{ "type": "Domain", "indicator": "computersupportexperts.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/computersupportexperts.com", "alexa": "http://www.alexa.com/siteinfo/computersupportexperts.com", "indicator": "computersupportexperts.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3841021612, "indicator": "computersupportexperts.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 18, "pulses": [ { "id": "69d47764f2270074641b9efa", "name": "clone urlhaus 23may CREATED 11 MONTHS AGO MODIFIED 2 MONTHS AGO by skocherhan Public TLP: Green REFERENCE: https://urlhaus.abuse.ch/downloads/json_online/", "description": "", "modified": "2026-04-07T03:17:56.739000", "created": "2026-04-07T03:17:56.739000", "tags": [], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "682fec831be07e4fdf69fe47", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 29, "FileHash-SHA1": 16, "FileHash-SHA256": 1, "CVE": 11, "URL": 12396, "domain": 433, "hostname": 572 }, "indicator_count": 13458, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "54 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69891e6c45e0e5cd7d52479d", "name": "URLHaus", "description": "", "modified": "2026-03-10T23:00:49.662000", "created": "2026-02-08T23:38:20.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 6, "FileHash-MD5": 19, "FileHash-SHA1": 20, "FileHash-SHA256": 3, "URL": 13688, "domain": 308, "hostname": 399 }, "indicator_count": 14443, "is_author": false, "is_subscribing": null, "subscriber_count": 183, "modified_text": "81 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997f593f25ab8c2f6d8a515", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 667 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T05:48:03.949000", "created": "2026-02-20T05:48:03.949000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 352, "domain": 313 }, "indicator_count": 665, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699763269fb5c468aa8402ec", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 701 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:23:18.064000", "created": "2026-02-19T19:23:18.064000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 385, "domain": 314 }, "indicator_count": 699, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699723f9569f051cac511b65", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 697 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T14:53:45.790000", "created": "2026-02-19T14:53:45.790000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 384, "domain": 311 }, "indicator_count": 695, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699704cd598ce2606a8248a1", "name": "Malware_Distribution | Feb 19, 2026", "description": "Malware_Distribution indicators. Date: Feb 19, 2026. Total: 727 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T12:40:45.392000", "created": "2026-02-19T12:40:45.392000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 404, "domain": 321 }, "indicator_count": 725, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69962eb0ac8a1d2e65b9bcc7", "name": "Malware_Distribution | Feb 19, 2026", "description": "Malware_Distribution indicators. Date: Feb 19, 2026. Total: 679 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:27:12.851000", "created": "2026-02-18T21:27:12.851000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 373, "domain": 304 }, "indicator_count": 677, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69956fd33d4d725a294b3190", "name": "Malware_Distribution | Feb 18, 2026", "description": "Malware_Distribution indicators. Date: Feb 18, 2026. Total: 673 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T07:52:51.611000", "created": "2026-02-18T07:52:51.611000", "tags": [ "malware_distribution", "urlhaus-rpz" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 374, "domain": 297 }, "indicator_count": 671, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "682fec831be07e4fdf69fe47", "name": "urlhaus 23may", "description": "", "modified": "2026-02-09T00:10:22.199000", "created": "2025-05-23T03:33:23.189000", "tags": [], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 29, "FileHash-SHA1": 16, "FileHash-SHA256": 1, "CVE": 11, "URL": 12396, "domain": 433, "hostname": 572 }, "indicator_count": 13458, "is_author": false, "is_subscribing": null, "subscriber_count": 182, "modified_text": "111 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "672f6ed2b564f00b7c5cb13f", "name": "Threatfox Recent Additions", "description": "", "modified": "2025-06-13T19:00:02.811000", "created": "2024-11-09T14:16:50.032000", "tags": [], "references": [ "", "https://threatfox.abuse.ch/export/csv/recent/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 96, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ameermane", "id": "77501", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 47587, "URL": 18714, "FileHash-SHA256": 36311, "FileHash-MD5": 1630, "FileHash-SHA1": 418, "hostname": 18190 }, "indicator_count": 122850, "is_author": false, "is_subscribing": null, "subscriber_count": 144, "modified_text": "351 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67429f73a3f45fa88890276d", "name": "StreamMining", "description": "", "modified": "2024-11-24T03:37:23.616000", "created": "2024-11-24T03:37:23.616000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "670f94e03014212e19fa5a77", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "rivocado", "id": "300960", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 25, "modified_text": "553 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67429f7224d433f384b935c8", "name": "StreamMining", "description": "", "modified": "2024-11-24T03:37:22.551000", "created": "2024-11-24T03:37:22.551000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "670f94e03014212e19fa5a77", "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "rivocado", "id": "300960", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 