Conflict Has a Domestic Signature
Grayline Intelligence identifies, classifies, and analyzes threats to U.S. interests arising from geopolitical escalation and gray zone activity. Developed by Spectra Intel Group (SIG), the platform transforms open-source reporting into structured, analyzable threat intelligence through systematic OSINT monitoring, AI-assisted extraction, and analyst-reviewed classification.
This dataset currently emphasizes incidents linked to the second-order effects of the U.S.–Iran conflict and related foreign-directed or foreign-inspired threat activity.
Foreign escalation. U.S. exposure. Structured for analysis.
This dataset captures observed incidents, disruptions, and credible threat activity affecting U.S. interests, structured for longitudinal analysis across geography, attribution, and method.
March 19, 2026
HIGH
DOJ Disruption of Iranian MOIS Cyber-Enabled Psychological Operations
United States – National (domains seized via District of Maryland)
0 Killed
0 Injured
Cyber Operations / Domain Seizure
Islamic Republic of Iran – Ministry of Intelligence and Security (MOIS)
Thwarted
Suspect
MOIS actors; no individual arrests announced in this release
Source Type
Government
Threat Type
terrorism
Target Type
government
Intent
targeted
Outcome
thwarted
Confidence
0.92
Notes
- Four domains seized: Justicehomeland[.]org, Handala-Hack[.]to, Karmabelow80[.]org, and Handala-Redwanted[.]to.
- Domains were used by MOIS for psychological operations, claiming credit for hacks, posting stolen PII, and calling for the killing of journalists, dissidents, and Israeli persons.
- On March 11, 2026, Handala Hack claimed credit for a destructive malware attack against a U.S.-based multinational medical technologies firm.
- Approximately 190 individuals associated with the Israeli Defense Force and Israeli government had their PII posted with threatening language on March 9, 2026.
- Death threats were sent via Handala_Team@outlook[.]com to Iranian dissidents and journalists in the U.S. and abroad, offering $250,000 bounties and referencing CJNG cartel partnerships.
- The U.S.-Iran conflict referenced as beginning on February 28, 2026.
- The Justicehomeland[.]org domain was previously used in July and September 2022 to claim responsibility for stealing documents from Albanian government organizations.
- Department of State's Rewards for Justice program is offering up to $10 million for information on persons engaged in malicious cyber activities against U.S. critical infrastructure.
Sources
Submitted URL
March 12, 2026
CRITICAL
Old Dominion University ROTC Classroom Shooting
Norfolk, Virginia – Old Dominion University ROTC classroom
1 Killed
2 Injured
Firearms
Islamic State (ISIS)-inspired; prior terrorism conviction
Confirmed
Suspect
Mohamed Bailor Jalloh, 36, killed by students during attack
Source Type
Media
Threat Type
terrorism
Target Type
campus
Intent
mass_casualty
Outcome
completed
Confidence
0.92
Notes
- FBI Director Kash Patel confirmed the shooting is being investigated as an act of terrorism.
- The gunfire erupted shortly before 11 a.m. in an ROTC classroom at Old Dominion University.
- The victim, Army Lt. Col. Brandon A. Shah, was an ROTC instructor killed in the attack.
- Two other U.S. Army personnel were injured according to Army Secretary Dan Driscoll.
- The gunman Mohamed Bailor Jalloh shouted 'Allahu Akbar' and was subdued and killed by students.
- Jalloh had previously pleaded guilty to terrorism-related charges involving a plot to murder US military personnel and attempting to provide material support to ISIS.
- Jalloh was sentenced to 11 years in prison in 2017 and was released in 2024.
- In 2016, Jalloh attempted to buy an AK-47 but was refused, then purchased an AR-15 at a local gun store before his arrest.
Sources
Submitted URL
March 12, 2026
HIGH
Temple Israel Synagogue Vehicle Ramming and Shooting Attack
West Bloomfield, Michigan – Temple Israel synagogue
1 Killed
31 Injured
Vehicle Ramming, Firearms, Incendiary Device
Unknown; under investigation as targeted antisemitic violence
Confirmed
Suspect
Ayman Mohamad Ghazali (preliminary identification), naturalized U.S. citizen from Lebanon, deceased
Source Type
Government + Media
Threat Type
terrorism
Target Type
religious
Intent
mass_casualty
Outcome
failed
Confidence
0.88
Notes
- Suspect rammed a vehicle into Temple Israel synagogue and drove down the hallway with purpose before exiting with a rifle.
- Armed security personnel engaged the suspect with gunfire and shot and killed him.
- The vehicle caught fire inside the building, filling the hallway with heavy smoke and flames.
- One security guard was injured after being struck by the suspect's vehicle.
- Approximately 30 law enforcement officers were hospitalized for smoke inhalation after entering the building.
- All 140 students in the synagogue's early childhood center, along with staff and teachers, were accounted for and unharmed.
- FBI is leading the investigation as a 'targeted act of violence against the Jewish community.'
