{
  "type": "URL",
  "indicator": "http://test.docaccess.com",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "http://test.docaccess.com",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 4286605943,
      "indicator": "http://test.docaccess.com",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 2,
      "pulses": [
        {
          "id": "69e940361a6e8be7e02ffe5d",
          "name": "URL_File_Delivery clone by octoseek",
          "description": "",
          "modified": "2026-05-22T23:04:42.859000",
          "created": "2026-04-22T21:40:06.671000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "64d9d1b920c9b43c1885b2e4",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1644,
            "domain": 386,
            "hostname": 535,
            "FileHash-SHA256": 609,
            "email": 5,
            "URI": 9,
            "FilePath": 1,
            "FileHash-SHA1": 8,
            "FileHash-MD5": 24
          },
          "indicator_count": 3221,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "9 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6a03cc521e13c5d6d34555d0",
          "name": "Judgement Day. VirusTotal report                    for index.html",
          "description": "[Apple.com has sent a series of \"fl flushMessages\" to its servers, but what exactly is the data and what is it going to get out of the system and how does it feel?]",
          "modified": "2026-05-15T10:22:00.139000",
          "created": "2026-05-13T00:56:50.182000",
          "tags": [
            "darwin kernel",
            "version",
            "wed feb",
            "apfs4kobjs",
            "instagram",
            "mosaic",
            "free",
            "get http",
            "dns resolutions",
            "ip traffic",
            "pattern domains",
            "memory pattern",
            "urls https",
            "tls sni",
            "algorithm",
            "key identifier",
            "x509v3 subject",
            "v3 serial",
            "number",
            "cus olet",
            "encrypt cnr13",
            "validity",
            "subject public",
            "key info",
            "performs dns",
            "https",
            "urls",
            "united",
            "mitre attack",
            "network info",
            "processes extra",
            "t1055 process",
            "layer protocol",
            "overview",
            "phishing",
            "defense evasion",
            "next",
            "default",
            "parent pid",
            "full path",
            "command line",
            "k netsvcs",
            "k localservice",
            "s w32time",
            "event provider",
            "device",
            "registry keys"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1095",
              "name": "Non-Application Layer Protocol",
              "display_name": "T1095 - Non-Application Layer Protocol"
            },
            {
              "id": "T1573",
              "name": "Encrypted Channel",
              "display_name": "T1573 - Encrypted Channel"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 132,
            "FileHash-MD5": 43,
            "FileHash-SHA1": 6,
            "hostname": 364,
            "IPv4": 75,
            "URL": 574,
            "Mutex": 1,
            "FileHash-SHA256": 404
          },
          "indicator_count": 1599,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "17 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 3399
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/docaccess.com",
    "whois": "http://whois.domaintools.com/docaccess.com",
    "domain": "docaccess.com",
    "hostname": "test.docaccess.com"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 2,
  "pulses": [
    {
      "id": "69e940361a6e8be7e02ffe5d",
      "name": "URL_File_Delivery clone by octoseek",
      "description": "",
      "modified": "2026-05-22T23:04:42.859000",
      "created": "2026-04-22T21:40:06.671000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "64d9d1b920c9b43c1885b2e4",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1644,
        "domain": 386,
        "hostname": 535,
        "FileHash-SHA256": 609,
        "email": 5,
        "URI": 9,
        "FilePath": 1,
        "FileHash-SHA1": 8,
        "FileHash-MD5": 24
      },
      "indicator_count": 3221,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "9 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6a03cc521e13c5d6d34555d0",
      "name": "Judgement Day. VirusTotal report                    for index.html",
      "description": "[Apple.com has sent a series of \"fl flushMessages\" to its servers, but what exactly is the data and what is it going to get out of the system and how does it feel?]",
      "modified": "2026-05-15T10:22:00.139000",
      "created": "2026-05-13T00:56:50.182000",
      "tags": [
        "darwin kernel",
        "version",
        "wed feb",
        "apfs4kobjs",
        "instagram",
        "mosaic",
        "free",
        "get http",
        "dns resolutions",
        "ip traffic",
        "pattern domains",
        "memory pattern",
        "urls https",
        "tls sni",
        "algorithm",
        "key identifier",
        "x509v3 subject",
        "v3 serial",
        "number",
        "cus olet",
        "encrypt cnr13",
        "validity",
        "subject public",
        "key info",
        "performs dns",
        "https",
        "urls",
        "united",
        "mitre attack",
        "network info",
        "processes extra",
        "t1055 process",
        "layer protocol",
        "overview",
        "phishing",
        "defense evasion",
        "next",
        "default",
        "parent pid",
        "full path",
        "command line",
        "k netsvcs",
        "k localservice",
        "s w32time",
        "event provider",
        "device",
        "registry keys"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1082",
          "name": "System Information Discovery",
          "display_name": "T1082 - System Information Discovery"
        },
        {
          "id": "T1095",
          "name": "Non-Application Layer Protocol",
          "display_name": "T1095 - Non-Application Layer Protocol"
        },
        {
          "id": "T1573",
          "name": "Encrypted Channel",
          "display_name": "T1573 - Encrypted Channel"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 132,
        "FileHash-MD5": 43,
        "FileHash-SHA1": 6,
        "hostname": 364,
        "IPv4": 75,
        "URL": 574,
        "Mutex": 1,
        "FileHash-SHA256": 404
      },
      "indicator_count": 1599,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "17 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "http://test.docaccess.com",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "http://test.docaccess.com",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780322531.8504975
}