{ "type": "Domain", "indicator": "hcsnet.com.br", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/hcsnet.com.br", "alexa": "http://www.alexa.com/siteinfo/hcsnet.com.br", "indicator": "hcsnet.com.br", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 31150942, "indicator": "hcsnet.com.br", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 6, "pulses": [ { "id": "69891e6c45e0e5cd7d52479d", "name": "URLHaus", "description": "", "modified": "2026-03-10T23:00:49.662000", "created": "2026-02-08T23:38:20.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 6, "FileHash-MD5": 19, "FileHash-SHA1": 20, "FileHash-SHA256": 3, "URL": 13688, "domain": 308, "hostname": 399 }, "indicator_count": 14443, "is_author": false, "is_subscribing": null, "subscriber_count": 183, "modified_text": "81 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "617b077ce406cdbe77852468", "name": "Emotet Indicators (2019)", "description": "", "modified": "2024-02-25T12:49:27.784000", "created": "2021-10-28T20:26:36.132000", "tags": [ "vsoc", "VertekMTI", "Emotet" ], "references": [ "urlhaus.abuse.ch" ], "public": 1, "adversary": "Emotet", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "5c3c9451cdb49e3d43c87ad5", "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "VertekLabs", "id": "168455", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_168455/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 22711, "domain": 3977, "hostname": 1169, "IPv4": 35, "FileHash-MD5": 2, "email": 1 }, "indicator_count": 27895, "is_author": false, "is_subscribing": null, "subscriber_count": 567, "modified_text": "826 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "617b0846f55f583f7f2e5db0", "name": "Emotet Indicators (2017)", "description": "", "modified": "2021-10-28T20:29:58.194000", "created": "2021-10-28T20:29:58.194000", "tags": [ "emotet", "vsoc", "VertekMTI", "malware" ], "references": [ "managedthreatintelligence.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "59788374481b4c7f85f5f814", "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "VertekLabs", "id": "168455", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_168455/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 319, "hostname": 27, "URL": 271, "IPv4": 27, "FileHash-SHA256": 3, "FileHash-MD5": 2 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 563, "modified_text": "1676 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "617b0783016343626f23cb17", "name": "Emotet Indicators (2019)", "description": "", "modified": "2021-10-28T20:26:43.034000", "created": "2021-10-28T20:26:43.034000", "tags": [ "vsoc", "VertekMTI", "Emotet" ], "references": [ "urlhaus.abuse.ch" ], "public": 1, "adversary": "Emotet", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "5c3c9451cdb49e3d43c87ad5", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "VertekLabs", "id": "168455", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_168455/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 22711, "domain": 3978, "hostname": 1169, "IPv4": 35, "FileHash-MD5": 2, "email": 1 }, "indicator_count": 27896, "is_author": false, "is_subscribing": null, "subscriber_count": 565, "modified_text": "1676 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "5c3c9451cdb49e3d43c87ad5", "name": "Vertek - Emotet Indicators (2019)", "description": "Emotet Malware Doc and Payload URLs Parsed from URLHaus Updated 1/21/19", "modified": "2020-11-02T16:20:04.956000", "created": "2019-01-14T13:53:21.652000", "tags": [ "vsoc", "VertekMTI", "Emotet" ], "references": [ "urlhaus.abuse.ch" ], "public": 1, "adversary": "Emotet", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1061, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "vthelpdesk", "id": "1766", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_1766/resized/80/avatar_0be7a35fab.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 22711, "domain": 3978, "hostname": 1169, "IPv4": 35, "FileHash-MD5": 2, "email": 1 }, "indicator_count": 27896, "is_author": false, "is_subscribing": null, "subscriber_count": 686, "modified_text": "2036 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "59788374481b4c7f85f5f814", "name": "Vertek - Emotet Indicators (2017)", "description": "Domains Delivering emotet", "modified": "2018-12-04T18:36:51.187000", "created": "2017-07-26T11:56:36.796000", "tags": [ "emotet", "vsoc", "VertekMTI", "malware" ], "references": [ "managedthreatintelligence.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 32, "upvotes_count": 3.0, "downvotes_count": 0.0, "votes_count": 3.0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "vthelpdesk", "id": "1766", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_1766/resized/80/avatar_0be7a35fab.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 319, "hostname": 27, "URL": 271, "IPv4": 27, "FileHash-SHA256": 3, "FileHash-MD5": 2 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 645, "modified_text": "2735 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "managedthreatintelligence.com", "urlhaus.abuse.ch" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "Emotet" ], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 6, "pulses": [ { "id": "69891e6c45e0e5cd7d52479d", "name": "URLHaus", "description": "", "modified": "2026-03-10T23:00:49.662000", "created": "2026-02-08T23:38:20.