{
  "type": "URL",
  "indicator": "https://52.3b.089f.ip4.static.sl-reverse.com",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://52.3b.089f.ip4.static.sl-reverse.com",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 3411318333,
      "indicator": "https://52.3b.089f.ip4.static.sl-reverse.com",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 8,
      "pulses": [
        {
          "id": "65708fb744b759b0ba42d5f6",
          "name": "houston.... I think we have a problem  - i dunno know where hell begins or ends anymore",
          "description": "",
          "modified": "2023-12-06T15:13:59.984000",
          "created": "2023-12-06T15:13:59.984000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 3027,
            "hostname": 1561,
            "URL": 7817,
            "domain": 638,
            "email": 1
          },
          "indicator_count": 13044,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "865 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708e5ea05c09e3364f11cd",
          "name": "184.173.179.55 asn36351 theplanet.com 16-1-2016",
          "description": "",
          "modified": "2023-12-06T15:08:14.591000",
          "created": "2023-12-06T15:08:14.591000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1058,
            "domain": 167,
            "hostname": 866,
            "URL": 3191,
            "CVE": 1
          },
          "indicator_count": 5283,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "865 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708c1c5e2cc4dfe8d0ed97",
          "name": "CPANEL-TUCOWS \u2014malware hosting",
          "description": "",
          "modified": "2023-12-06T14:58:36.254000",
          "created": "2023-12-06T14:58:36.254000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 815,
            "hostname": 3487,
            "domain": 1182,
            "URL": 10194,
            "FileHash-MD5": 3,
            "FileHash-SHA1": 1
          },
          "indicator_count": 15682,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 111,
          "modified_text": "865 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708a434c8bf557c17688e0",
          "name": "This is SPYWARE - Stealth Persistent Obfuscated Evolved over min 7 years",
          "description": "",
          "modified": "2023-12-06T14:50:43.331000",
          "created": "2023-12-06T14:50:43.331000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 2041,
            "domain": 1552,
            "URL": 3523,
            "hostname": 2430,
            "CVE": 1,
            "FileHash-MD5": 11,
            "FileHash-SHA1": 3
          },
          "indicator_count": 9561,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 111,
          "modified_text": "865 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "62b70cd2f4eea868db4aed29",
          "name": "houston.... I think we have a problem  - i dunno know where hell begins or ends anymore",
          "description": "should we create a new cc ? maybe RuKrCn",
          "modified": "2022-07-25T00:04:42.145000",
          "created": "2022-06-25T13:25:38.439000",
          "tags": [],
          "references": [
            "https://www.virustotal.com/graph/embed/g197a8ab9e32b4ad287432f2c66b98cd12d25427f4acd4696a93447988db3f5c7"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "dorkingbeauty1",
            "id": "80137",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 7817,
            "FileHash-SHA256": 3027,
            "hostname": 1561,
            "domain": 638,
            "email": 1
          },
          "indicator_count": 13044,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 396,
          "modified_text": "1364 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6282e4efa1c1999e0091a9b0",
          "name": "184.173.179.55 asn36351 theplanet.com 16-1-2016",
          "description": "",
          "modified": "2022-06-15T00:01:21.489000",
          "created": "2022-05-16T23:57:35.661000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "dorkingbeauty1",
            "id": "80137",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 3191,
            "hostname": 866,
            "FileHash-SHA256": 1058,
            "domain": 167,
            "CVE": 1
          },
          "indicator_count": 5283,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 392,
          "modified_text": "1404 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "625f6d2300f3002b1d0f8a68",
          "name": "CPANEL-TUCOWS \u2014malware hosting",