20, "modified_text": "553 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "670f94e03014212e19fa5a77", "name": "Malicious-Dangerous-Domain&URL-New-IOC List", "description": "By Helaly", "modified": "2024-11-15T10:01:11.688000", "created": "2024-10-16T10:26:40.893000", "tags": [ "eliminar", "leer ms", "wishlist vista", "poltica", "secadores", "vista", "sala", "vaporal", "utensilios", "belleza equipos", "ciudad" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 39659, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6, "URL": 170, "domain": 11158, "hostname": 3549 }, "indicator_count": 14883, "is_author": false, "is_subscribing": null, "subscriber_count": 80, "modified_text": "562 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6683bdd1247c16c5855518c7", "name": "Domain-URL-IP-Hash-IOC", "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes", "modified": "2024-08-02T07:05:02.060000", "created": "2024-07-02T08:44:01.648000", "tags": [ "word" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 286, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-MD5": 15, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 2521, "domain": 8243, "email": 7, "hostname": 2893 }, "indicator_count": 13683, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "667 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6683bdc8052a11fe921381a0", "name": "Domain-URL-IP-Hash-IOC", "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes", "modified": "2024-08-01T08:02:48.060000", "created": "2024-07-02T08:43:52.203000", "tags": [ "word" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Eslam-ElHelaly", "id": "259630", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-MD5": 15, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 2409, "domain": 7836, "email": 7, "hostname": 2783 }, "indicator_count": 13054, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "668 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65d8dae4f0dbab78b6e8d33d", "name": "URL HAUS", "description": "", "modified": "2024-03-23T00:00:20.648000", "created": "2024-02-23T17:50:28.910000", "tags": [ "32-bit", "arm", "elf", "Mozi", "mips", "hajime", "SocGholish", "mirai", "32", "sparc", "dropped-by-SmokeLoader", "Socks5Systemz", "Stealc", "dropped-by-PrivateLoader", "moobot", "encrypted", "AgentTesla", "OriginLogger", "ascii", "Encoded", "GuLoader", "opendir", "powershell", "ps1", "exe", "vbs", "doc", "encryped", "njRAT", "freesoft", "Password-protected", "zip", "D@#WnlD!11dDs", "beacon", "CobaltStrike", "gafgyt", "geofenced", "USA", "Amadey", "potentialransomware", "bat", "dcrat", "NanoCore", "rat", "Rhadamanthys", "DarkGate", "dll", "bashlite", "intel", "64", "PowerPC", "renesas", "motorola", "AZORult", "shellscript" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "65d6928417c62a773d0d2663", "export_count": 39, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "death_note", "id": "272676", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "hostname": 14, "domain": 19 }, "indicator_count": 1033, "is_author": false, "is_subscribing": null, "subscriber_count": 25, "modified_text": "799 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65d6928417c62a773d0d2663", "name": "URLHaus data - 21-02-2024", "description": "", "modified": "2024-03-23T00:00:20.648000", "created": "2024-02-22T00:17:08.196000", "tags": [ "32-bit", "arm", "elf", "Mozi", "mips", "hajime", "SocGholish", "mirai", "32", "sparc", "dropped-by-SmokeLoader", "Socks5Systemz", "Stealc", "dropped-by-PrivateLoader", "moobot", "encrypted", "AgentTesla", "OriginLogger", "ascii", "Encoded", "GuLoader", "opendir", "powershell", "ps1", "exe", "vbs", "doc", "encryped", "njRAT", "freesoft", "Password-protected", "zip", "D@#WnlD!11dDs", "beacon", "CobaltStrike", "gafgyt", "geofenced", "USA", "Amadey", "potentialransomware", "bat", "dcrat", "NanoCore", "rat", "Rhadamanthys", "DarkGate", "dll", "bashlite", "intel", "64", "PowerPC", "renesas", "motorola", "AZORult", "shellscript" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 38, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "hostname": 14, "domain": 19 }, "indicator_count": 1033, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "799 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65d54119a602a6512ab1a757", "name": "URLHaus data - 20-02-2024", "description": "", "modified": "2024-03-22T00:02:34.037000", "created": "2024-02-21T00:17:29.676000", "tags": [ "32-bit", "arm", "elf", "Mozi", "mips", "hajime", "mirai", "SocGholish", "dropper", "dropped-by-PrivateLoader", "encrypted", "64-bit", "x86-64", "CoinMiner", "linux", "malxmr", "shell", "Tsunami", "DarkGate", "opendir", "zip", "dll", "Stealc", "ascii", "Encoded", "rat", "RemcosRAT", "vbs", "doc", "dropped-by-SmokeLoader", "AgentTesla", "powershell", "ps1", "xworm", "js", "GuLoader", "exe", "malware", "a2x", "autoit", "geofenced", "redir-302", "USA", "njRAT", "gafgyt", "Mortalsoft", "RedLineStealer", "ddos", "mortalsoft-asn", "Tubehosting", "script", "AsyncRAT", "bat", "NanoCore", "Amadey", "glupteba", "iso", "32", "bashlite", "motorola", "intel", "64", "PowerPC", "renesas", "sparc", "shellscript" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 51, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "hostname": 15, "domain": 13 }, "indicator_count": 1028, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "800 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "", "https://ltna.com.au/cyber", "https://urlhaus.abuse.ch/downloads/json_online/", "https://threatfox.abuse.ch/export/csv/recent/", "https://urlhaus.abuse.ch/browse/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 18, "pulses": [ { "id": "69d47764f2270074641b9efa", "name": "clone urlhaus 23may CREATED 11 MONTHS AGO MODIFIED 2 MONTHS AGO by skocherhan Public TLP: Green REFERENCE: https://urlhaus.abuse.ch/downloads/json_online/", "description": "", "modified": "2026-04-07T03:17:56.739000", "created": "2026-04-07T03:17:56.739000", "tags": [], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "682fec831be07e4fdf69fe47", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 29, "FileHash-SHA1": 16, "FileHash-SHA256": 1, "CVE": 11, "URL": 12396, "domain": 433, "hostname": 572 }, "indicator_count": 13458, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "54 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69891e6c45e0e5cd7d52479d", "name": "URLHaus", "description": "", "modified": "2026-03-10T23:00:49.662000", "created": "2026-02-08T23:38:20.