{ "type": "URL", "indicator": "http://httpd.apache.org/docs/2.4/mod/mod", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "http://httpd.apache.org/docs/2.4/mod/mod", "type": "url", "type_title": "URL", "validation": [ { "source": "whitelist", "message": "Whitelisted domain apache.org", "name": "Whitelisted domain" }, { "source": "majestic", "message": "Whitelisted domain apache.org", "name": "Whitelisted domain" } ], "base_indicator": { "id": 2644226442, "indicator": "http://httpd.apache.org/docs/2.4/mod/mod", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 6, "pulses": [ { "id": "69a9cad6633206ba1204cf8f", "name": "clone school board ", "description": "", "modified": "2026-03-06T11:26:19.137000", "created": "2026-03-05T18:26:30.062000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6211397913dcdae410959042", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2975, "URL": 9041, "domain": 2214, "FileHash-SHA256": 3044, "FileHash-MD5": 280, "FileHash-SHA1": 327, "CIDR": 6, "email": 64, "CVE": 24, "SSLCertFingerprint": 6 }, "indicator_count": 17981, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "88 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69a9cad78745fdea3001aec9", "name": "clone school board ", "description": "", "modified": "2026-03-06T05:11:24.929000", "created": "2026-03-05T18:26:31.303000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6211397913dcdae410959042", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2975, "URL": 9041, "domain": 2214, "FileHash-SHA256": 3044, "FileHash-MD5": 280, "FileHash-SHA1": 327, "CIDR": 6, "email": 64, "CVE": 24, "SSLCertFingerprint": 6 }, "indicator_count": 17981, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "88 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e9819da1f2e8e26e78e", "name": "recallsfschoolboard.org", "description": "", "modified": "2023-12-06T14:00:56.019000", "created": "2023-12-06T14:00:56.019000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 24, "domain": 2214, "URL": 9040, "FileHash-MD5": 280, "FileHash-SHA256": 3044, "hostname": 2973, "FileHash-SHA1": 327, "SSLCertFingerprint": 6, "CIDR": 6, "email": 64 }, "indicator_count": 17978, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624af82db878097aafb2ad04", "name": "http://httpd.apache.org/docs/2.4/mod/mod - cash.app heist", "description": "", "modified": "2022-05-04T00:05:07.263000", "created": "2022-04-04T13:52:45.441000", "tags": [ "malicious", "february", "network traffic", "http header", "ascii text", "v2 document", "tcp traffic", "http://httpd.apache.org/docs/2.4/mod/mod" ], "references": [ "https://hybrid-analysis.com/sample/4e3ed633910fc5460b9656a1e9261b4fdf4f7763c6f3ccc20bc531603f57bbad/62412185709f4349fb184d73" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 152, "hostname": 68, "domain": 31, "email": 3, "FileHash-SHA256": 139, "FileHash-MD5": 44, "FileHash-SHA1": 40, "CVE": 1 }, "indicator_count": 478, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1490 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624120c8ddde75b853bd96d0", "name": "213.246.45.63 Ip hitting my blog", "description": "", "modified": "2022-04-27T00:03:12.448000", "created": "2022-03-28T02:43:20.720000", "tags": [ "div div", "ubuntu", "ffffff", "a domains", "apache2 ubuntu", "default page", "ubuntu date", "gmt content", "gmt etag", "sn as21409", "open", "span", "config" ], "references": [ "SN AS21409 Ikoula Net SAS Related Pulses None Related Tags None Indicator Facts Running webserver Running SSH Open Ports 4 Open Ports 22 , 80 , 443 , 8080 Certificate Issuer C=GB, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA Certificate Subject CN=*.fonts.ninja External Resources Whois, VirusTotal Analysis Related Pulses Comments (0)", "HTTP Scans RECORD VALUE 80 Title\tApache2 Ubuntu Default Page: It works 80 A Domains\thttpd.apache.org 80 A Domains\tbugs.launchpad.net 80 Body\tDOCTYPE html PUBLIC //W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1 transitional.dtd html xmlns= http://www.w3.org/1999/xhtml Modified from the Debian original for Ubuntu Last updated: 2016 11 16 See: https://launchpad.net/bugs/1288690 head meta http equiv= Content Type content= text/html charset=UTF 8 / title Apache2 Ubuntu Default Page: I" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 3, "hostname": 4, "domain": 2, "URL": 9 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1497 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211397913dcdae410959042", "name": "recallsfschoolboard.org", "description": "garry tan has no hand", "modified": "2022-03-26T19:02:17.827000", "created": "2022-02-19T18:39:53.002000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2973, "URL": 9040, "domain": 2214, "FileHash-SHA256": 3044, "FileHash-MD5": 280, "FileHash-SHA1": 327, "CIDR": 6, "email": 64, "CVE": 24, "SSLCertFingerprint": 6 }, "indicator_count": 17978, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "1528 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://hybrid-analysis.com/sample/4e3ed633910fc5460b9656a1e9261b4fdf4f7763c6f3ccc20bc531603f57bbad/62412185709f4349fb184d73", "SN AS21409 Ikoula Net SAS Related Pulses None Related Tags None Indicator Facts Running webserver Running SSH Open Ports 4 Open Ports 22 , 80 , 443 , 8080 Certificate Issuer C=GB, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA Certificate Subject CN=*.fonts.ninja External Resources Whois, VirusTotal Analysis Related Pulses Comments (0)", "HTTP