- Suspect preliminarily identified as Ayman Mohamad Ghazali, born in Lebanon in 1985, who became a U.S. citizen on February 5, 2016.
Sources
Submitted URL
March 10, 2026
HIGH
Central Islip Molotov Cocktail Arrest
Central Islip, NY – Lexington Avenue
0 Killed
0 Injured
Incendiary Device
Unknown; non-terrorism related per law enforcement
Thwarted
Suspect
Lorenzo Alvarado-Navarrete (18), Elvis Romero-Martinez (20), Albert Yanes-Moran (20) – all arrested and released without bail
Source Type
Media
Threat Type
criminal
Target Type
residential
Intent
targeted
Outcome
thwarted
Confidence
0.8
Notes
- Suffolk County police pulled over a 2008 Honda Accord allegedly driving erratically shortly before 2:30 a.m. Tuesday on Lexington Avenue in Central Islip.
- Officers discovered two Molotov cocktails—beer bottles packed with gasoline—inside the vehicle.
- Three Salvadoran nationals were arrested and charged with third-degree criminal possession of a weapon.
- Romero-Martinez, the driver, was also issued multiple traffic summonses.
- All three were arraigned Wednesday and released without bail due to New York's bail reform laws.
- Prosecutors revealed that the three were planning to torch the car of someone they had a personal dispute with.
- Police determined the incident was non-terrorism related.
Sources
Submitted URL
March 9, 2026
HIGH
Barksdale Air Force Base Unauthorized Drone Incursions
Barksdale Air Force Base, Louisiana
0 Killed
0 Injured
Unmanned Aerial Systems (Drones)
Unknown; under investigation
Under Investigation
Suspect
Unknown
Source Type
Government + Media
Threat Type
unknown
Target Type
government
Intent
unknown
Outcome
completed
Confidence
0.85
Notes
- Barksdale Air Force Base detected multiple unauthorized drones operating in airspace during the week of March 9th, 2026.
- Between March 9-15, 2026, Security Forces observed multiple waves of 12-15 drones operating over sensitive areas including the flight line.
- Drones displayed non-commercial signal characteristics, long-range control links and resistance to jamming.
- The drones appeared to be custom built and required advanced knowledge of signal operations.
- Lights on the drones suggested operators may be testing security responses at the base.
- Drone flights lasted around four hours each day with varied routes and deliberate maneuvering within restricted airspace.
- Barksdale is home to long-range B-52 bombers and serves a key role in overseeing the Air Force's nuclear command and control operations.
- Analysts stated with high confidence they expected unauthorized drones to continue to operate in and around the base in the immediate future.
Sources
Submitted URL
March 8, 2026
HIGH
US Embassy Oslo Improvised Explosive Device Attack
Oslo, Norway – US Embassy, Morgedalsvegen Street, Ullern district
0 Killed
0 Injured
IED
Unknown; under investigation – suspects are Norwegian citizens with links to Iraq; possible foreign state actor involvement being examined
Confirmed
Suspect
Three brothers, all in their 20s, Norwegian citizens with links to Iraq – arrested
Source Type
Media
Threat Type
terrorism
Target Type
government
Intent
symbolic
Outcome
completed
Confidence
0.88
Notes
- The blast was caused by an improvised device placed at the building's entrance, causing minor damage and no injuries.
- Three brothers, all in their 20s and Norwegian citizens with links to Iraq, were arrested on Wednesday in connection with the explosion.
- The suspects are charged with a 'terror bombing' and were not previously known to police.
- Authorities are investigating several theories including whether a foreign state actor was involved.
- A now-deleted video featuring Iran's former supreme leader Ayatollah Ali Khamenei was published on Google Maps around the time of the incident.
- The explosion occurred at approximately 02:00 local time on Sunday at the embassy's consular section.
- Photos showed shattered glass, cracks in a glass door, and dark marks on a tiled floor following the incident.
- Norwegian Foreign Minister Espen Barth Eide described the incident as 'unacceptable' and stressed the importance of diplomatic mission security.
Sources
Submitted URL
March 8, 2026
HIGH
Kansas City International Airport Bomb Threat Evacuation
Kansas City, Missouri – Kansas City International Airport (KCI)
0 Killed
0 Injured
Bomb Threat
Unknown; under investigation
Thwarted
Suspect
Unknown
Source Type
Media
Threat Type
unknown
Target Type
infrastructure
Intent
unknown
Outcome
thwarted
Confidence
0.8
Notes
- On the morning of Sunday, March 8, the Kansas City Aviation Department received a call about a potential device inside the Kansas City International Airport, as well as in the parking garage.
- Airport police and other law enforcement, including the FBI, worked quickly to evacuate travelers from the terminal and held inbound flights on the taxiway away from the gates during the event.
- Law enforcement determined there was no credible threat to the airport or those in the terminal.
- During a sweep of the airport's garage, a vehicle on the top floor was identified by K9 units as suspicious; KCPD Bomb and Arson were called in to investigate.
- Bomb and Arson ultimately determined that there was no threat inside the garage.