          "description": "FBEvents-PostalCodeType, a new type of phone number type, has been added to the list of \"signals\" that can be controlled by a specialised operator.",
          "modified": "2022-05-19T00:00:49.028000",
          "created": "2022-04-20T02:17:07.272000",
          "tags": [
            "tucows",
            "vimeo",
            "enter otp",
            "foruserlogin",
            "username",
            "email address",
            "phone number",
            "click",
            "null",
            "otpviamail",
            "otpviasms",
            "error",
            "regexp",
            "edge",
            "elem",
            "function",
            "handle",
            "return",
            "expando",
            "match",
            "selector",
            "android",
            "false",
            "date",
            "target",
            "class",
            "mark",
            "copy",
            "capture",
            "seed",
            "pass",
            "enough",
            "code",
            "never",
            "core",
            "local",
            "verify",
            "fall",
            "accept",
            "done",
            "find",
            "internal",
            "inject",
            "possible",
            "prop",
            "trigger",
            "qe",
            "number",
            "string",
            "copyright",
            "uint8array",
            "xhfunction",
            "yhfunction",
            "gtmwrdf3cb",
            "host",
            "path",
            "gaugescookie",
            "gaugesuniqueday",
            "gaugesgauges",
            "slice",
            "image",
            "gaugestracker",
            "gaugesunique",
            "script",
            "closure library",
            "typeerror",
            "symbol",
            "array int8array",
            "caregexp",
            "legacy",
            "extra",
            "bootstrap",
            "medium",
            "large",
            "segoe ui",
            "roboto",
            "oxygensans",
            "ubuntu",
            "cantarell",
            "helvetica neue",
            "dataalignleft",
            "figcaption",
            "video",
            "ff6c2c",
            "styles",
            "badges",
            "small",
            "woff2",
            "fontface",
            "sans",
            "u1c801c88",
            "u20b4",
            "u2de02dff",
            "ua640a69f",
            "ufe2efe2f",
            "u04b004b1",
            "u2116",
            "arial",
            "helvetica",
            "montserrat",
            "productnav",
            "secondarynav",
            "typecheckbox",
            "menlo",
            "monaco",
            "consolas",
            "twitter",
            "font awesome",
            "license",
            "brands",
            "duotone",
            "msie",
            "russia",
            "paypal",
            "enduser license",
            "agreement",
            "europe",
            "typeof t",
            "typeof e",
            "typeof",
            "version",
            "attr",
            "pseudo",
            "object",
            "array",
            "invalid attempt",
            "typeof symbol",
            "survey",
            "trident",
            "form",
            "fullscreen",
            "property",
            "311218982",
            "textjavascript",
            "piscriptnum",
            "hj",
            "hotjar",
            "email",
            "telefon",
            "meta",
            "cookie",
            "keypress",
            "live",
            "generic",
            "window",
            "widget",
            "ciudad",
            "adore",
            "experiment",
            "mutation",
            "udc66udc67",
            "ud83d",
            "ufe0f",
            "ud83e",
            "udc68udc69",
            "udfcbudfcc",
            "u2640u2642",
            "source",
            "ud83dudc6cud83c",
            "cookiebot",
            "iabv2",
            "jsonversion",
            "cookie script",
            "methodstrict",
            "ticket",
            "id attribute",
            "cookiebot setup",
            "cookieconsent",
            "project",
            "reduceright",
            "trackevent",
            "pageview",
            "gtmwb4lhq4",
            "void",
            "pfunction",
            "contenttype",
            "zfunction",
            "bfunction",
            "mvoid",
            "ofunction",
            "thank",
            "f39c11",
