{
  "type": "URL",
  "indicator": "https://147.185.221.16:15753",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://147.185.221.16:15753",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 4020528897,
      "indicator": "https://147.185.221.16:15753",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 3,
      "pulses": [
        {
          "id": "687059a339b3b2a79765dbec",
          "name": "inverte",
          "description": "",
          "modified": "2026-02-01T17:53:50.806000",
          "created": "2025-07-11T00:24:03.079000",
          "tags": [],
          "references": [
            "https://github.com/Abjuri5t/SarlackLab/raw/refs/heads/main/IOCs.csv"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "skocherhan",
            "id": "249290",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 10129,
            "URL": 14767,
            "domain": 3421,
            "hostname": 7022,
            "CVE": 7
          },
          "indicator_count": 35346,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 186,
          "modified_text": "120 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "692d400f81164107d98922db",
          "name": "Injector.BO : DNS Reply Sinkhole via Phishing emails , texts , drives or malicious links",
          "description": "\"Phishing threat: This is a phishing website that impersonates a trusted website to trick you into revealing personal or financial information.\";var L_MalwareThreat_TEXT = \"Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons",
          "modified": "2025-12-31T06:01:00.551000",
          "created": "2025-12-01T07:13:19.659000",
          "tags": [
            "url http",
            "url https",
            "urls",
            "files",
            "address",
            "asn as400519",
            "united states",
            "info geo",
            "united",
            "as400519",
            "us note",
            "route",
            "ipv4",
            "live",
            "superdata",
            "viet nam",
            "cisco umbrella",
            "sectigo rsa",
            "secure",
            "google safe",
            "browsing",
            "current dns",
            "a record",
            "input",
            "closenotify",
            "phpsessid value",
            "source level",
            "url text",
            "general full",
            "protocol h2",
            "security tls",
            "ecdhersa",
            "asn45544",
            "reverse dns",
            "resource",
            "hash",
            "as45544",
            "vn note",
            "backdoor",
            "generic",
            "cnc activity",
            "passive dns",
            "ipv4 add",
            "company limited",
            "dnssec",
            "hostname add",
            "learn",
            "ck id",
            "name tactics",
            "suspicious",
            "informative",
            "command",
            "adversaries",
            "defense evasion",
            "t1480 execution",
            "windir",
            "openurl c",
            "prefetch2",
            "analysis",
            "tor analysis",
            "dns requests",
            "domain address",
            "contacted hosts",
            "ip address",
            "vietnam",
            "location viet",
            "nam flag",
            "urlhttp",
            "extracted files",
            "unicode text",
            "utf8 text",
            "lowfihstr",
            "trojan",
            "mtb trojan",
            "spawns",
            "found",
            "process details",
            "flag",
            "contacted",
            "xb6x04x00",
            "t1055",
            "search",
            "read c",
            "cnlolcat",
            "microsoft",
            "medium",
            "entries",
            "unknown",
            "virtool",
            "malware",
            "copy",
            "write",
            "win32",
            "next",
            "url add",
            "http",
            "hostname",
            "files domain",
            "files related",
            "related tags",
            "china unknown",
            "creation date",
            "body",
            "please",
            "x msedge",
            "tracking"
          ],
          "references": [
            "anonsecbotnet.cameraddns.net",
            "https://api.playit.gg/agents/routing/get",
            "http://www.google.com-viruswall1-source-cloud-computing-services-distribution.cpdev.dyson.cn/",
            "https://www.endgamesystems.com/",
            "IDS Detections : DNS Rep Sinkhole - Microsoft - 199.2.137.0/24"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [
            {
              "id": "Trojan:MSIL/Ranos.A",
              "display_name": "Trojan:MSIL/Ranos.A",
              "target": "/malware/Trojan:MSIL/Ranos.A"
            },
            {
              "id": "Trojan:MSIL/ClipBanker.GC!MTB",
              "display_name": "Trojan:MSIL/ClipBanker.GC!MTB",
              "target": "/malware/Trojan:MSIL/ClipBanker.GC!MTB"
            },
            {
              "id": "Win.Packed.Msilperseus-9956592-0",
              "display_name": "Win.Packed.Msilperseus-9956592-0",
              "target": null
            },
            {
              "id": "ALF:Backdoor:MSIL/Noancooe.",
              "display_name": "ALF:Backdoor:MSIL/Noancooe.",
              "target": null
            },
            {
