{ "type": "Domain", "indicator": "cecilio.network", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/cecilio.network", "alexa": "http://www.alexa.com/siteinfo/cecilio.network", "indicator": "cecilio.network", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3881683225, "indicator": "cecilio.network", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 12, "pulses": [ { "id": "665095e9474ef865325df6cf", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "CatDDoS-related gangs remain active and have exploited over 80 vulnerabilities over the last three months, with the maximum number of targets exceeding 300+ per day.", "modified": "2024-06-23T13:02:55.454000", "created": "2024-05-24T13:28:09.464000", "tags": [], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Brazil", "China", "Germany", "France" ], "malware_families": [], "attack_ids": [ { "id": "T1498", "name": "Network Denial of Service", "display_name": "T1498 - Network Denial of Service" } ], "industries": [ "Cloud vendors", "Education", "Scientific Research", "Telecommunications", "Government", "Construction" ], "TLP": "white", "cloned_from": null, "export_count": 412, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 7, "FileHash-SHA1": 12, "FileHash-SHA256": 7, "domain": 33, "hostname": 10 }, "indicator_count": 69, "is_author": false, "is_subscribing": null, "subscriber_count": 386867, "modified_text": "708 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67429f73a3f45fa88890276d", "name": "StreamMining", "description": "", "modified": "2024-11-24T03:37:23.616000", "created": "2024-11-24T03:37:23.616000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "670f94e03014212e19fa5a77", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "rivocado", "id": "300960", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 25, "modified_text": "555 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67429f7224d433f384b935c8", "name": "StreamMining", "description": "", "modified": "2024-11-24T03:37:22.551000", "created": "2024-11-24T03:37:22.551000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "670f94e03014212e19fa5a77", "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "rivocado", "id": "300960", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 20, "modified_text": "555 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "670f94e03014212e19fa5a77", "name": "Malicious-Dangerous-Domain&URL-New-IOC List", "description": "By Helaly", "modified": "2024-11-15T10:01:11.688000", "created": "2024-10-16T10:26:40.893000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 39659, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 80, "modified_text": "564 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6683bdd1247c16c5855518c7", "name": "Domain-URL-IP-Hash-IOC", "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes", "modified": "2024-08-02T07:05:02.060000", "created": "2024-07-02T08:44:01.648000", "tags": [ "word" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 286, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-MD5": 15, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 2521, "domain": 8243, "email": 7, "hostname": 2893 }, "indicator_count": 13683, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "669 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6683bdc8052a11fe921381a0", "name": "Domain-URL-IP-Hash-IOC", "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes", "modified": "2024-08-01T08:02:48.060000", "created": "2024-07-02T08:43:52.203000", "tags": [ "word" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-MD5": 15, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 2409, "domain": 7836, "email": 7, "hostname": 2783 }, "indicator_count": 13054, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "670 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6656f76adb9ac54de30c77c7", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-05-29T09:37:46.947000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 37, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 864, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6657f4b4404389eed160c148", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-05-30T03:38:28.372000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6656f76adb9ac54de30c77c7", "export_count": 30, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 187, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "665d549ac9f24a28aa7da110", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-06-03T05:28:58.849000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6656f76adb9ac54de30c77c7", "export_count": 29, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 189, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66794334f5300fe3f22d05fd", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-06-24T09:58:12.726000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "665d549ac9f24a28aa7da110", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Tr1sa111", "id": "192483", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 279, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66302951f3ee1710984c4f7b", "name": "Twitter Feed - banthisguy9349 - 29-04-2024", "description": "", "modified": "2024-05-29T23:03:53.685000", "created": "2024-04-29T23:12:17.358000", "tags": [ "malware", "opendir" ], "references": [ "https://twitter.com/banthisguy9349/status/1784839628584825239", "https://twitter.com/banthisguy9349/status/1784840356309193072", "https://twitter.com/banthisguy9349/status/1784874737954386177", "https://twitter.com/banthisguy9349/status/1784891801419014416" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 21, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3, "domain": 1 }, "indicator_count": 4, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "733 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66302967de3f0a83ab544020", "name": "URLHaus data - 29-04-2024", "description": "", "modified": "2024-05-29T23:03:53.685000", "created": "2024-04-29T23:12:39.069000", "tags": [ "32-bit", "elf", "mips", "Mozi", "arm", "exe", "njRAT", "mirai", "dropped-by-PrivateLoader", "encrypted", "geofenced", "Latrodectus", "USA", "dropped-by-SmokeLoader", "MarsStealer", "remcos", "botnetdomain", "shellscript", "skyline", "x86-32", "hajime", "lockbit", "moobot", "Smoke Loader", "gafgyt", "64", "hacktool", "netcat", "viperc2", "opendir", "SpyNote", "Sliver", "sliverc2", "backdoor", "Cobalt strike", "CobaltStrike", "RemcosRAT", "reverseb64", "supershell-c2", "Pua", "cve-2018-8639", "atera-agent", "msi", "webshell", "Rhadamanthys", "mp4", "ua-wget", "vbs-dropper", "CoinMiner", "32", "bashlite", "CHE", "shell", "zip", "lua", "SmartLoader", "1234", "Password-protected", "rar", "python", "stealer", "w4sp", "dll", "Stealc" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 58, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 12, "hostname": 7 }, "indicator_count": 1019, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "733 