            "quick question",
            "difficult",
            "easy",
            "poll",
            "typeof window",
            "invalid uuid",
            "functional",
            "member",
            "hnew regexp",
            "qfunction",
            "adview",
            "addbillinginfo",
            "addtocart",
            "addtolist",
            "contact",
            "download",
            "install",
            "signup",
            "addtowishlist",
            "lead",
            "custom",
            "typeof require",
            "sha256",
            "viewcontent",
            "search",
            "iterator",
            "boolean",
            "service",
            "phonenumber",
            "facebook",
            "javascript",
            "1cend"
          ],
          "references": [
            "xfe-URL-Cpanel.com-stix2-2.1-export.json",
            "https://pi.pardot.com/pd.js",
            "https://connect.facebook.net/signals/config/285857426541675?v=2.9.57&r=stable",
            "https://www.redditstatic.com/ads/pixel.js",
            "https://snap.licdn.com/li.lms-analytics/insight.min.js",
            "https://static.ads-twitter.com/uwt.js",
            "https://www.googleadservices.com/pagead/conversion_async.js",
            "https://static.hotjar.com/c/hotjar-1683409.js?sv=7",
            "https://www.google-analytics.com/analytics.js",
            "https://consent.cookiebot.com/da52fc49-8e48-42b7-9ad3-c219404f6f92/cc.js?renew=false&referer=cpanel.net&dnt=false",
            "https://consentcdn.cookiebot.com/consentconfig/da52fc49-8e48-42b7-9ad3-c219404f6f92/cpanel.net/configuration.js",
            "https://www.googletagmanager.com/gtm.js?id=GTM-WB4LHQ4",
            "https://www.bugherd.com/sidebarv2.js?apikey=kmu00qbvuigehexs5chefq",
            "https://consent.cookiebot.com/uc.js",
            "https://cpanel.net/wp-includes/js/wp-emoji-release.min.js?ver=5.6",
            "https://script.hotjar.com/modules.0076bf93c385ddf0ff58.js",
            "https://googleads.g.doubleclick.net/pagead/viewthroughconversion/728582492/?random=1650418372747&cv=9&fst=1650418372747&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&hn=www.googleadservices.com&us_privacy=1---&async=1&rfmt=3&fmt=4",
            "https://www.googleadservices.com/pagead/conversion/854235671/?random=1650418372749&cv=9&fst=1650418372749&num=1&value=0&label=PRNxCIWemu8BEJe0qpcD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg4i1&sendb=1&ig=1&data=ads_data_redaction%3Dfalse&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&gcs=G111&did=dMWZhNz&edid=dMWZhNz&auid=2050955691.1650418373&capi=2&hn=www.googleadservices.com&btty",
            "https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https%3A%2F%2Fcpanel.net%2F&referrer=",
            "https://www.1.cpanel.net/analytics?conly=true&visitor_id=311218274&visitor_id_sign=3e1116a56bfd91923fe15cac565b502779c6ec3fe7449557f3940ba04e77079951b9efb044c2275f4211d26742585a9d14544eae&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https://cpanel.net/&referrer=",
            "https://script.hotjar.com/survey-v2.3716506838f2208ab9e2.js",
            "https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/script.js?ver=5.6",
            "https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/cpbase.js?ver=5.6",
            "https://cpanel.net/wp-includes/js/wp-embed.min.js?ver=5.6",
            "https://pro.fontawesome.com/releases/v5.13.1/css/all.css",
            "https://vars.hotjar.com/box-4924254a9ce4dc9b959b6e4a9b662d60.html",
            "https://consentcdn.cookiebot.com/sdk/bc-v4.min.html",
            "https://cpanel.net/wp-content/themes/cPbase/style.css?ver=5.6",
            "https://cpanel.net/wp-includes/css/dist/block-library/style.min.css?ver=5.6",
            "https://fonts.googleapis.com/css?family=Open+Sans:100,200,300,400,500,600,700%7CMontserrat:100,200,300,400,500,600,700",
            "https://cpanel.net/wp-content/themes/cPbase/assets/css/version96.css",
            "https://cpanel.net/wp-content/themes/cPbase/assets/css/roadmap.css",
            "xfe-URL-pi.pardot.com-stix2-2.1-export.json",
            "xfe-URL-Cpanel.net-stix2-2.1-export.json",
            "https://secure.gaug.es/track.js",
            "https://www.googletagmanager.com/gtm.js?id=GTM-WRDF3CB",
            "https://149371662.v2.pressablecdn.com/wp-includes/js/jquery/jquery.js",
            "https://149371662.v2.pressablecdn.com/wp-content/plugins/user-verification/assets/front/js/scripts-otp.js",