              "id": "Win.Trojan.Generic-6417450-0",
              "display_name": "Win.Trojan.Generic-6417450-0",
              "target": null
            },
            {
              "id": "Win.Packed.Bladabindi-6872770-0",
              "display_name": "Win.Packed.Bladabindi-6872770-0",
              "target": null
            },
            {
              "id": "#LowFiHSTR:MSIL/Confuser",
              "display_name": "#LowFiHSTR:MSIL/Confuser",
              "target": "/malware/#LowFiHSTR:MSIL/Confuser"
            },
            {
              "id": "Win.Dropper.njRAT-10015886-0",
              "display_name": "Win.Dropper.njRAT-10015886-0",
              "target": null
            },
            {
              "id": "Backdoor:MSIL/Bladabindi.AP",
              "display_name": "Backdoor:MSIL/Bladabindi.AP",
              "target": "/malware/Backdoor:MSIL/Bladabindi.AP"
            },
            {
              "id": "Win.Packed.Generic-9795615-0",
              "display_name": "Win.Packed.Generic-9795615-0",
              "target": null
            },
            {
              "id": "Win.Packed.Generic-9795615-0",
              "display_name": "Win.Packed.Generic-9795615-0",
              "target": null
            },
            {
              "id": "Win.Packed.Fecn-7077459-0",
              "display_name": "Win.Packed.Fecn-7077459-0",
              "target": null
            },
            {
              "id": "Win.Packed.Marsilia-10021147-0",
              "display_name": "Win.Packed.Marsilia-10021147-0",
              "target": null
            },
            {
              "id": "VirTool:Win32/Injector.BO",
              "display_name": "VirTool:Win32/Injector.BO",
              "target": "/malware/VirTool:Win32/Injector.BO"
            }
          ],
          "attack_ids": [
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1057",
              "name": "Process Discovery",
              "display_name": "T1057 - Process Discovery"
            },
            {
              "id": "T1069",
              "name": "Permission Groups Discovery",
              "display_name": "T1069 - Permission Groups Discovery"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1105",
              "name": "Ingress Tool Transfer",
              "display_name": "T1105 - Ingress Tool Transfer"
            },
            {
              "id": "T1480",
              "name": "Execution Guardrails",
              "display_name": "T1480 - Execution Guardrails"
            },
            {
              "id": "T1045",
              "name": "Software Packing",
              "display_name": "T1045 - Software Packing"
            },
            {
              "id": "T1053",
              "name": "Scheduled Task/Job",
              "display_name": "T1053 - Scheduled Task/Job"
            },
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1060",
              "name": "Registry Run Keys / Startup Folder",
              "display_name": "T1060 - Registry Run Keys / Startup Folder"
            },
            {
              "id": "T1129",
              "name": "Shared Modules",
              "display_name": "T1129 - Shared Modules"
            },
            {
              "id": "T1512",
              "name": "Capture Camera",
              "display_name": "T1512 - Capture Camera"
            },
            {
              "id": "T1578.001",
              "name": "Create Snapshot",
              "display_name": "T1578.001 - Create Snapshot"
            },
            {
              "id": "T1071.004",
              "name": "DNS",
              "display_name": "T1071.004 - DNS"
            },
            {
              "id": "T1011",
              "name": "Exfiltration Over Other Network Medium",
              "display_name": "T1011 - Exfiltration Over Other Network Medium"
            },
            {
              "id": "T1566",
              "name": "Phishing",
              "display_name": "T1566 - Phishing"
            },
            {
              "id": "TA0011",
              "name": "Command and Control",
              "display_name": "TA0011 - Command and Control"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1610,
            "domain": 147,
            "hostname": 501,
            "FileHash-SHA256": 384,
            "CIDR": 3,
            "FileHash-MD5": 79,
            "FileHash-SHA1": 77,
            "email": 3,
            "SSLCertFingerprint": 1
          },
          "indicator_count": 2805,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 142,
          "modified_text": "152 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6775b17c488523ee9d290afd",
          "name": "agressive extra",
          "description": "",
          "modified": "2025-03-17T22:57:49.933000",
          "created": "2025-01-01T21:19:56.847000",
          "tags": [],
          "references": [
            "https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.rules"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 20,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "skocherhan",
            "id": "249290",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 35208,
            "URL": 79504,
            "domain": 19527,
            "hostname": 28058,
            "CVE": 9
          },
          "indicator_count": 162306,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 207,
          "modified_text": "440 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://www.endgamesystems.com/",