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://urlhaus.abuse.ch/browse/", "https://blog.xlab.qianxin.com/catddos-derivative-en", "https://blog.xlab.qianxin.com/catddos-derivative-en/", "https://twitter.com/banthisguy9349/status/1784840356309193072", "https://twitter.com/banthisguy9349/status/1784839628584825239", "https://twitter.com/banthisguy9349/status/1784891801419014416", "https://twitter.com/banthisguy9349/status/1784874737954386177" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [ "Education", "Construction", "Scientific research", "Cloud vendors", "Telecommunications", "Government" ] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 12, "pulses": [ { "id": "665095e9474ef865325df6cf", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "CatDDoS-related gangs remain active and have exploited over 80 vulnerabilities over the last three months, with the maximum number of targets exceeding 300+ per day.", "modified": "2024-06-23T13:02:55.454000", "created": "2024-05-24T13:28:09.464000", "tags": [], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Brazil", "China", "Germany", "France" ], "malware_families": [], "attack_ids": [ { "id": "T1498", "name": "Network Denial of Service", "display_name": "T1498 - Network Denial of Service" } ], "industries": [ "Cloud vendors", "Education", "Scientific Research", "Telecommunications", "Government", "Construction" ], "TLP": "white", "cloned_from": null, "export_count": 412, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 7, "FileHash-SHA1": 12, "FileHash-SHA256": 7, "domain": 33, "hostname": 10 }, "indicator_count": 69, "is_author": false, "is_subscribing": null, "subscriber_count": 386867, "modified_text": "708 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67429f73a3f45fa88890276d", "name": "StreamMining", "description": "", "modified": "2024-11-24T03:37:23.616000", "created": "2024-11-24T03:37:23.616000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "670f94e03014212e19fa5a77", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "rivocado", "id": "300960", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 25, "modified_text": "555 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67429f7224d433f384b935c8", "name": "StreamMining", "description": "", "modified": "2024-11-24T03:37:22.551000", "created": "2024-11-24T03:37:22.551000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "670f94e03014212e19fa5a77", "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "rivocado", "id": "300960", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 20, "modified_text": "555 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "670f94e03014212e19fa5a77", "name": "Malicious-Dangerous-Domain&URL-New-IOC List", "description": "By Helaly", "modified": "2024-11-15T10:01:11.688000", "created": "2024-10-16T10:26:40.893000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 39659, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 80, "modified_text": "564 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6683bdd1247c16c5855518c7", "name": "Domain-URL-IP-Hash-IOC", "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes", "modified": "2024-08-02T07:05:02.060000", "created": "2024-07-02T08:44:01.648000", "tags": [ "word" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 286, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-MD5": 15, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 2521, "domain": 8243, "email": 7, "hostname": 2893 }, "indicator_count": 13683, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "669 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6683bdc8052a11fe921381a0", "name": "Domain-URL-IP-Hash-IOC", "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes", "modified": "2024-08-01T08:02:48.060000", "created": "2024-07-02T08:43:52.203000", "tags": [ "word" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-MD5": 15, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 2409, "domain": 7836, "email": 7, "hostname": 2783 }, "indicator_count": 13054, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "670 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6656f76adb9ac54de30c77c7", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-05-29T09:37:46.947000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 37, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 864, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6657f4b4404389eed160c148", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-05-30T03:38:28.372000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6656f76adb9ac54de30c77c7", "export_count": 30, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 187, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "665d549ac9f24a28aa7da110", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-06-03T05:28:58.849000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6656f76adb9ac54de30c77c7", "export_count": 29, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 189, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66794334f5300fe3f22d05fd", "name": "CatDDoS-Related Gangs Have Seen a Recent Surge in Activity", "description": "", "modified": "2024-06-28T09:04:20.583000", "created": "2024-06-24T09:58:12.726000", "tags": [ "botnet", "ddos", "catddos", "mirai", "rebirthltd", "ctia", "cyber threat", "opennic domain", "aterna", "fodcha", "overviewxlab", "april", "august", "twitter" ], "references": [ "https://blog.xlab.qianxin.com/catddos-derivative-en/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "665d549ac9f24a28aa7da110", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Tr1sa111", "id": "192483", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "FileHash-SHA1": 15, "FileHash-SHA256": 9, "domain": 33, "hostname": 11 }, "indicator_count": 77, "is_author": false, "is_subscribing": null, "subscriber_count": 279, "modified_text": "704 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "cecilio.network", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "cecilio.network", "found": true, "verdict": "malicious", "url_count": 21, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "http://cecilio.network/mips", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf" ] }, { "url": "http://cecilio.network/x86_64", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf" ] }, { "url": "http://cecilio.network/arm7", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf" ] }, { "url": "http://cecilio.network/arm4", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf" ] }, { "url": "http://cecilio.network/arm5", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf" ] }, { "url": "http://cecilio.network/mpsl", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf" ] }, { "url": "http://cecilio.network/c.sh", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf", "shellscript" ] }, { "url": "http://cecilio.network/linksys", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf", "shellscript" ] }, { "url": "http://cecilio.network/z.sh", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf", "shellscript" ] }, { "url": "http://cecilio.network/irz", "status": "offline", "threat": "malware_download", "date_added": "2024-04-29", "tags": [ "botnetdomain", "elf", "shellscript" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780400480.5109575 }