            "https://player.vimeo.com/video/571271613",
            "https://bid.g.doubleclick.net/xbbe/pixel?d=KAE"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "Tunisia"
          ],
          "malware_families": [
            {
              "id": "Qe",
              "display_name": "Qe",
              "target": null
            },
            {
              "id": "hj",
              "display_name": "hj",
              "target": null
            },
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1036",
              "name": "Masquerading",
              "display_name": "T1036 - Masquerading"
            },
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1218",
              "name": "Signed Binary Proxy Execution",
              "display_name": "T1218 - Signed Binary Proxy Execution"
            },
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 3487,
            "URL": 10195,
            "domain": 1182,
            "FileHash-SHA256": 815,
            "FileHash-MD5": 3,
            "FileHash-SHA1": 1
          },
          "indicator_count": 15683,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 73,
          "modified_text": "1431 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "62449fc038a68f81313fb10a",
          "name": "This is SPYWARE - Stealth Persistent Obfuscated Evolved over min 7 years",
          "description": "",
          "modified": "2022-04-29T00:05:19.794000",
          "created": "2022-03-30T18:21:52.956000",
          "tags": [
            "\u7f51\u76d8",
            "\u767e\u5ea6\u7f51\u76d8",
            "\u767e\u5ea6\u4e91",
            "\u7f51\u7edcu\u76d8",
            "\u7f51\u7edc\u786c\u76d8",
            "\u514d\u8d39\u7f51\u76d8",
            "\u7f51\u76d8\u4e0b\u8f7d",
            "\u7f51\u76d8\u8d44\u6e90",
            "\u540c\u6b65",
            "\u4e91\u5b58\u50a8",
            "\u5916\u94fe\u5206\u4eab",
            "\u79bb\u7ebf\u4e0b\u8f7d",
            "windows android",
            "2022",
            "baidu",
            "bccwp",
            "a018",
            "bb12",
            "nmclfl1 https",
            "kvt49l"
          ],
          "references": [
            "http://blockpage.bt.com/pcstaticpage/blocked.html?list=BT-file_sharing&policy=Z2xvYmFsLWN1c3RvbS00N2Y0NzlkYy1kNmVlLTQ3MjMtOTljMy1jODhmODk4YTJjNDQ=;&view=NDdmNDc5ZGMtZDZlZS00NzIzLTk5YzMtYzg4Zjg5OGEyYzQ0;&originalUrl=aHR0cDovL3Bhbi5iYWlkdS5jb20v",
            "http://cybertran.baidu.com/download#pan"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 12,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "dorkingbeauty1",
            "id": "80137",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 3523,
            "hostname": 2430,
            "FileHash-SHA256": 2041,
            "domain": 1552,
            "CVE": 1,
            "FileHash-MD5": 11,
            "FileHash-SHA1": 3
          },
          "indicator_count": 9561,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 403,
          "modified_text": "1451 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://googleads.g.doubleclick.net/pagead/viewthroughconversion/728582492/?random=1650418372747&cv=9&fst=1650418372747&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&hn=www.googleadservices.com&us_privacy=1---&async=1&rfmt=3&fmt=4",
        "https://static.hotjar.com/c/hotjar-1683409.js?sv=7",
        "https://cpanel.net/wp-content/themes/cPbase/style.css?ver=5.6",
        "https://consent.cookiebot.com/uc.js",
        "https://consent.cookiebot.com/da52fc49-8e48-42b7-9ad3-c219404f6f92/cc.js?renew=false&referer=cpanel.net&dnt=false",
        "https://connect.facebook.net/signals/config/285857426541675?v=2.9.57&r=stable",
        "https://vars.hotjar.com/box-4924254a9ce4dc9b959b6e4a9b662d60.html",
        "https://fonts.googleapis.com/css?family=Open+Sans:100,200,300,400,500,600,700%7CMontserrat:100,200,300,400,500,600,700",
        "https://www.googleadservices.com/pagead/conversion_async.js",
        "https://bid.g.doubleclick.net/xbbe/pixel?d=KAE",
        "https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/cpbase.js?ver=5.6",
        "https://www.bugherd.com/sidebarv2.js?apikey=kmu00qbvuigehexs5chefq",
        "https://snap.licdn.com/li.lms-analytics/insight.min.js",
        "https://cpanel.net/wp-includes/js/wp-emoji-release.min.js?ver=5.6",
        "http://blockpage.bt.com/pcstaticpage/blocked.html?list=BT-file_sharing&policy=Z2xvYmFsLWN1c3RvbS00N2Y0NzlkYy1kNmVlLTQ3MjMtOTljMy1jODhmODk4YTJjNDQ=;&view=NDdmNDc5ZGMtZDZlZS00NzIzLTk5YzMtYzg4Zjg5OGEyYzQ0;&originalUrl=aHR0cDovL3Bhbi5iYWlkdS5jb20v",