        "https://api.playit.gg/agents/routing/get",
        "http://www.google.com-viruswall1-source-cloud-computing-services-distribution.cpdev.dyson.cn/",
        "https://github.com/Abjuri5t/SarlackLab/raw/refs/heads/main/IOCs.csv",
        "https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.rules",
        "anonsecbotnet.cameraddns.net",
        "IDS Detections : DNS Rep Sinkhole - Microsoft - 199.2.137.0/24"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Win.packed.fecn-7077459-0",
            "Alf:backdoor:msil/noancooe.",
            "Win.packed.bladabindi-6872770-0",
            "Trojan:msil/ranos.a",
            "Win.dropper.njrat-10015886-0",
            "#lowfihstr:msil/confuser",
            "Win.trojan.generic-6417450-0",
            "Win.packed.msilperseus-9956592-0",
            "Win.packed.generic-9795615-0",
            "Virtool:win32/injector.bo",
            "Trojan:msil/clipbanker.gc!mtb",
            "Win.packed.marsilia-10021147-0",
            "Backdoor:msil/bladabindi.ap"
          ],
          "industries": [],
          "unique_indicators": 204486
        }
      }
    },
    "false_positive": [],
    "alexa": "",
    "whois": "http://whois.domaintools.com/147.185.221.16",
    "domain": "Unavailable",
    "hostname": "Unavailable"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 3,
  "pulses": [
    {
      "id": "687059a339b3b2a79765dbec",
      "name": "inverte",
      "description": "",
      "modified": "2026-02-01T17:53:50.806000",
      "created": "2025-07-11T00:24:03.079000",
      "tags": [],
      "references": [
        "https://github.com/Abjuri5t/SarlackLab/raw/refs/heads/main/IOCs.csv"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "skocherhan",
        "id": "249290",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 10129,
        "URL": 14767,
        "domain": 3421,
        "hostname": 7022,
        "CVE": 7
      },
      "indicator_count": 35346,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 186,
      "modified_text": "120 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "692d400f81164107d98922db",
      "name": "Injector.BO : DNS Reply Sinkhole via Phishing emails , texts , drives or malicious links",
      "description": "\"Phishing threat: This is a phishing website that impersonates a trusted website to trick you into revealing personal or financial information.\";var L_MalwareThreat_TEXT = \"Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons",
      "modified": "2025-12-31T06:01:00.551000",
      "created": "2025-12-01T07:13:19.659000",
      "tags": [
        "url http",
        "url https",
        "urls",
        "files",
        "address",
        "asn as400519",
        "united states",
        "info geo",
        "united",
        "as400519",
        "us note",
        "route",
        "ipv4",
        "live",
        "superdata",
        "viet nam",
        "cisco umbrella",
        "sectigo rsa",
        "secure",
        "google safe",
        "browsing",
        "current dns",
        "a record",
        "input",
        "closenotify",
        "phpsessid value",
        "source level",
        "url text",
        "general full",
        "protocol h2",
        "security tls",
        "ecdhersa",
        "asn45544",
        "reverse dns",
        "resource",
        "hash",
        "as45544",
        "vn note",
        "backdoor",
        "generic",
        "cnc activity",
        "passive dns",
        "ipv4 add",
        "company limited",
        "dnssec",
        "hostname add",
        "learn",
        "ck id",
        "name tactics",
        "suspicious",
        "informative",
        "command",
        "adversaries",
        "defense evasion",
        "t1480 execution",
        "windir",
        "openurl c",
        "prefetch2",
        "analysis",
        "tor analysis",
        "dns requests",
        "domain address",
        "contacted hosts",
        "ip address",
        "vietnam",
        "location viet",
        "nam flag",
        "urlhttp",
        "extracted files",
        "unicode text",
        "utf8 text",
        "lowfihstr",
        "trojan",
        "mtb trojan",
        "spawns",
        "found",
        "process details",
        "flag",
        "contacted",
        "xb6x04x00",
        "t1055",
        "search",
        "read c",
        "cnlolcat",
        "microsoft",
        "medium",
        "entries",
        "unknown",
        "virtool",
        "malware",
        "copy",
        "write",
        "win32",
        "next",
        "url add",
        "http",
        "hostname",
        "files domain",
        "files related",
        "related tags",
        "china unknown",
        "creation date",
        "body",
        "please",
        "x msedge",
        "tracking"
      ],
      "references": [
        "anonsecbotnet.cameraddns.net",
        "https://api.playit.gg/agents/routing/get",
        "http://www.google.com-viruswall1-source-cloud-computing-services-distribution.cpdev.dyson.cn/",
        "https://www.endgamesystems.com/",
        "IDS Detections : DNS Rep Sinkhole - Microsoft - 199.2.137.0/24"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [
        {
          "id": "Trojan:MSIL/Ranos.A",
          "display_name": "Trojan:MSIL/Ranos.A",
          "target": "/malware/Trojan:MSIL/Ranos.A"
        },
        {
          "id": "Trojan:MSIL/ClipBanker.GC!MTB",
          "display_name": "Trojan:MSIL/ClipBanker.GC!MTB",
