{ "type": "Domain", "indicator": "arabianmigration.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/arabianmigration.com", "alexa": "http://www.alexa.com/siteinfo/arabianmigration.com", "indicator": "arabianmigration.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3350152841, "indicator": "arabianmigration.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 5, "pulses": [ { "id": "638e4405cf443ec12e66a1cf", "name": "Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2)", "description": "An advanced phishing campaign targeting Middle East-based companies and their vendors has been uncovered by researchers at CloudSEK, an artificial intelligence (AI) platform in the United Arab Emirates (UAE).", "modified": "2022-12-05T19:18:28.645000", "created": "2022-12-05T19:18:28.645000", "tags": [ "phishing", "social engineering", "impersonation", "Abu Dhabi National Oil Company", "Sharjah National Oil Corporation", "Emirates National Oil Company", "Middle East", "cloned websites", "BEC" ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1195", "name": "Supply Chain Compromise", "display_name": "T1195 - Supply Chain Compromise" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1199", "name": "Trusted Relationship", "display_name": "T1199 - Trusted Relationship" } ], "industries": [ "Finance", "Gas", "Oil", "Financial", "Investment", "Travel" ], "TLP": "white", "cloned_from": null, "export_count": 425, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "domain": 104 }, "indicator_count": 104, "is_author": false, "is_subscribing": null, "subscriber_count": 386498, "modified_text": "1272 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638da868f8d1d778b83b3079", "name": "Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2) - CloudSEK", "description": "", "modified": "2022-12-05T08:14:32.869000", "created": "2022-12-05T08:14:32.869000", "tags": [ "awareness", "adversary intelligence", "strong", "cloudsek", "appendix", "snoc", "email", "middle", "middle east", "risk protection", "bevigil", "monitor", "dark", "story", "impact", "life" ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "public": 1, "adversary": "Awareness", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1195", "name": "Supply Chain Compromise", "display_name": "T1195 - Supply Chain Compromise" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1199", "name": "Trusted Relationship", "display_name": "T1199 - Trusted Relationship" } ], "industries": [ "Finance", "Gas", "Oil", "Financial", "Investment", "Travel" ], "TLP": "white", "cloned_from": "638d9be375f85076194dfd2a", "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Tr1sa111", "id": "192483", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "domain": 107, "hostname": 1 }, "indicator_count": 109, "is_author": false, "is_subscribing": null, "subscriber_count": 277, "modified_text": "1272 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638d9be375f85076194dfd2a", "name": "Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2) - CloudSEK", "description": "An advanced phishing campaign targeting Middle East-based companies and their vendors has been uncovered by researchers at CloudSEK, an artificial intelligence (AI) platform in the United Arab Emirates (UAE).", "modified": "2022-12-05T07:21:07.681000", "created": "2022-12-05T07:21:07.681000", "tags": [ "awareness", "adversary intelligence", "strong", "cloudsek", "appendix", "snoc", "email", "middle", "middle east", "risk protection", "bevigil", "monitor", "dark", "story", "impact", "life" ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "public": 1, "adversary": "Awareness", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1195", "name": "Supply Chain Compromise", "display_name": "T1195 - Supply Chain Compromise" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1199", "name": "Trusted Relationship", "display_name": "T1199 - Trusted Relationship" } ], "industries": [ "Finance", "Gas", "Oil", "Financial", "Investment", "Travel" ], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "domain": 107, "hostname": 1 }, "indicator_count": 109, "is_author": false, "is_subscribing": null, "subscriber_count": 186, "modified_text": "1273 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "61d948c80d8cfd631285ac6c", "name": "NewDom-0-20220108", "description": "ICANN-Dom", "modified": "2022-02-22T00:04:50.033000", "created": "2022-01-08T08:18:16.627000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 203, "modified_text": "1559 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "61d7f2a62fdba614853d54d6", "name": "NewDom-0-20220107", "description": "ICANN-Dom", "modified": "2022-02-21T00:02:59.215000", "created": "2022-01-07T07:58:30.849000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 203, "modified_text": "1560 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 } ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [ "Oil", "Gas", "Investment", "Travel", "Financial", "Finance" ] }, "other": { "adversary": [ "Awareness" ], "malware_families": [], "industries": [ "Oil", "Gas", "Investment", "Travel", "Financial", "Finance" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 5, "pulses": [ { "id": "638e4405cf443ec12e66a1cf", "name": "Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2)", "description": "An advanced phishing campaign targeting Middle East-based companies and their vendors has been uncovered by researchers at CloudSEK, an artificial intelligence (AI) platform in the United Arab Emirates (UAE).", "modified": "2022-12-05T19:18:28.645000", "created": "2022-12-05T19:18:28.645000", "tags": [ "phishing", "social engineering", "impersonation", "Abu Dhabi National Oil Company", "Sharjah National Oil Corporation", "Emirates National Oil Company", "Middle East", "cloned websites", "BEC" ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1195", "name": "Supply Chain Compromise", "display_name": "T1195 - Supply Chain Compromise" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1199", "name": "Trusted Relationship", "display_name": "T1199 - Trusted Relationship" } ], "industries": [ "Finance", "Gas", "Oil", "Financial", "Investment", "Travel" ], "TLP": "white", "cloned_from": null, "export_count": 425, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "domain": 104 }, "indicator_count": 104, "is_author": false, "is_subscribing": null, "subscriber_count": 386498, "modified_text": "1272 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638da868f8d1d778b83b3079", "name": "Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2) - CloudSEK", "description": "", "modified": "2022-12-05T08:14:32.869000", "created": "2022-12-05T08:14:32.869000", "tags": [ "awareness", "adversary intelligence", "strong", "cloudsek", "appendix", "snoc", "email", "middle", "middle east", "risk protection", "bevigil", "monitor", "dark", "story", "impact", "life" ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "public": 1, "adversary": "Awareness", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1195", "name": "Supply Chain Compromise", "display_name": "T1195 - Supply Chain Compromise" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1199", "name": "Trusted Relationship", "display_name": "T1199 - Trusted Relationship" } ], "industries": [ "Finance", "Gas", "Oil", "Financial", "Investment", "Travel" ], "TLP": "white", "cloned_from": "638d9be375f85076194dfd2a", "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Tr1sa111", "id": "192483", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "domain": 107, "hostname": 1 }, "indicator_count": 109, "is_author": false, "is_subscribing": null, "subscriber_count": 277, "modified_text": "1272 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "638d9be375f85076194dfd2a", "name": "Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2) - CloudSEK", "description": "An advanced phishing campaign targeting Middle East-based companies and their vendors has been uncovered by researchers at CloudSEK, an artificial intelligence (AI) platform in the United Arab Emirates (UAE).", "modified": "2022-12-05T07:21:07.681000", "created": "2022-12-05T07:21:07.681000", "tags": [ "awareness", "adversary intelligence", "strong", "cloudsek", "appendix", "snoc", "email", "middle", "middle east", "risk protection", "bevigil", "monitor", "dark", "story", "impact", "life" ], "references": [ "https://cloudsek.com/threatintelligence/advanced-phishing-campaign-targeting-individuals-businesses-in-the-middle-east-part-2/" ], "public": 1, "adversary": "Awareness", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1195", "name": "Supply Chain Compromise", "display_name": "T1195 - Supply Chain Compromise" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1199", "name": "Trusted Relationship", "display_name": "T1199 - Trusted Relationship" } ], "industries": [ "Finance", "Gas", "Oil", "Financial", "Investment", "Travel" ], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1, "domain": 107, "hostname": 1 }, "indicator_count": 109, "is_author": false, "is_subscribing": null, "subscriber_count": 186, "modified_text": "1273 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "61d948c80d8cfd631285ac6c", "name": "NewDom-0-20220108", "description": "ICANN-Dom", "modified": "2022-02-22T00:04:50.033000", "created": "2022-01-08T08:18:16.627000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 203, "modified_text": "1559 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "61d7f2a62fdba614853d54d6", "name": "NewDom-0-20220107", "description": "ICANN-Dom", "modified": "2022-02-21T00:02:59.215000", "created": "2022-01-07T07:58:30.849000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 203, "modified_text": "1560 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "arabianmigration.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "arabianmigration.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780214897.229541 }