        "https://www.googletagmanager.com/gtm.js?id=GTM-WRDF3CB",
        "https://cpanel.net/wp-includes/js/wp-embed.min.js?ver=5.6",
        "https://cpanel.net/wp-content/themes/cPbase/assets/css/roadmap.css",
        "http://cybertran.baidu.com/download#pan",
        "https://www.googleadservices.com/pagead/conversion/854235671/?random=1650418372749&cv=9&fst=1650418372749&num=1&value=0&label=PRNxCIWemu8BEJe0qpcD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg4i1&sendb=1&ig=1&data=ads_data_redaction%3Dfalse&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&gcs=G111&did=dMWZhNz&edid=dMWZhNz&auid=2050955691.1650418373&capi=2&hn=www.googleadservices.com&btty",
        "https://pi.pardot.com/pd.js",
        "https://player.vimeo.com/video/571271613",
        "https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https%3A%2F%2Fcpanel.net%2F&referrer=",
        "xfe-URL-Cpanel.net-stix2-2.1-export.json",
        "https://consentcdn.cookiebot.com/consentconfig/da52fc49-8e48-42b7-9ad3-c219404f6f92/cpanel.net/configuration.js",
        "https://www.virustotal.com/graph/embed/g197a8ab9e32b4ad287432f2c66b98cd12d25427f4acd4696a93447988db3f5c7",
        "https://www.1.cpanel.net/analytics?conly=true&visitor_id=311218274&visitor_id_sign=3e1116a56bfd91923fe15cac565b502779c6ec3fe7449557f3940ba04e77079951b9efb044c2275f4211d26742585a9d14544eae&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https://cpanel.net/&referrer=",
        "https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/script.js?ver=5.6",
        "https://149371662.v2.pressablecdn.com/wp-includes/js/jquery/jquery.js",
        "xfe-URL-Cpanel.com-stix2-2.1-export.json",
        "https://www.google-analytics.com/analytics.js",
        "https://script.hotjar.com/modules.0076bf93c385ddf0ff58.js",
        "xfe-URL-pi.pardot.com-stix2-2.1-export.json",
        "https://cpanel.net/wp-includes/css/dist/block-library/style.min.css?ver=5.6",
        "https://consentcdn.cookiebot.com/sdk/bc-v4.min.html",
        "https://script.hotjar.com/survey-v2.3716506838f2208ab9e2.js",
        "https://secure.gaug.es/track.js",
        "https://www.redditstatic.com/ads/pixel.js",
        "https://pro.fontawesome.com/releases/v5.13.1/css/all.css",
        "https://www.googletagmanager.com/gtm.js?id=GTM-WB4LHQ4",
        "https://cpanel.net/wp-content/themes/cPbase/assets/css/version96.css",
        "https://149371662.v2.pressablecdn.com/wp-content/plugins/user-verification/assets/front/js/scripts-otp.js",
        "https://static.ads-twitter.com/uwt.js"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Qe",
            "Reduceright",
            "Hj"
          ],
          "industries": [],
          "unique_indicators": 44317
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/sl-reverse.com",
    "whois": "http://whois.domaintools.com/sl-reverse.com",
    "domain": "sl-reverse.com",
    "hostname": "52.3b.089f.ip4.static.sl-reverse.com"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 8,
  "pulses": [
    {
      "id": "65708fb744b759b0ba42d5f6",
      "name": "houston.... I think we have a problem  - i dunno know where hell begins or ends anymore",
      "description": "",
      "modified": "2023-12-06T15:13:59.984000",
      "created": "2023-12-06T15:13:59.984000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 3027,
        "hostname": 1561,
        "URL": 7817,
        "domain": 638,
        "email": 1
      },
      "indicator_count": 13044,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "865 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708e5ea05c09e3364f11cd",
      "name": "184.173.179.55 asn36351 theplanet.com 16-1-2016",
      "description": "",
      "modified": "2023-12-06T15:08:14.591000",
      "created": "2023-12-06T15:08:14.591000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1058,
        "domain": 167,
        "hostname": 866,
        "URL": 3191,
        "CVE": 1
      },
      "indicator_count": 5283,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "865 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708c1c5e2cc4dfe8d0ed97",
      "name": "CPANEL-TUCOWS \u2014malware hosting",
      "description": "",
      "modified": "2023-12-06T14:58:36.254000",
      "created": "2023-12-06T14:58:36.254000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 815,
        "hostname": 3487,
        "domain": 1182,
        "URL": 10194,
        "FileHash-MD5": 3,
        "FileHash-SHA1": 1
      },
      "indicator_count": 15682,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 111,