- The terminals' evacuation lasted around two hours, and the garage was kept closed for an additional three hours.
- FBI Director Kash Patel stated that the threat was not credible and that threats like this are a federal crime subject to full investigation.
- In total, there were 169 flight delays and two cancellations at Kansas City International Airport on March 8.
Sources
Submitted URL
March 7, 2026
CRITICAL
Gracie Mansion ISIS-Inspired IED Attack Attempt
New York, NY – Gracie Mansion, Upper East Side
0 Killed
0 Injured
IED
ISIS-inspired
Confirmed
Suspect
Emir Balat, 18, of Langhorne, Pennsylvania – arrested; Ibrahim Kayumi, 19, of Newtown, Pennsylvania – arrested
Source Type
Government
Threat Type
terrorism
Target Type
crowd
Intent
mass_casualty
Outcome
failed
Confidence
0.95
Notes
- On March 7, 2026, Emir Balat ignited and threw an explosive device toward protesters gathered outside Gracie Mansion, the official residence of the Mayor of New York City.
- Balat received a second explosive device from Ibrahim Kayumi and dropped it near NYPD officers before being tackled and arrested.
- Both defendants stated their allegiance to ISIS after arrest; Balat wrote a pledge of allegiance to the Islamic State and used the ISIS slogan 'Die in your rage.'
- When asked if he was trying to replicate the Boston Marathon bombing, Balat responded: 'No, even bigger. It was only three deaths.'
- The explosive devices were approximately mason jar-sized, contained TATP (a highly volatile explosive known as 'Mother of Satan'), and had nuts and bolts attached as shrapnel.
- Law enforcement recovered from Balat's vehicle: hobby fuse, an empty metal can matching the device components, and a notebook with notes on TATP and chemical ingredients.
- Charges include attempted material support to a foreign terrorist organization, use of a weapon of mass destruction, and transportation of explosive materials.
Sources
Submitted URL
March 6, 2026
MEDIUM
Southwest Flight 2094 Emergency Diversion Security Incident
Atlanta, Georgia – Hartsfield-Jackson Atlanta International Airport
0 Killed
0 Injured
Suspicious Behavior / Perceived Threat
Unknown; under investigation
Under Investigation
Suspect
Unknown male passenger; interviewed and released without charges
Source Type
Media
Threat Type
unknown
Target Type
commercial
Intent
unknown
Outcome
thwarted
Confidence
0.75
Notes
- Southwest Airlines Flight 2094 diverted from Nashville to Fort Lauderdale route and made emergency landing in Atlanta after 9 p.m. on March 6, 2026.
- SWAT teams and tactical units wearing 'Atlanta Police' vests boarded the aircraft and removed a passenger at gunpoint.
- Passengers were ordered to put their heads down and hands up during the law enforcement response.
- The incident was triggered by a misunderstanding of a passenger's behavior according to Southwest Airlines.
- Witnesses reported the passenger appeared agitated when flight crews stowed his large bag in overhead bins rather than under the seat.
- Fellow passengers reportedly saw the individual texting something that appeared to resemble a threat.
- The FBI's Atlanta office and Atlanta Police Department investigated and interviewed the individual but found no credible threat.
- No charges were filed against the detained passenger.
Sources
Submitted URL
March 2, 2026
HIGH
Austin Sixth Street Mass Shooting
Austin, Texas – Sixth Street Entertainment District near Buford's Backyard Beer Garden
3 Killed
14 Injured
Firearms
Unknown; under investigation – possible inspiration from US and Israeli strikes on Iran
Confirmed
Suspect
Ndiaga Diagne, 53, fatally shot by police
Source Type
Media
Threat Type
unknown
Target Type
crowd
Intent
mass_casualty
Outcome
completed
Confidence
0.88
Notes
- Shooting occurred early Sunday morning around 2 a.m. as bars were winding down along Austin's Sixth Street entertainment district.
- Three victims killed: Ryder Harrington (19), Savitha Shan (21), and Jorge Pederson (30).
- More than a dozen others were injured, with two remaining in critical condition.
- Suspect Ndiaga Diagne was wearing a shirt with an Iranian flag design underneath a hoodie printed with 'Property of Allah.'
- Diagne initially shot from a large SUV outside Buford's Backyard Beer Garden, then parked and continued shooting with a rifle on foot.
- Authorities reached the suspect in less than a minute and fatally shot him at an intersection.
- Diagne was originally from Senegal, entered the US in 2000 on a tourist visa, and naturalized in 2013.
- FBI investigating whether attack was inspired by recent US and Israeli strikes on Iran; motive not yet confirmed.
Sources
Submitted URL
This platform is being developed to improve detection of emerging threat patterns and support better decision-making across government, academic, and security stakeholders.
Disclaimer
This platform is based on open-source reporting and should be treated as OSINT. Facts, motivations, affiliations, and legal conclusions may change as investigations proceed. Unless explicitly confirmed by official authorities, all activities, attributions, and linkages should be considered under investigation.