          "target": "/malware/Trojan:MSIL/ClipBanker.GC!MTB"
        },
        {
          "id": "Win.Packed.Msilperseus-9956592-0",
          "display_name": "Win.Packed.Msilperseus-9956592-0",
          "target": null
        },
        {
          "id": "ALF:Backdoor:MSIL/Noancooe.",
          "display_name": "ALF:Backdoor:MSIL/Noancooe.",
          "target": null
        },
        {
          "id": "Win.Trojan.Generic-6417450-0",
          "display_name": "Win.Trojan.Generic-6417450-0",
          "target": null
        },
        {
          "id": "Win.Packed.Bladabindi-6872770-0",
          "display_name": "Win.Packed.Bladabindi-6872770-0",
          "target": null
        },
        {
          "id": "#LowFiHSTR:MSIL/Confuser",
          "display_name": "#LowFiHSTR:MSIL/Confuser",
          "target": "/malware/#LowFiHSTR:MSIL/Confuser"
        },
        {
          "id": "Win.Dropper.njRAT-10015886-0",
          "display_name": "Win.Dropper.njRAT-10015886-0",
          "target": null
        },
        {
          "id": "Backdoor:MSIL/Bladabindi.AP",
          "display_name": "Backdoor:MSIL/Bladabindi.AP",
          "target": "/malware/Backdoor:MSIL/Bladabindi.AP"
        },
        {
          "id": "Win.Packed.Generic-9795615-0",
          "display_name": "Win.Packed.Generic-9795615-0",
          "target": null
        },
        {
          "id": "Win.Packed.Generic-9795615-0",
          "display_name": "Win.Packed.Generic-9795615-0",
          "target": null
        },
        {
          "id": "Win.Packed.Fecn-7077459-0",
          "display_name": "Win.Packed.Fecn-7077459-0",
          "target": null
        },
        {
          "id": "Win.Packed.Marsilia-10021147-0",
          "display_name": "Win.Packed.Marsilia-10021147-0",
          "target": null
        },
        {
          "id": "VirTool:Win32/Injector.BO",
          "display_name": "VirTool:Win32/Injector.BO",
          "target": "/malware/VirTool:Win32/Injector.BO"
        }
      ],
      "attack_ids": [
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1057",
          "name": "Process Discovery",
          "display_name": "T1057 - Process Discovery"
        },
        {
          "id": "T1069",
          "name": "Permission Groups Discovery",
          "display_name": "T1069 - Permission Groups Discovery"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1105",
          "name": "Ingress Tool Transfer",
          "display_name": "T1105 - Ingress Tool Transfer"
        },
        {
          "id": "T1480",
          "name": "Execution Guardrails",
          "display_name": "T1480 - Execution Guardrails"
        },
        {
          "id": "T1045",
          "name": "Software Packing",
          "display_name": "T1045 - Software Packing"
        },
        {
          "id": "T1053",
          "name": "Scheduled Task/Job",
          "display_name": "T1053 - Scheduled Task/Job"
        },
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1060",
          "name": "Registry Run Keys / Startup Folder",
          "display_name": "T1060 - Registry Run Keys / Startup Folder"
        },
        {
          "id": "T1129",
          "name": "Shared Modules",
          "display_name": "T1129 - Shared Modules"
        },
        {
          "id": "T1512",
          "name": "Capture Camera",
          "display_name": "T1512 - Capture Camera"
        },
        {
          "id": "T1578.001",
          "name": "Create Snapshot",
          "display_name": "T1578.001 - Create Snapshot"
        },
        {
          "id": "T1071.004",
          "name": "DNS",
          "display_name": "T1071.004 - DNS"
        },
        {
          "id": "T1011",
          "name": "Exfiltration Over Other Network Medium",
          "display_name": "T1011 - Exfiltration Over Other Network Medium"
        },
        {
          "id": "T1566",
          "name": "Phishing",
          "display_name": "T1566 - Phishing"
        },
        {
          "id": "TA0011",
          "name": "Command and Control",
          "display_name": "TA0011 - Command and Control"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1610,
        "domain": 147,
        "hostname": 501,
        "FileHash-SHA256": 384,
        "CIDR": 3,
        "FileHash-MD5": 79,
        "FileHash-SHA1": 77,
        "email": 3,
        "SSLCertFingerprint": 1
      },
      "indicator_count": 2805,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 142,
      "modified_text": "152 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6775b17c488523ee9d290afd",
      "name": "agressive extra",
      "description": "",
      "modified": "2025-03-17T22:57:49.933000",
      "created": "2025-01-01T21:19:56.847000",
      "tags": [],
      "references": [
        "https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.rules"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 20,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "skocherhan",
        "id": "249290",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 35208,
        "URL": 79504,
        "domain": 19527,
        "hostname": 28058,
        "CVE": 9
      },
      "indicator_count": 162306,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 207,
      "modified_text": "440 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://147.185.221.16:15753",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://147.185.221.16:15753",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780338021.1941905
}