drone Attack Plot
- The FBI learned of the plot on June 10, 2026 and executed a search warrant in Cincinnati, where the first arrest was made.
- The multi-phase attack plan allegedly involved explosive-laden drones striking buildings near the event to spark mass panic.
- A sniper team was allegedly positioned to target fleeing crowd members after the initial drone attack.
- A 'second wave' of attackers allegedly planned to storm the White House gate.
- Some suspects traveled to Fredericksburg, Virginia on June 12 or 13 to make preparations for the attack.
- Investigators found at least 23 users on the encrypted app Signal discussing attack parameters.
- A suspect stated the goal was to target 'capitalist elites,' 'billionaires,' and politicians who received AIPAC money.
- The UFC Freedom 250 event was attended by approximately 4,300 people, including 1,200 active-duty service members.
Wayne, NJ Man Charged for ISIS Support and Worship Site Plot
- Mohamed Sagha, 22, of Wayne, New Jersey was charged by complaint with one count of attempting to provide material support and resources to ISIS.
- The U.S. Attorney for the District of New Jersey said that Sagha was also planning to target places of worship in the United States.
- Sagha was allegedly in one or more group chats where supporters of ISIS discussed potentially attacking targets in the U.S.
- Sagha expressed an intent to assist one of the members of an ISIS-supporters online chat group with an attack on a place of worship.
- Sagha told a confidential human source he was contemplating carrying out an attack of his own, possibly on a National Guard location or on a Jewish place of worship.
- Sagha allegedly met with a confidential human source who he thought was a member of ISIS.
Ivanka Trump Assassination Plot by IRGC-Linked Operative
- Al-Saadi allegedly made a 'pledge' to kill Ivanka Trump and possessed a blueprint of her Florida home.
- The plot was reportedly in retaliation for the January 2020 US drone strike that killed Iranian military chief Qasem Soleimani in Baghdad.
- Al-Saadi posted a map showing the Florida enclave where Ivanka Trump lives alongside a threat in Arabic stating 'We are currently in the stage of surveillance and analysis.'
- Al-Saadi is charged by the Department of Justice with 18 attacks and attempted attacks throughout Europe and the United States.
- Charged attacks include the firebombing of Bank of New York Mellon in Amsterdam, stabbing of two Jewish victims in London, shooting at US consulate in Toronto, and synagogue bombing in Liège, Belgium.
- Al-Saadi maintained close relationships with Soleimani and his replacement Brigadier General Esmail Qaani, who allegedly continued providing resources for terror networks.
- Al-Saadi operated a religious travel agency as cover for connecting with terror cells worldwide and held an Iraqi service passport enabling unrestricted travel.
- He was arrested in Turkey on May 15 while in transit to Russia and subsequently extradited to the United States.
Al-Saadi Arrest: Iraqi Militant Charged with Coordinating Attacks on Jews and Americans
- Federal authorities arrested and charged Iraqi militant leader Mohammad Baqer Saad Dawood al-Saadi with coordinating and planning at least 18 terrorist attacks in Europe targeting Americans and Jews.
- Al-Saadi is alleged to be a commander for Kataib Hezbollah, a US-designated foreign terrorist organization based in Iraq, closely aligned with the IRGC.
- Prosecutors allege al-Saadi was trying to orchestrate the bombing of a prominent Jewish synagogue in New York City, as well as Jewish centers in Los Angeles and Scottsdale, Arizona.
- Al-Saadi allegedly agreed to pay $10,000 for the New York synagogue attack to someone he believed was a Mexican cartel member, but who was actually an undercover agent.
- Kataib Hezbollah has allegedly been operating under a pseudonym — Harakat Ashab al-Yamin al-Islamiya (HAYI) — to carry out the attacks.
- The first attack in the series started on March 9, 2026, when attackers used explosives on a synagogue in Liège, Belgium, followed by attacks in Rotterdam, Amsterdam, and London.
- Two Jewish men were stabbed and seriously wounded in London on April 29 as part of the violence.
- Flight records show a Justice Department aircraft often used for global extraditions flew to Turkey this week, with al-Saadi's attorney stating he was arrested in Turkey by Turkish authorities.
HAYI Iranian Proxy Hybrid Warfare Campaign in Europe
- HAYI emerged in early March 2026 shortly after the Iran war began, with its first claimed attack being an explosion at a synagogue in Liege, Belgium, on March 9.
