Infrastructure pivots (this indicator asserted to indicate an actor) are not confirmed attribution — attribution is capped at Probable pending original-source reporting.