      "modified_text": "865 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708a434c8bf557c17688e0",
      "name": "This is SPYWARE - Stealth Persistent Obfuscated Evolved over min 7 years",
      "description": "",
      "modified": "2023-12-06T14:50:43.331000",
      "created": "2023-12-06T14:50:43.331000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 2041,
        "domain": 1552,
        "URL": 3523,
        "hostname": 2430,
        "CVE": 1,
        "FileHash-MD5": 11,
        "FileHash-SHA1": 3
      },
      "indicator_count": 9561,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 111,
      "modified_text": "865 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "62b70cd2f4eea868db4aed29",
      "name": "houston.... I think we have a problem  - i dunno know where hell begins or ends anymore",
      "description": "should we create a new cc ? maybe RuKrCn",
      "modified": "2022-07-25T00:04:42.145000",
      "created": "2022-06-25T13:25:38.439000",
      "tags": [],
      "references": [
        "https://www.virustotal.com/graph/embed/g197a8ab9e32b4ad287432f2c66b98cd12d25427f4acd4696a93447988db3f5c7"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 9,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "dorkingbeauty1",
        "id": "80137",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 7817,
        "FileHash-SHA256": 3027,
        "hostname": 1561,
        "domain": 638,
        "email": 1
      },
      "indicator_count": 13044,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 396,
      "modified_text": "1364 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6282e4efa1c1999e0091a9b0",
      "name": "184.173.179.55 asn36351 theplanet.com 16-1-2016",
      "description": "",
      "modified": "2022-06-15T00:01:21.489000",
      "created": "2022-05-16T23:57:35.661000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "dorkingbeauty1",
        "id": "80137",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 3191,
        "hostname": 866,
        "FileHash-SHA256": 1058,
        "domain": 167,
        "CVE": 1
      },
      "indicator_count": 5283,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 392,
      "modified_text": "1404 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "625f6d2300f3002b1d0f8a68",
      "name": "CPANEL-TUCOWS \u2014malware hosting",
      "description": "FBEvents-PostalCodeType, a new type of phone number type, has been added to the list of \"signals\" that can be controlled by a specialised operator.",
      "modified": "2022-05-19T00:00:49.028000",
      "created": "2022-04-20T02:17:07.272000",
      "tags": [
        "tucows",
        "vimeo",
        "enter otp",
        "foruserlogin",
        "username",
        "email address",
        "phone number",
        "click",
        "null",
        "otpviamail",
        "otpviasms",
        "error",
        "regexp",
        "edge",
        "elem",
        "function",
        "handle",
        "return",
        "expando",
        "match",
        "selector",
        "android",
        "false",
        "date",
        "target",
        "class",
        "mark",
        "copy",
        "capture",
        "seed",
        "pass",
        "enough",
        "code",
        "never",
        "core",
        "local",
        "verify",
        "fall",
        "accept",
        "done",
        "find",
        "internal",
        "inject",
        "possible",
        "prop",
        "trigger",
        "qe",
        "number",
        "string",
        "copyright",
        "uint8array",
        "xhfunction",
        "yhfunction",
        "gtmwrdf3cb",
        "host",
        "path",
        "gaugescookie",
        "gaugesuniqueday",
        "gaugesgauges",
        "slice",
        "image",
        "gaugestracker",
        "gaugesunique",
        "script",
        "closure library",
        "typeerror",
        "symbol",
        "array int8array",
        "caregexp",
        "legacy",
        "extra",
        "bootstrap",
        "medium",
        "large",
        "segoe ui",
        "roboto",
        "oxygensans",
        "ubuntu",
        "cantarell",
        "helvetica neue",
        "dataalignleft",
        "figcaption",
        "video",
        "ff6c2c",
        "styles",
        "badges",
        "small",
        "woff2",
        "fontface",
        "sans",
        "u1c801c88",
        "u20b4",
        "u2de02dff",
        "ua640a69f",
        "ufe2efe2f",
        "u04b004b1",
        "u2116",
        "arial",