- The group has claimed seventeen incidents across seven European countries since the war began, targeting Jewish communities and symbolic targets.
- HAYI recruits non-ideological local residents—mainly youths with petty criminal backgrounds—via Snapchat and Telegram, offering modest cash incentives for low-complexity acts of violence.
- No fatalities have resulted from HAYI's claimed incidents, though two Jewish men were injured in the April 29 London stabbing attack.
- Specific targets have included five synagogues (Liege, Rotterdam, Skopje, and two in London), Jewish schools, community buildings, U.S. financial institutions, and Iranian opposition media.
- At least forty-four arrests have been made in connection with HAYI incidents: 28 in the UK, 10 in the Netherlands, 4 in France, and 2 in Belgium, including eleven minors aged 14-17.
- Dutch and French authorities have charged suspects with terrorism-related offenses, while British authorities have primarily used standard arson and criminal damage charges.
- HAYI's videos are circulated through Telegram channels linked to the Iranian regime and Iraqi Shia militias within Tehran's 'axis of resistance.'
Golders Green Stabbing Attack
- Two Jewish men, aged 76 and 34, were stabbed in Golders Green; both are in stable condition.
- Metropolitan Police formally declared the incident a terrorist attack.
- Police say one line of inquiry is whether the attack deliberately targeted the Jewish community in London.
- The suspect, aged 45, also attempted to stab officers before being Tasered and arrested.
- A shadowy group called Harakat Ashab al-Yamin al-Islamiya (Hayi), possibly associated with the Iranian regime, claimed responsibility but provided no proof.
- Met Police Commissioner Mark Rowley said the suspect has a history of serious violence.
- Chief Rabbi Ephraim Mirvis stated that visibly Jewish people are not safe on British streets.
- Prime Minister Starmer convened a Cobra meeting and pledged enhanced funding for Jewish community protection.
White House Correspondents' Dinner Shooting
- Allen was armed with a shotgun, handgun and knives when he rushed a security checkpoint and ran toward the ballroom where the black-tie dinner was being held.
- Allen sent family members a note approximately 10 minutes before the attack apologizing for what he was about to do and expressing rage about the Trump administration.
- In the note, Allen described his 'expected rules of engagement,' writing: 'Administration officials (not including Mr. Patel): they are targets, prioritized from highest-ranking to lowest.'
- Allen exchanged gunfire with law enforcement and was tackled to the ground; he was not shot but was taken to a local hospital.
- Law enforcement authorities believe Allen traveled by train from Los Angeles to Chicago, then Chicago to Washington, D.C., where he checked into the Washington Hilton in the days before the attack.
- Records show Allen purchased a Maverick 12 gauge shotgun in August 2025 and an Armscor Precision .38 semi-automatic pistol in October 2023.
- Allen's sister told investigators he was part of a group called 'The Wide Awakes' and attended a 'No Kings' anti-Trump protest in California.
- The suspect is expected to be charged with two counts of using a firearm during a crime of violence and assault on a federal officer using a dangerous weapon.
Houston Congregation Beth Israel Synagogue Plot
- FBI tip line call led to the arrests of a 41-year-old North Carolina woman and a Houston-area teenager accused of plotting a mass-casualty attack on Congregation Beth Israel.
- The alleged plot targeted worshippers during Sabbath services with the stated goal to 'kill as many Jews as possible' according to intercepted communications.
- Investigation revealed detailed surveillance of the synagogue's security patterns, acquisition of firearms, and coordination across state lines.
- Digital evidence recovered included chat logs, weapon purchase receipts, and reconnaissance photos of the synagogue taken over a three-week period in March 2026.
- Melissa Torres was extradited from Mecklenburg County, North Carolina to face federal charges including conspiracy to commit hate crimes and attempted use of a firearm in a crime of violence.
- The juvenile co-defendant was charged in state court with making terroristic threats and unlawful possession of a weapon.
- Congregation Beth Israel temporarily suspended in-person services and the Shlenker School closed for several days following the threat before reopening with enhanced security.
This platform is being developed to improve detection of emerging threat patterns and support better decision-making across government, academic, and security stakeholders.
This platform is based on open-source reporting and should be treated as OSINT. Facts, motivations, affiliations, and legal conclusions may change as investigations proceed. Unless explicitly confirmed by official authorities, all activities, attributions, and linkages should be considered under investigation.