Scans RECORD VALUE 80 Title\tApache2 Ubuntu Default Page: It works 80 A Domains\thttpd.apache.org 80 A Domains\tbugs.launchpad.net 80 Body\tDOCTYPE html PUBLIC //W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1 transitional.dtd html xmlns= http://www.w3.org/1999/xhtml Modified from the Debian original for Ubuntu Last updated: 2016 11 16 See: https://launchpad.net/bugs/1288690 head meta http equiv= Content Type content= text/html charset=UTF 8 / title Apache2 Ubuntu Default Page: I" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 18703 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/apache.org", "whois": "http://whois.domaintools.com/apache.org", "domain": "apache.org", "hostname": "httpd.apache.org" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 6, "pulses": [ { "id": "69a9cad6633206ba1204cf8f", "name": "clone school board ", "description": "", "modified": "2026-03-06T11:26:19.137000", "created": "2026-03-05T18:26:30.062000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6211397913dcdae410959042", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2975, "URL": 9041, "domain": 2214, "FileHash-SHA256": 3044, "FileHash-MD5": 280, "FileHash-SHA1": 327, "CIDR": 6, "email": 64, "CVE": 24, "SSLCertFingerprint": 6 }, "indicator_count": 17981, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "88 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69a9cad78745fdea3001aec9", "name": "clone school board ", "description": "", "modified": "2026-03-06T05:11:24.929000", "created": "2026-03-05T18:26:31.303000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6211397913dcdae410959042", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2975, "URL": 9041, "domain": 2214, "FileHash-SHA256": 3044, "FileHash-MD5": 280, "FileHash-SHA1": 327, "CIDR": 6, "email": 64, "CVE": 24, "SSLCertFingerprint": 6 }, "indicator_count": 17981, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "88 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e9819da1f2e8e26e78e", "name": "recallsfschoolboard.org", "description": "", "modified": "2023-12-06T14:00:56.019000", "created": "2023-12-06T14:00:56.019000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 24, "domain": 2214, "URL": 9040, "FileHash-MD5": 280, "FileHash-SHA256": 3044, "hostname": 2973, "FileHash-SHA1": 327, "SSLCertFingerprint": 6, "CIDR": 6, "email": 64 }, "indicator_count": 17978, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "908 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624af82db878097aafb2ad04", "name": "http://httpd.apache.org/docs/2.4/mod/mod - cash.app heist", "description": "", "modified": "2022-05-04T00:05:07.263000", "created": "2022-04-04T13:52:45.441000", "tags": [ "malicious", "february", "network traffic", "http header", "ascii text", "v2 document", "tcp traffic", "http://httpd.apache.org/docs/2.4/mod/mod" ], "references": [ "https://hybrid-analysis.com/sample/4e3ed633910fc5460b9656a1e9261b4fdf4f7763c6f3ccc20bc531603f57bbad/62412185709f4349fb184d73" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 152, "hostname": 68, "domain": 31, "email": 3, "FileHash-SHA256": 139, "FileHash-MD5": 44, "FileHash-SHA1": 40, "CVE": 1 }, "indicator_count": 478, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1490 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624120c8ddde75b853bd96d0", "name": "213.246.45.63 Ip hitting my blog", "description": "", "modified": "2022-04-27T00:03:12.448000", "created": "2022-03-28T02:43:20.720000", "tags": [ "div div", "ubuntu", "ffffff", "a domains", "apache2 ubuntu", "default page", "ubuntu date", "gmt content", "gmt etag", "sn as21409", "open", "span", "config" ], "references": [ "SN AS21409 Ikoula Net SAS Related Pulses None Related Tags None Indicator Facts Running webserver Running SSH Open Ports 4 Open Ports 22 , 80 , 443 , 8080 Certificate Issuer C=GB, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA Certificate Subject CN=*.fonts.ninja External Resources Whois, VirusTotal Analysis Related Pulses Comments (0)", "HTTP Scans RECORD VALUE 80 Title\tApache2 Ubuntu Default Page: It works 80 A Domains\thttpd.apache.org 80 A Domains\tbugs.launchpad.net 80 Body\tDOCTYPE html PUBLIC //W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1 transitional.dtd html xmlns= http://www.w3.org/1999/xhtml Modified from the Debian original for Ubuntu Last updated: 2016 11 16 See: https://launchpad.net/bugs/1288690 head meta http equiv= Content Type content= text/html charset=UTF 8 / title Apache2 Ubuntu Default Page: I" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 3, "hostname": 4, "domain": 2, "URL": 9 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1497 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211397913dcdae410959042", "name": "recallsfschoolboard.org", "description": "garry tan has no hand", "modified": "2022-03-26T19:02:17.827000", "created": "2022-02-19T18:39:53.002000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2973, "URL": 9040, "domain": 2214, "FileHash-SHA256": 3044, "FileHash-MD5": 280, "FileHash-SHA1": 327, "CIDR": 6, "email": 64, "CVE": 24, "SSLCertFingerprint": 6 }, "indicator_count": 17978, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "1528 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "http://httpd.apache.org/docs/2.4/mod/mod", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "http://httpd.apache.org/docs/2.4/mod/mod", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780400704.784801 }