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 6, "FileHash-MD5": 19, "FileHash-SHA1": 20, "FileHash-SHA256": 3, "URL": 13688, "domain": 308, "hostname": 399 }, "indicator_count": 14443, "is_author": false, "is_subscribing": null, "subscriber_count": 183, "modified_text": "81 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997f593f25ab8c2f6d8a515", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 667 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T05:48:03.949000", "created": "2026-02-20T05:48:03.949000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 352, "domain": 313 }, "indicator_count": 665, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699763269fb5c468aa8402ec", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 701 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:23:18.064000", "created": "2026-02-19T19:23:18.064000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 385, "domain": 314 }, "indicator_count": 699, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699723f9569f051cac511b65", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 697 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T14:53:45.790000", "created": "2026-02-19T14:53:45.790000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 384, "domain": 311 }, "indicator_count": 695, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699704cd598ce2606a8248a1", "name": "Malware_Distribution | Feb 19, 2026", "description": "Malware_Distribution indicators. Date: Feb 19, 2026. Total: 727 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T12:40:45.392000", "created": "2026-02-19T12:40:45.392000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 404, "domain": 321 }, "indicator_count": 725, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69962eb0ac8a1d2e65b9bcc7", "name": "Malware_Distribution | Feb 19, 2026", "description": "Malware_Distribution indicators. Date: Feb 19, 2026. Total: 679 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:27:12.851000", "created": "2026-02-18T21:27:12.851000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 373, "domain": 304 }, "indicator_count": 677, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69956fd33d4d725a294b3190", "name": "Malware_Distribution | Feb 18, 2026", "description": "Malware_Distribution indicators. Date: Feb 18, 2026. Total: 673 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T07:52:51.611000", "created": "2026-02-18T07:52:51.611000", "tags": [ "malware_distribution", "urlhaus-rpz" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 374, "domain": 297 }, "indicator_count": 671, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "682fec831be07e4fdf69fe47", "name": "urlhaus 23may", "description": "", "modified": "2026-02-09T00:10:22.199000", "created": "2025-05-23T03:33:23.189000", "tags": [], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 29, "FileHash-SHA1": 16, "FileHash-SHA256": 1, "CVE": 11, "URL": 12396, "domain": 433, "hostname": 572 }, "indicator_count": 13458, "is_author": false, "is_subscribing": null, "subscriber_count": 182, "modified_text": "111 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "672f6ed2b564f00b7c5cb13f", "name": "Threatfox Recent Additions", "description": "", "modified": "2025-06-13T19:00:02.811000", "created": "2024-11-09T14:16:50.032000", "tags": [], "references": [ "", "https://threatfox.abuse.ch/export/csv/recent/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 96, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ameermane", "id": "77501", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 47587, "URL": 18714, "FileHash-SHA256": 36311, "FileHash-MD5": 1630, "FileHash-SHA1": 418, "hostname": 18190 }, "indicator_count": 122850, "is_author": false, "is_subscribing": null, "subscriber_count": 144, "modified_text": "351 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "computersupportexperts.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "computersupportexperts.com", "found": true, "verdict": "malicious", "url_count": 100, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "https://computersupportexperts.com/css/cab/1%20(43).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(66).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(56).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(28).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(8).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(82).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(65).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(63).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(34).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] }, { "url": "https://computersupportexperts.com/css/cab/1%20(41).vbs", "status": "offline", "threat": "malware_download", "date_added": "2024-02-21", "tags": [ "DarkGate", "opendir", "vbs" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780225848.9937165 }