        "helvetica",
        "montserrat",
        "productnav",
        "secondarynav",
        "typecheckbox",
        "menlo",
        "monaco",
        "consolas",
        "twitter",
        "font awesome",
        "license",
        "brands",
        "duotone",
        "msie",
        "russia",
        "paypal",
        "enduser license",
        "agreement",
        "europe",
        "typeof t",
        "typeof e",
        "typeof",
        "version",
        "attr",
        "pseudo",
        "object",
        "array",
        "invalid attempt",
        "typeof symbol",
        "survey",
        "trident",
        "form",
        "fullscreen",
        "property",
        "311218982",
        "textjavascript",
        "piscriptnum",
        "hj",
        "hotjar",
        "email",
        "telefon",
        "meta",
        "cookie",
        "keypress",
        "live",
        "generic",
        "window",
        "widget",
        "ciudad",
        "adore",
        "experiment",
        "mutation",
        "udc66udc67",
        "ud83d",
        "ufe0f",
        "ud83e",
        "udc68udc69",
        "udfcbudfcc",
        "u2640u2642",
        "source",
        "ud83dudc6cud83c",
        "cookiebot",
        "iabv2",
        "jsonversion",
        "cookie script",
        "methodstrict",
        "ticket",
        "id attribute",
        "cookiebot setup",
        "cookieconsent",
        "project",
        "reduceright",
        "trackevent",
        "pageview",
        "gtmwb4lhq4",
        "void",
        "pfunction",
        "contenttype",
        "zfunction",
        "bfunction",
        "mvoid",
        "ofunction",
        "thank",
        "f39c11",
        "quick question",
        "difficult",
        "easy",
        "poll",
        "typeof window",
        "invalid uuid",
        "functional",
        "member",
        "hnew regexp",
        "qfunction",
        "adview",
        "addbillinginfo",
        "addtocart",
        "addtolist",
        "contact",
        "download",
        "install",
        "signup",
        "addtowishlist",
        "lead",
        "custom",
        "typeof require",
        "sha256",
        "viewcontent",
        "search",
        "iterator",
        "boolean",
        "service",
        "phonenumber",
        "facebook",
        "javascript",
        "1cend"
      ],
      "references": [
        "xfe-URL-Cpanel.com-stix2-2.1-export.json",
        "https://pi.pardot.com/pd.js",
        "https://connect.facebook.net/signals/config/285857426541675?v=2.9.57&r=stable",
        "https://www.redditstatic.com/ads/pixel.js",
        "https://snap.licdn.com/li.lms-analytics/insight.min.js",
        "https://static.ads-twitter.com/uwt.js",
        "https://www.googleadservices.com/pagead/conversion_async.js",
        "https://static.hotjar.com/c/hotjar-1683409.js?sv=7",
        "https://www.google-analytics.com/analytics.js",
        "https://consent.cookiebot.com/da52fc49-8e48-42b7-9ad3-c219404f6f92/cc.js?renew=false&referer=cpanel.net&dnt=false",
        "https://consentcdn.cookiebot.com/consentconfig/da52fc49-8e48-42b7-9ad3-c219404f6f92/cpanel.net/configuration.js",
        "https://www.googletagmanager.com/gtm.js?id=GTM-WB4LHQ4",
        "https://www.bugherd.com/sidebarv2.js?apikey=kmu00qbvuigehexs5chefq",
        "https://consent.cookiebot.com/uc.js",
        "https://cpanel.net/wp-includes/js/wp-emoji-release.min.js?ver=5.6",
        "https://script.hotjar.com/modules.0076bf93c385ddf0ff58.js",
        "https://googleads.g.doubleclick.net/pagead/viewthroughconversion/728582492/?random=1650418372747&cv=9&fst=1650418372747&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&hn=www.googleadservices.com&us_privacy=1---&async=1&rfmt=3&fmt=4",
        "https://www.googleadservices.com/pagead/conversion/854235671/?random=1650418372749&cv=9&fst=1650418372749&num=1&value=0&label=PRNxCIWemu8BEJe0qpcD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg4i1&sendb=1&ig=1&data=ads_data_redaction%3Dfalse&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&gcs=G111&did=dMWZhNz&edid=dMWZhNz&auid=2050955691.1650418373&capi=2&hn=www.googleadservices.com&btty",
        "https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https%3A%2F%2Fcpanel.net%2F&referrer=",
        "https://www.1.cpanel.net/analytics?conly=true&visitor_id=311218274&visitor_id_sign=3e1116a56bfd91923fe15cac565b502779c6ec3fe7449557f3940ba04e77079951b9efb044c2275f4211d26742585a9d14544eae&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https://cpanel.net/&referrer=",