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 6, "FileHash-MD5": 19, "FileHash-SHA1": 20, "FileHash-SHA256": 3, "URL": 13688, "domain": 308, "hostname": 399 }, "indicator_count": 14443, "is_author": false, "is_subscribing": null, "subscriber_count": 183, "modified_text": "81 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "617b077ce406cdbe77852468", "name": "Emotet Indicators (2019)", "description": "", "modified": "2024-02-25T12:49:27.784000", "created": "2021-10-28T20:26:36.132000", "tags": [ "vsoc", "VertekMTI", "Emotet" ], "references": [ "urlhaus.abuse.ch" ], "public": 1, "adversary": "Emotet", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "5c3c9451cdb49e3d43c87ad5", "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "VertekLabs", "id": "168455", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_168455/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 22711, "domain": 3977, "hostname": 1169, "IPv4": 35, "FileHash-MD5": 2, "email": 1 }, "indicator_count": 27895, "is_author": false, "is_subscribing": null, "subscriber_count": 567, "modified_text": "826 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "617b0846f55f583f7f2e5db0", "name": "Emotet Indicators (2017)", "description": "", "modified": "2021-10-28T20:29:58.194000", "created": "2021-10-28T20:29:58.194000", "tags": [ "emotet", "vsoc", "VertekMTI", "malware" ], "references": [ "managedthreatintelligence.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "59788374481b4c7f85f5f814", "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "VertekLabs", "id": "168455", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_168455/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 319, "hostname": 27, "URL": 271, "IPv4": 27, "FileHash-SHA256": 3, "FileHash-MD5": 2 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 563, "modified_text": "1676 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "617b0783016343626f23cb17", "name": "Emotet Indicators (2019)", "description": "", "modified": "2021-10-28T20:26:43.034000", "created": "2021-10-28T20:26:43.034000", "tags": [ "vsoc", "VertekMTI", "Emotet" ], "references": [ "urlhaus.abuse.ch" ], "public": 1, "adversary": "Emotet", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "5c3c9451cdb49e3d43c87ad5", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "VertekLabs", "id": "168455", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_168455/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 22711, "domain": 3978, "hostname": 1169, "IPv4": 35, "FileHash-MD5": 2, "email": 1 }, "indicator_count": 27896, "is_author": false, "is_subscribing": null, "subscriber_count": 565, "modified_text": "1676 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "5c3c9451cdb49e3d43c87ad5", "name": "Vertek - Emotet Indicators (2019)", "description": "Emotet Malware Doc and Payload URLs Parsed from URLHaus Updated 1/21/19", "modified": "2020-11-02T16:20:04.956000", "created": "2019-01-14T13:53:21.652000", "tags": [ "vsoc", "VertekMTI", "Emotet" ], "references": [ "urlhaus.abuse.ch" ], "public": 1, "adversary": "Emotet", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1061, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "vthelpdesk", "id": "1766", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_1766/resized/80/avatar_0be7a35fab.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 22711, "domain": 3978, "hostname": 1169, "IPv4": 35, "FileHash-MD5": 2, "email": 1 }, "indicator_count": 27896, "is_author": false, "is_subscribing": null, "subscriber_count": 686, "modified_text": "2036 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "59788374481b4c7f85f5f814", "name": "Vertek - Emotet Indicators (2017)", "description": "Domains Delivering emotet", "modified": "2018-12-04T18:36:51.187000", "created": "2017-07-26T11:56:36.796000", "tags": [ "emotet", "vsoc", "VertekMTI", "malware" ], "references": [ "managedthreatintelligence.com" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 32, "upvotes_count": 3.0, "downvotes_count": 0.0, "votes_count": 3.0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "vthelpdesk", "id": "1766", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_1766/resized/80/avatar_0be7a35fab.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 319, "hostname": 27, "URL": 271, "IPv4": 27, "FileHash-SHA256": 3, "FileHash-MD5": 2 }, "indicator_count": 649, "is_author": false, "is_subscribing": null, "subscriber_count": 645, "modified_text": "2735 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "hcsnet.com.br", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "hcsnet.com.br", "found": true, "verdict": "malicious", "url_count": 10, "online_count": 3, "blacklists": { "spamhaus_dbl": "abused_legit_phishing", "surbl": "listed" }, "urls": [ { "url": "http://hcsnet.com.br/Linux_amd64", "status": "online", "threat": "malware_download", "date_added": "2025-09-08", "tags": [ "GoBrut", "ua-wget" ] }, { "url": "http://hcsnet.com.br/x86", "status": "online", "threat": "malware_download", "date_added": "2025-09-08", "tags": [ "GoBrut", "ua-wget" ] }, { "url": "http://hcsnet.com.br/Linux_x86", "status": "online", "threat": "malware_download", "date_added": "2025-09-08", "tags": [ "GoBrut", "ua-wget" ] }, { "url": "http://hcsnet.com.br/wp-content/emmK/", "status": "offline", "threat": "malware_download", "date_added": "2022-04-28", "tags": [ "dll", "emotet", "epoch4", "heodo" ] }, { "url": "http://hcsnet.com.br/wp-content/zvPeH/?i=1", "status": "offline", "threat": "malware_download", "date_added": "2022-03-30", "tags": [ "c8fc17ff030feb3383d8889f69abbb", "doc", "emotet", "epoch4", "heodo", "SilentBuilder" ] }, { "url": "http://hcsnet.com.br/wp-content/zvPeH/", "status": "offline", "threat": "malware_download", "date_added": "2022-03-30", "tags": [ "emotet", "epoch4", "heodo", "redir-doc", "xls" ] }, { "url": "http://hcsnet.com.br/QIn7l26597670/", "status": "offline", "threat": "malware_download", "date_added": "2020-08-18", "tags": [ "emotet", "epoch3", "exe", "heodo" ] }, { "url": "http://hcsnet.com.br/qvf/", "status": "offline", "threat": "malware_download", "date_added": "2020-07-29", "tags": [ "doc", "emotet", "epoch3", "heodo" ] }, { "url": "http://hcsnet.com.br/kYtn-R6piMyV0ezOMg5L_uBmbydUI-8fF/1ujqo0h8_4bvmxqmm-50307717170842/", "status": "offline", "threat": "malware_download", "date_added": "2019-05-16", "tags": [ "doc", "emotet", "epoch2", "heodo" ] }, { "url": "http://hcsnet.com.br/wp-content/4_C/", "status": "offline", "threat": "malware_download", "date_added": "2019-03-26", "tags": [ "emotet", "epoch2", "exe", "heodo" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780265176.192736 }