        "https://script.hotjar.com/survey-v2.3716506838f2208ab9e2.js",
        "https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/script.js?ver=5.6",
        "https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/cpbase.js?ver=5.6",
        "https://cpanel.net/wp-includes/js/wp-embed.min.js?ver=5.6",
        "https://pro.fontawesome.com/releases/v5.13.1/css/all.css",
        "https://vars.hotjar.com/box-4924254a9ce4dc9b959b6e4a9b662d60.html",
        "https://consentcdn.cookiebot.com/sdk/bc-v4.min.html",
        "https://cpanel.net/wp-content/themes/cPbase/style.css?ver=5.6",
        "https://cpanel.net/wp-includes/css/dist/block-library/style.min.css?ver=5.6",
        "https://fonts.googleapis.com/css?family=Open+Sans:100,200,300,400,500,600,700%7CMontserrat:100,200,300,400,500,600,700",
        "https://cpanel.net/wp-content/themes/cPbase/assets/css/version96.css",
        "https://cpanel.net/wp-content/themes/cPbase/assets/css/roadmap.css",
        "xfe-URL-pi.pardot.com-stix2-2.1-export.json",
        "xfe-URL-Cpanel.net-stix2-2.1-export.json",
        "https://secure.gaug.es/track.js",
        "https://www.googletagmanager.com/gtm.js?id=GTM-WRDF3CB",
        "https://149371662.v2.pressablecdn.com/wp-includes/js/jquery/jquery.js",
        "https://149371662.v2.pressablecdn.com/wp-content/plugins/user-verification/assets/front/js/scripts-otp.js",
        "https://player.vimeo.com/video/571271613",
        "https://bid.g.doubleclick.net/xbbe/pixel?d=KAE"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "Tunisia"
      ],
      "malware_families": [
        {
          "id": "Qe",
          "display_name": "Qe",
          "target": null
        },
        {
          "id": "hj",
          "display_name": "hj",
          "target": null
        },
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1036",
          "name": "Masquerading",
          "display_name": "T1036 - Masquerading"
        },
        {
          "id": "T1056",
          "name": "Input Capture",
          "display_name": "T1056 - Input Capture"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1218",
          "name": "Signed Binary Proxy Execution",
          "display_name": "T1218 - Signed Binary Proxy Execution"
        },
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 10,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 3487,
        "URL": 10195,
        "domain": 1182,
        "FileHash-SHA256": 815,
        "FileHash-MD5": 3,
        "FileHash-SHA1": 1
      },
      "indicator_count": 15683,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 73,
      "modified_text": "1431 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "62449fc038a68f81313fb10a",
      "name": "This is SPYWARE - Stealth Persistent Obfuscated Evolved over min 7 years",
      "description": "",
      "modified": "2022-04-29T00:05:19.794000",
      "created": "2022-03-30T18:21:52.956000",
      "tags": [
        "\u7f51\u76d8",
        "\u767e\u5ea6\u7f51\u76d8",
        "\u767e\u5ea6\u4e91",
        "\u7f51\u7edcu\u76d8",
        "\u7f51\u7edc\u786c\u76d8",
        "\u514d\u8d39\u7f51\u76d8",
        "\u7f51\u76d8\u4e0b\u8f7d",
        "\u7f51\u76d8\u8d44\u6e90",
        "\u540c\u6b65",
        "\u4e91\u5b58\u50a8",
        "\u5916\u94fe\u5206\u4eab",
        "\u79bb\u7ebf\u4e0b\u8f7d",
        "windows android",
        "2022",
        "baidu",
        "bccwp",
        "a018",
        "bb12",
        "nmclfl1 https",
        "kvt49l"
      ],
      "references": [
        "http://blockpage.bt.com/pcstaticpage/blocked.html?list=BT-file_sharing&policy=Z2xvYmFsLWN1c3RvbS00N2Y0NzlkYy1kNmVlLTQ3MjMtOTljMy1jODhmODk4YTJjNDQ=;&view=NDdmNDc5ZGMtZDZlZS00NzIzLTk5YzMtYzg4Zjg5OGEyYzQ0;&originalUrl=aHR0cDovL3Bhbi5iYWlkdS5jb20v",
        "http://cybertran.baidu.com/download#pan"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 12,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "dorkingbeauty1",
        "id": "80137",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 3523,
        "hostname": 2430,
        "FileHash-SHA256": 2041,
        "domain": 1552,
        "CVE": 1,
        "FileHash-MD5": 11,
        "FileHash-SHA1": 3
      },
      "indicator_count": 9561,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 403,
      "modified_text": "1451 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://52.3b.089f.ip4.static.sl-reverse.com",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://52.3b.089f.ip4.static.sl-reverse.com",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1776643133.1908755
}